Apple Safari Multiple Vulnerabilities-01 (Nov 2015) - Mac OS X

Apple Safari is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari"; ifdescription...

pfSense Multiple Vulnerabilities (Jun 2016)

pfSense is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:pfsense:pfsense"; if description...

Multiple EMC RSA Products ESA-2015-081 Multiple Security Vulnerabilities

受影响的产品： RSA BSAFE Micro Edition Suite MES all 4.1.x versions prior to 4.1.3 RSA BSAFE Micro Edition Suite MES all 4.0.x versions prior to 4.0.8 RSA BSAFE Crypto-C Micro Edition Crypto-C ME 4.1 RSA BSAFE Crypto-C Micro Edition Crypto-C ME all versions prior to 4.0.4 RSA BSAFE Crypto-J all versions...

SOL16878 - PAM vulnerabilities CVE-2011-3148 and CVE-2011-3149

Note: As of February 17, 2015, AskF5 Security Advisory articles include the Severity value. Security Advisory articles published before this date do not list a Severity value. Recommended Action None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL995...

PT-2015-6098 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.1.2 Description: The issue is related to a race condition in the Linux kernel, specifically in the net/sctp/socket.c file. This condition allows local users to cause a denial of service, resulting in list...

DSA-3155-1 postgresql-9.1 - security update

Bulletin has no description...

PT-2014-9066 · Oracle +6 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Server versions 5.5.40 and earlier Oracle MySQL Server versions 5.6.21 and earlier Description: The issue affects confidentiality and is related to privileges, specifically foreign keys, in the server's security component. It can...

Adobe AIR Multiple Vulnerabilities (APSB14-24) - Mac OS X

Adobe AIR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer"; ifdescription...

Joomla! Unsupported Version Detection

According to its self-reported version number, the installation of Joomla! on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities. %NASLMINLEVEL...

Google Chrome Multiple Vulnerabilities - 01 (Oct 2014) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

PT-2014-7217 · Red Hat +3 · Ceph +3

Name of the Vulnerable Software and Affected Versions: Ceph versions prior to 3.16.3 Linux kernel versions prior to 3.16.3 Description: The issue is related to the improper validation of auth replies in the net/ceph/auth x.c component. This can be exploited by remote attackers using crafted data...

PT-2014-5122 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.16.2 Description: The issue is related to an array index error in the logi dj raw event function in drivers/hid/hid-logitech-dj.c. This error allows physically proximate attackers to execute arbitrary code or...

Apache OpenOffice < 4.1.1 Multiple Vulnerabilities

The version of Apache OpenOffice installed on the remote host is a version prior to 4.1.1. It is, therefore, affected by the following vulnerabilities : - An unspecified flaw allows remote attackers to execute arbitrary commands via a specially crafted Calc spreadsheet. CVE-2014-3524 - A flaw in...

Apple Safari Multiple Memory Corruption Vulnerabilities-01 (Aug 2014) - Mac OS X

Apple Safari is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari"; ifdescription...

PT-2014-1975 · D Link · Dnr-326

Name of the Vulnerable Software and Affected Versions: D-Link DNR-326 versions prior to 2.10 build 03 Description: The issue is related to the check login function and is caused by weaknesses in the authentication procedure. It allows a remote attacker to bypass authentication and log in by...

Cross-Site Request Forgery (CSRF)

Overview faye is a simple pub/sub messaging for the web. Affected versions of this package are vulnerable to Cross-Site Request Forgery CSRF. Rosetta Flash alphanum only swf converter can be used as a callback at a JSONP endpoint, and as a result, send data across domains. Remediation Upgrade fay...

xmonad-contrib: Arbitrary code execution

Background xmonad-contrib is a set of third party tiling algorithms, configurations, and scripts for xmonad. Description A vulnerability in the Xmonad.Hooks.DynamicLog module could allow a malicious website with a specially crafted title to inject commands into the title bar which would be execut...

Adobe Reader Multiple Vulnerabilities (Feb 2008) - Windows

Adobe Reader is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobatreader";...

Tomcat full system security vulnerabilities, please fix as soon as possible-vulnerability warning-the black bar safety net

The Apache Tomcat team today the announcement that Tomcat 6. x, 7. x, 8. x the three branches are found security vulnerabilities, including two critical vulnerabilities, users are advised to fix ASAP. ! 1. DoS vulnerability The Apache Tomcat development team to fix a DoS vulnerability, but did no...

PT-2014-1186 · Oracle +6 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 5.5.35 and earlier Oracle MySQL versions 5.6.15 and earlier Description: The issue allows remote authenticated users to affect availability via vectors related to XML in the MySQL Server component. Recommendations: For...