84 matches found
Debian DLA-572-1 : icedove security update
Multiple security issues have been found in Icedove, Debian's version of the Mozilla Thunderbird mail client: Multiple memory safety errors may lead to the execution of arbitrary code or denial of service. For Debian 7 'Wheezy', these problems have been fixed in version 1:45.2.0-2deb7u1. We...
[SECURITY] [DLA 576-1] libdbd-mysql-perl security update
Package : libdbd-mysql-perl Version : 4.021-1+deb7u1 CVE ID : CVE-2014-9906 CVE-2015-8949 Two use-after-free vulnerabilities were discovered in DBD::mysql, a Perl DBI driver for the MySQL database server. A remote attacker can take advantage of these flaws to cause a denial-of-service against an...
DLA-451-1 openjdk-7 - security update
Bulletin has no description...
DLA-447-1 mysql-5.5 - security update
Bulletin has no description...
DSA-3559-1 iceweasel - security update
Bulletin has no description...
DSA-3538-1 libebml - security update
Bulletin has no description...
Debian: Security Advisory (DSA-3465-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DSA-3450-1 ecryptfs-utils - security update
Bulletin has no description...
Joomla HTTP Header Unauthenticated Remote Code Execution
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Joomla HTTP Header Unauthenticated Remote Code Execution', 'Description' = %q Joomla suffers from an unauthenticated remote code...
DSA-3393-1 iceweasel - security update
Bulletin has no description...
DSA-3381-1 openjdk-7 - security update
Bulletin has no description...
Debian Security Advisory DSA 3234-1 (openjdk-6 - security update)
Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in the execution of arbitrary code, breakouts of the Java sandbox, information disclosure or denial of service. OpenVAS Vulnerability Test $Id: deb3234.nasl 6609 2017-07-07 12:05:59Z...
Debian Security Advisory DSA 3205-1 (batik - security update)
Nicolas Gregoire and Kevin Schaller discovered that Batik, a toolkit for processing SVG images, would load XML external entities by default. If a user or automated system were tricked into opening a specially crafted SVG file, an attacker could possibly obtain access to arbitrary files or cause...
[SECURITY] [DSA 3199-1] xerces-c security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3199-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso March 20, 2015 http://www.debian.org/security/faq -...
Debian Security Advisory DSA 3192-1 (checkpw - security update)
Hiroya Ito of GMO Pepabo, Inc. reported that checkpw, a password authentication program, has a flaw in processing account names which contain double dashes. A remote attacker can use this flaw to cause a denial of service infinite loop. OpenVAS Vulnerability Test $Id: deb3192.nasl 6609 2017-07-07...
Debian: Security Advisory (DSA-3155-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-3137-1 : websvn - security update
James Clawson discovered that websvn, a web viewer for Subversion repositories, would follow symlinks in a repository when presenting a file for download. An attacker with repository write access could thereby access any file on disk readable by the user the webserver runs as. %NASLMINLEVEL 70300...
DSA-3139-1 squid - security update
Bulletin has no description...
Debian: Security Advisory (DSA-3105-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...