CVE-2013-5911

Cross-site scripting XSS vulnerability in devform.php in Tenable SecurityCenter 4.6 through 4.7 allows remote attackers to inject arbitrary web script or HTML via the message parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in devform.php in Tenable SecurityCenter 4.6 through 4.7 allows remote attackers to inject arbitrary web script or HTML via the message parameter...

CVE-2013-5911

The CVE-2013-5911 entry describes a cross-site scripting (XSS) vulnerability in Tenable SecurityCenter’s devform.php, affecting versions 4.6 through 4.7. The underlying cause is improper validation of user-supplied input to the message parameter, allowing an attacker to inject arbitrary HTML/Java...

CVE-2013-5911

Cross-site scripting XSS vulnerability in devform.php in Tenable SecurityCenter 4.6 through 4.7 allows remote attackers to inject arbitrary web script or HTML via the message parameter...

Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.04 : pyopenssl vulnerability (USN-1965-1)

It was discovered that pyOpenSSL did not properly handle certificates with NULL characters in the Subject Alternative Name field. An attacker could exploit this to perform a man in the middle attack to view sensitive information or alter encrypted communications. Note that Tenable Network Securit...

Fedora 19 : proftpd-1.3.4d-4.fc19 (2013-16798)

This update addresses an issue with modsftp and modsftppam in which a malicious client could cause the server to make extremely large memory requests and potentially crash. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

IBM WebSphere Service Registry and Repository Installed

IBM WebSphere Service Registry and Repository, a software life cycle management application, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70069; scriptversion"1.13"; scriptsetattributeattribute:"pluginmodificationdate",...

Fedora 20 : lightdm-1.7.15-1.fc20 (2013-16293)

New upstream bugfix release : - Correctly set permissions on Xauthority file. - Correctly set $XDGCURRENTDESKTOP for non-autologin sessions - Fix overallocation of array for strings from greeter. - Set XDGVTNR=1 as a fallback if using SeatUnity without a functioning compositor or working VT...

Fedora 20 : moodle-2.5.2-1.fc20 (2013-16410)

Moodle upstream has released upstream 2.3.9, 2.4.6, and 2.5.2 versions : http://docs.moodle.org/dev/Moodle2.3.9releasenotes http://docs.moodle.org/dev/Moodle2.4.6releasenotes http://docs.moodle.org/dev/Moodle2.5.2releasenotes These releases contain unspecified security fixes, the nature of which...

Fedora 19 : moodle-2.4.6-1.fc19 (2013-16476)

Moodle upstream has released upstream 2.3.9, 2.4.6, and 2.5.2 versions : http://docs.moodle.org/dev/Moodle2.3.9releasenotes http://docs.moodle.org/dev/Moodle2.4.6releasenotes http://docs.moodle.org/dev/Moodle2.5.2releasenotes These releases contain unspecified security fixes, the nature of which...

Fedora 18 : moodle-2.3.9-1.fc18 (2013-16464)

Moodle upstream has released upstream 2.3.9, 2.4.6, and 2.5.2 versions : http://docs.moodle.org/dev/Moodle2.3.9releasenotes http://docs.moodle.org/dev/Moodle2.4.6releasenotes http://docs.moodle.org/dev/Moodle2.5.2releasenotes These releases contain unspecified security fixes, the nature of which...

Oracle Linux 5 / 6 : firefox (ELSA-2013-1268)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1268 advisory. firefox 17.0.9-1.0.1.el64 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat ones 17.0.9-1 - Update to 17.0.9 ESR 17.0.8-4 ...

Fedora 19 : wireshark-1.10.2-5.fc19 (2013-16696)

Convert automake/pkgconfig files into patches better upstream integration - Restored category in the .desktop file - Install another one necessary header file - framedatasequence.h - Add basic OpenFlow dissector - Ver. 1.10.2 - Ver. 1.10.1 fix missing wssymbolexport.h - Ver. 1.10.2 - Ver. 1.10.1...

Cisco Firewall Services Module (FWSM) Version

The remote host has a Cisco Firewall Services Module FWSM. It is possible to read the FWSM version by connecting to the switch using SSH. TRUSTED...

DISA Security Readiness Review Scripts for Solaris Local Privilege Escalation

The remote host has a copy of the DISA Security Readiness Review SRR Scripts for Solaris that is affected by a local privilege escalation vulnerability. The vulnerability could be leveraged to execute files in arbitrary directories with root privileges, as long as such files are named 'java',...

Fedora 19 : lightdm-1.6.2-1.fc19 (2013-16388)

New stable bugfix, security release: include : - Correctly set permissions on Xauthority file. - Fix bug where seat failure before D-Bus acquired would not stop daemon - Stop using gfilesetcontents - it can leave intermediate files around See also:...

Fedora 19 : asterisk-11.5.1-2.fc19 (2013-15560)

Thu Aug 29 2013 Jeffrey Ollie - 11.5.1-2 : - Enable hardened build BZ954338 - Significant clean ups - Thu Aug 29 2013 Jeffrey Ollie - 11.5.1-1 : - The Asterisk Development Team has announced security releases for Certified - Asterisk 1.8.15, 11.2, and Asterisk 1.8, 10, and 11. The available...

Fedora 18 : fedora-business-cards-1-0.1.beta1.fc18 (2013-0416)

Provides a slew of enhancements to fedora-business-cards, including dynamic creation of the card to a given size, new fonts, and an almost-completely redone backend. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenabl...

Fedora 18 : LibRaw-0.14.8-3.fc18.20120830git98d925 (2013-15576)

Raphael Geissert reported two denial of service flaws in LibRaw 1 : CVE-2013-1438 : Specially crafted photo files may trigger a division by zero, an infinite loop, or a NULL pointer dereference in libraw leading to denial of service in applications using the library. These vulnerabilities appear ...

Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.04 : python-httplib2 vulnerability (USN-1948-1)

It was discovered that httplib2 only validated SSL certificates on the first request to a connection, and didn't report validation failures on subsequent requests. If a remote attacker were able to perform a man-in-the-middle attack, this flaw could possibly be exploited in certain scenarios to...