8977 matches found
Scientific Linux Security Update : thunderbird on SL5.x, SL6.x, SL7.x i386/x86_64 (20160316)
Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. CVE-2016-1952, CVE-2016-1954, CVE-2016-1957, CVE-2016-1960,...
The vulnerability of the application interface of the IBM WebSphere Portal server allows a hacker to modify elements of the content.
The vulnerability of the application interface of the IBM WebSphere Portal server is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to remotely modify content elements using the application interface...
The vulnerability of the Moodle learning management system allows a hacker to obtain the user’s password.
The vulnerability of the mtrand function in implementations of randomstring and complexrandomstring of the Moodle learning management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain user passwords usin...
The vulnerability of the Apache Tomcat application server allows a attacker to execute arbitrary code in a privileged context.
The vulnerability of the Apache Tomcat application server is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged context through the web application, which creates a specially crafted object during the executi...
The vulnerability of the Moodle learning management system allows a hacker to delete any files they desire.
The vulnerability of the Moodle learning management system’s wiki component is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to delete any files they desire...
CentOS Update for thunderbird CESA-2016:0460 centos7
Check the version of thunderbird SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882429";...
The vulnerability of the Moodle learning management system allows a hacker to obtain confidential information.
The vulnerability of the coreenrolgetcourseenrolmentmethods and enrolselfgetinstanceinfo functions in the Moodle learning management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain confidential...
Vulnerabilities in the Moodle learning management system allow a hacker to gain access to the authentication data of arbitrary users
The multiple vulnerabilities of the Moodle learning management system’s module for lessons are related to the manipulation of cross-site requests. Exploiting these vulnerabilities could allow a malicious actor, operating remotely, to gain access to the authentication data of arbitrary users throu...
RHEL 5 / 6 / 7 : bind (RHSA-2016:0459)
"Updated bind packages that fix two security issues are now available for Red Hat Enterprise Linux 5, 6, and 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...
MGASA-2016-0115 Updated thunderbird packages fix security vulnerabilities
Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird CVE-2016-1952, CVE-2016-1954, CVE-2016-1957, CVE-2016-1960,...
Important: Red Hat Security Advisory: ror40 security update
Updated ror40-rubygem-actionpack and ror40-rubygem-activerecord packages that fix multiple security issues are now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores,...
USN-2933-1 exim4 vulnerabilities
It was discovered that Exim incorrectly filtered environment variables when used with the perlstartup configuration option. If the perlstartup option was enabled, a local attacker could use this issue to escalate their privileges to the root user. This issue has been fixed by having Exim clean th...
USN-2931-1 linux-lts-utopic vulnerabilities
Ben Hawkes discovered that the Linux netfilter implementation did not correctly perform validation when handling IPTSOSETREPLACE events. A local unprivileged attacker could use this to cause a denial of service system crash or possibly execute arbitrary code with administrative privileges...
DEBIAN-CVE-2016-1953
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors related to js/src/jit/arm/Assembler-arm.cpp, and unknown other vecto...
The vulnerability of Google Chrome browser allows a violator to circumvent access restrictions.
The vulnerabilities in the functions instantservice.cc and searchtabhelper.cc of the Chrome Instant browser plugin of Google Chrome are related to deficiencies in access control. Exploiting these vulnerabilities can allow a malicious actor to bypass access restrictions...
RedHat Update for firefox RHSA-2016:0373-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CentOS Update for firefox CESA-2016:0373 centos6
Check the version of firefox SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882411";...
CentOS Update for firefox CESA-2016:0373 centos7
Check the version of firefox SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882413";...
Scientific Linux Security Update : firefox on SL5.x, SL6.x, SL7.x i386/x86_64 (20160309)
Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. CVE-2016-1952, CVE-2016-1954, CVE-2016-1957, CVE-2016-1958,...
