Fedora 21 : mapserver-6.2.2-1.fc21 (2014-17567)

Update to latest 6.2 release Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora 20 : mapserver-6.2.2-1.fc20 (2014-17559)

Update to latest 6.2 release Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora 21 : putty-0.64-1.fc21 (2015-3160)

Fixed an issue when private keys weren't scrub from memory after use. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 20 : libpng10-1.0.63-1.fc20 (2015-2830)

This update addresses a couple of buffer overflows that might allow context-dependent attackers to execute arbitrary code via very wide PNG images. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

NetGear WNDR Authentication Bypass / Information Disclosure

NetGear WNDR Authentication Bypass / Information Disclosure Reported by: ---- Peter Adkins Access: ---- Local network; unauthenticated access. Remote network; unauthenticated access. Tracking and identifiers: ---- CVE - Mitre contacted; not yet allocated. Platforms / Firmware confirmed affected:...

Debian DSA-3158-1 : unrtf - security update

Michal Zalewski and Hanno Boeck discovered several vulnerabilities in unrtf, a RTF to other formats converter, leading to a denial of service application crash or, potentially, the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

McAfee DLPe Agent Privilege Escalation Vulnerability on Windows XP (SB10097)

The remote Windows XP host is running a version of the McAfee DLPe agent that is affected by a privilege escalation vulnerability, which a local attacker can exploit by sending specially crafted commands to a kernel mode driver. C Tenable Network Security, Inc. include"compat.inc"; if description...

Fedora 21 : unzip-6.0-18.fc21 (2015-1189)

Security fix for CVE-2014-9636 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora 20 : gd-2.1.0-8.fc20 (2015-0503)

Previous patch of 1076676 introduced memory leak. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 20 : owasp-esapi-java-2.1.0-2.fc20 (2015-0259)

Release 2.1.0. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...

Fedora 21 : mpfr-3.1.2-8.fc21 (2014-16967)

Security fix for Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...

Sefrengo CMS 1.6.0 - SQL Injection

Advisory: SQL-Injection in administrative Backend of Sefrengo CMS v.1.6.0 Advisory ID: SROEADV-2015-04 Author: Steffen Rösemann Affected Software: CMS Sefrengo v.1.6.0 Release-Date: 18th-Feb-2014 Vendor URL: http://www.sefrengo.org/start/start.html Vendor Status: fixed CVE-ID: -...

Fedora 19 : denyhosts-2.6-28.fc19.1 (2014-17081)

Fix security bug Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...

Fedora 20 : denyhosts-2.6-29.fc20.1 (2014-17067)

Fix security bug Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...

Fedora 19 : ettercap-0.8.1-2.fc19 (2014-17210)

Fix for multiple CVEs. https://www.obrela.com/home/security-labs/advisories/osi-advisory-osi- 1402/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora 20 : ettercap-0.8.1-2.fc20 (2014-17107)

Fix for multiple CVEs. https://www.obrela.com/home/security-labs/advisories/osi-advisory-osi- 1402/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Wordpress Plugin Cforms 14.7 Remote Code Execution Vulnerability

Cforms version 14.7 suffers from a remote code execution vulnerability. Advisory: Remote Code Execution via Unauthorised File upload in Cforms 14.7 Author: Zakhar Fedotkin Affected Software: Wordpress Plugin Cforms II 14.x-14.7 Release: 12th Nov 2014 Vendor URL:...

e107 2.0 Alpha2 Cross Site Request Forgery Vulnerability

e107 version 2.0 Alpha2 suffers from a cross site request forgery vulnerability. Advisory: CSRF vulnerability in CMS e107 v.2 alpha2 Author: Steffen Rösemann Affected Software: CMS e107 v.2 alpha2 Release-Date: 08th-Jun-2014 Vendor URL: http://e107.org Vendor Status: solved CVE-ID: -...

Cforms 14.7 Remote Code Execution

Advisory: Remote Code Execution via Unauthorised File upload in Cforms 14.7 Advisory ID: - Author: Zakhar Fedotkin Affected Software: Wordpress Plugin Cforms II 14.x-14.7 Release: 12th Nov 2014 Vendor URL: https://wordpress.org/plugins/cforms2/ Vendor Status: fixed CVE-ID: -...

e107 2.0 Alpha2 Cross Site Request Forgery

Advisory: CSRF vulnerability in CMS e107 v.2 alpha2 Advisory ID: SROEADV-2014-04 Author: Steffen Rösemann Affected Software: CMS e107 v.2 alpha2 Release-Date: 08th-Jun-2014 Vendor URL: http://e107.org Vendor Status: solved CVE-ID: - ========================== Vulnerability Description:...