CVE-2015-8699

CVE-2015-8699 covers multiple cross-site scripting (XSS) vulnerabilities in CA Release Automation (formerly CA LISA Release Automation). Affected are: 5.0.2 before 5.0.2-227, 5.5.1 before 5.5.1-1616, 5.5.2 before 5.5.2-434, and 6.1.0 before 6.1.0-1026. The vulnerabilities allow remote attackers t...

CVE-2015-8699

Multiple cross-site scripting XSS vulnerabilities in CA Release Automation formerly LISA Release Automation 5.0.2 before 5.0.2-227, 5.5.1 before 5.5.1-1616, 5.5.2 before 5.5.2-434, and 6.1.0 before 6.1.0-1026 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-8699: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in CA Release Automation formerly LISA Release Automation 5.0.2 before 5.0.2-227, 5.5.1 before 5.5.1-1616, 5.5.2 before 5.5.2-434, and 6.1.0 before 6.1.0-1026 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2016-3954

Name of the Vulnerable Software and Affected Versions CA Release Automation formerly LISA Release Automation versions 5.0.2 through 5.0.2-226 CA Release Automation formerly LISA Release Automation versions 5.5.1 through 5.5.1-1615 CA Release Automation formerly LISA Release Automation versions...

PT-2016-3955

Name of the Vulnerable Software and Affected Versions CA Release Automation versions 5.0.2 through 5.0.2-227 CA Release Automation versions 5.5.1 through 5.5.1-1616 CA Release Automation versions 5.5.2 through 5.5.2-434 CA Release Automation versions 6.1.0 through 6.1.0-1026 Description The issue...

CVE-2015-8698: Undefined Security Weakness

CA Release Automation formerly LISA Release Automation 5.0.2 before 5.0.2-227, 5.5.1 before 5.5.1-1616, 5.5.2 before 5.5.2-434, and 6.1.0 before 6.1.0-1026 allows remote attackers to read arbitrary files or cause a denial of service via a request containing an XML external entity declaration in...

cinema1.ca XSS vulnerability

Vulnerable URL: https://www.cinema1.ca/precart.php Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 11:14 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7828323 VIP website status:| No Check cinema1.ca SSL...

SUSE-SU-2016:1465-1 Recommended update for NetworkManager-kde4

This NetworkManager-kde4 update fixes the following security and non security issues: - Fixed a long standing security issue. This makes knetworkmanager probe the RADIUS server for a CA certificate subject and hash if no CA certificate is specified. knetworkmanager then stores this data and send ...

PT-2016-7915

Name of the Vulnerable Software and Affected Versions NetworkManager-kde4 affected versions not specified Description The issue is related to a long-standing security problem where knetworkmanager probes the RADIUS server for a CA certificate subject and hash if no CA certificate is specified. Th...

CVE-2016-3106

Pulp before 2.8.3 creates a temporary directory during CA key generation in an insecure manner...

Debian DLA-469-1 : libgwenhywfar security update

It was discovered that libgwenhywfar an OS abstraction layer that allows porting of software to different operating systems like Linux, BSD, Windows etc. used an outdated CA certificate bundle. For Debian 7 'Wheezy', this issue has been fixed in libgwenhywfar version 4.3.3-1+deb7u1 by utilising t...

[SECURITY] [DLA 469-1] libgwenhywfar security update

Package : libgwenhywfar Version : 4.3.3-1+deb7u1 CVE ID : CVE-2015-7542 Debian Bug : 748955 It was discovered that libgwenhywfar an OS abstraction layer that allows porting of software to different operating systems like Linux, BSD, Windows etc. used an outdated CA certificate bundle. For Debian ...

DLA-469-1 libgwenhywfar - security update

Bulletin has no description...

SUSE SLED12 Security Update : python-tornado (SUSE-SU-2016:1195-1)

The python-tornado module was updated to version 4.2.1, which brings several fixes, enhancements and new features. The following security issues have been fixed : - A path traversal vulnerability in StaticFileHandler, in which files whose names started with the staticpath directory but were not...

Pulp Insecure Creation of CA Keys Vulnerability

Pulp is a free and open source repository platform for managing content. The platform supports pushing content from software packages to consumers. A security vulnerability exists in Pulp versions prior to 2.3.0, which stems from the creation of CA certificates and keys in the /tmp/$RANDOM...

CVE-2016-2422: Undefined Security Weakness

Wi-Fi in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not prevent use of a Wi-Fi CA certificate in an unrelated CA role, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or...

CVE-2016-3118

CRLF injection vulnerability in CA API Gateway formerly Layer7 API Gateway 7.1 before 7.1.04, 8.0 through 8.3 before 8.3.01, and 8.4 before 8.4.01 allows remote attackers to have an unspecified impact via unknown vectors...

CVE-2016-3118

CRLF injection vulnerability in CA API Gateway formerly Layer7 API Gateway 7.1 before 7.1.04, 8.0 through 8.3 before 8.3.01, and 8.4 before 8.4.01 allows remote attackers to have an unspecified impact via unknown vectors...

Crlf injection

CRLF injection vulnerability in CA API Gateway formerly Layer7 API Gateway 7.1 before 7.1.04, 8.0 through 8.3 before 8.3.01, and 8.4 before 8.4.01 allows remote attackers to have an unspecified impact via unknown vectors...

CVE-2016-3118

CA API Gateway (formerly Layer7 API Gateway) is affected by a CRLF injection vulnerability identified as CVE-2016-3118. The affected product ranges are CA API Gateway 7.1 before 7.1.04, 8.0 through 8.3 before 8.3.01, and 8.4 before 8.4.01. The vulnerability allows remote attackers to cause an uns...