Fedora 19 : lighttpd-1.4.35-1.fc19 (2014-3947)

1.4.35, fixes SA-2014-01, CVE-2014-2323, CVE-2014-2324 1 http://seclists.org/oss-sec/2014/q1/561 2 http://download.lighttpd.net/lighttpd/security/lighttpdsa201401.txt 3 http://www.lighttpd.net/2014/3/12/1.4.35/ Note that Tenable Network Security has extracted the preceding description block...

Fedora 20 : lighttpd-1.4.35-1.fc20 (2014-3887)

1.4.35, fixes SA-2014-01, CVE-2014-2323, CVE-2014-2324 1 http://seclists.org/oss-sec/2014/q1/561 2 http://download.lighttpd.net/lighttpd/security/lighttpdsa201401.txt 3 http://www.lighttpd.net/2014/3/12/1.4.35/ Note that Tenable Network Security has extracted the preceding description block...

Cisco AsyncOS for Email Security Appliances Software Remote Code Execution (CSCug79377)

According to its self-reported version and configuration, the Cisco AsyncOS running on the remote Cisco Email Security ESA appliance is affected by a remote code execution vulnerability in the Safelist/Blocklist SLBL function due to improper handling of SLBL database files. An authenticated, remo...

Palo Alto Networks PAN-OS < 4.0.9 / 4.1.x < 4.1.2 Multiple Command Injections

The remote host is running a version of Palo Alto Networks PAN-OS prior to 4.0.9 / 4.1.2. It is, therefore, affected by multiple command injection vulnerabilities : - A vulnerability exists that allows an authenticated user to inject arbitrary shell commands via the CLI. CVE-2012-6595 /...

Palo Alto Networks PAN-OS < 4.0.8 Multiple Vulnerabilities

The remote host is running a version of Palo Alto Networks PAN-OS prior to 4.0.8. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists due to overly verbose error messages. An attacker can exploit this vulnerability by sending specially crafted...

Fedora 19 : drupal6-image_resize_filter-1.14-1.fc19 (2014-2612)

Updated to 1.14 - Release notes: https://drupal.org/node/2194065 - SA-CONTRIB-2014-017: https://drupal.org/node/2194655 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...

Fedora 20 : drupal6-ctools-1.11-1.fc20 (2014-2531)

Updated to 1.11 - Release notes: https://drupal.org/node/2194547 - SA-CONTRIB-2014-013 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible withou...

Fedora 19 : drupal7-7.26-1.fc19 (2014-0983)

Fix for SA-CORE-2014-001 : https://drupal.org/drupal-7.26-release-notes Latest upstream. https://drupal.org/drupal-7.25-release-notes Latest upstream. https://drupal.org/drupal-7.25-release-notes Note that Tenable Network Security has extracted the preceding description block directly from the...

Fedora 20 : drupal7-7.26-1.fc20 (2014-1015)

Fix for SA-CORE-2014-001 : https://drupal.org/drupal-7.26-release-notes Latest upstream. https://drupal.org/drupal-7.25-release-notes Latest upstream. https://drupal.org/drupal-7.25-release-notes Note that Tenable Network Security has extracted the preceding description block directly from the...

Debian Security Advisory DSA 2847-1 (drupal7 - several vulnerabilities)

Multiple vulnerabilities have been discovered in Drupal, a fully-featured content management framework. The Common Vulnerabilities and Exposures project identifies the following issues: CVE-2014-1475 Christian Mainka and Vladislav Mladenov reported a vulnerability in the OpenID module that allows...

Fedora 19 : drupal7-entity-1.3-1.fc19 (2014-0508)

Updated to 1.3 1.3 - Release notes: https://drupal.org/node/2169589 - SA-CONTRIB-2014-001: https://drupal.org/node/2169595 - CVE-2014-1398, CVE-2014-1399, CVE-2014-1400 1.2 - Release notes: https://drupal.org/node/2065197 - SA-CONTRIB-2013-068: https://drupal.org/node/2065207 1.1 - Release notes:...

FreeBSD-SA-14:01.bsnmpd

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-14:01.bsnmpd Security Advisory The FreeBSD Project Topic: bsnmpd remote denial of service vulnerability Category: contrib Module: bsnmp Announced: 2014-01-14...

Cisco WAAS Mobile Server < 3.5.5 Remote Code Execution

The remote host has a version of Cisco WAAS Mobile Server prior to version 3.5.5. It is, therefore, affected by a remote code execution vulnerability that can be triggered via a specially crafted HTTP POST request with a directory traversal string to the ReportReceiver. C Tenable Network Security...

Debian Security Advisory DSA 2834-1 (typo3-src - several vulnerabilities)

Several vulnerabilities were discovered in TYPO3, a content management system. This update addresses cross-site scripting, information disclosure, mass assignment, open redirection and insecure unserialize vulnerabilities and corresponds to TYPO3-CORE-SA-2013-004 . OpenVAS Vulnerability Test $Id:...

CVE-2013-5196

WebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-12-16-1...

Fedora 20 : drupal6-6.29-1.fc20 (2013-22352)

Update to upstream 6.29 release for security fixes - Upstream changelog for this release is available at https://drupal.org/drupal-6.29-release-notes - SA-CORE-2013-003 - Drupal core - Multiple vulnerabilities - http://drupal.org/SA-CORE-2013-003 Note that Tenable Network Security has extracted...

Fedora 20 : drupal7-7.24-1.fc20 (2013-21956)

Update to upstream 7.24 release for security fixes - Upstream changelog for this release is available at https://drupal.org/drupal-7.24-release-notes - SA-CORE-2013-003 - Drupal core - Multiple vulnerabilities - http://drupal.org/SA-CORE-2013-003 Note that Tenable Network Security has extracted...

Fedora 19 : drupal6-6.29-1.fc19 (2013-22507)

Update to upstream 6.29 release for security fixes - Upstream changelog for this release is available at https://drupal.org/drupal-6.29-release-notes - SA-CORE-2013-003 - Drupal core - Multiple vulnerabilities - http://drupal.org/SA-CORE-2013-003 Note that Tenable Network Security has extracted...

CVE-2013-6180

The CVE-2013-6180 issue affects EMC RSA Security Analytics (SA) 10.x prior to 10.3 and RSA NetWitness NextGen 9.8, where SA Core does not verify that requests originate from the SA REST UI, allowing untrusted user agents (e.g., web browsers) to bypass access restrictions. This could enable core-a...

[ MDVSA-2013:287 ] drupal

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2013:287 http://www.mandriva.com/en/support/security/ Package : drupal Date : November 26, 2013 Affected: Business Server 1.0 Problem Description: Multiple security issues was identified and fixed in drupal: Drup...