Mageia: Security Advisory (MGASA-2016-0041)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-2884-1 openjdk-7 vulnerabilities

Multiple vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data integrity, and availability. An attacker could exploit these to cause a denial of service, expose sensitive data over the network, or possibly execute arbitrary code. CVE-2016-0483, CVE-2016-0494 A...

DLA-406-1 phpmyadmin - security update

Bulletin has no description...

MGASA-2016-0041 Updated firefox packages fix security vulnerability

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox CVE-2016-1930, CVE-2016-1935...

Updated firefox packages fix security vulnerability

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox CVE-2016-1930, CVE-2016-1935...

jenkins: Reflective XSS vulnerability (SECURITY-171, SECURITY-177)

Two cross-site scripting XSS flaws were found in Jenkins. A remote attacker could use these flaws to conduct XSS attacks against users of an application using Jenkins...

Vulnerability of the Java Platform software platform, allowing attackers to modify data

The vulnerability of the Networking sub-component of the Java Platform software platform is related to errors in the code. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to the ability to modify, add, or delete data using network packets...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the win32k.sys driver in the Windows operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a local attacker to enhance their privileges through a specially crafted application...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s RPC implementation is related to deficiencies in access control for certain functions. Exploiting this vulnerability can allow a local attacker to enhance their privileges by using a specially crafted application...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the win32k.sys driver in the Windows operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a local attacker to enhance their privileges through a specially crafted application...

The vulnerabilities of PDF viewing and editing programs like Adobe Reader, Document Cloud, Adobe Reader, and Adobe Acrobat allow attackers to execute arbitrary code.

The vulnerability of the Doc object implementation in PDF file viewing and editing programs like Adobe Reader, Document Cloud, Adobe Reader, and Adobe Acrobat is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code...

The vulnerabilities of PDF viewing and editing programs like Adobe Reader, Document Cloud, Adobe Reader, and Adobe Acrobat allow attackers to circumvent restrictions imposed by JavaScript APIs.

The vulnerabilities of PDF viewing and editing programs such as Adobe Reader, Document Cloud, Adobe Reader, and Adobe Acrobat are related to object management errors called “Global”. Exploiting these vulnerabilities can allow attackers to bypass restrictions on JavaScript APIs from a remote...

Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

RedHat Update for kernel RHSA-2016:0045-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM WebSphere Application Server Multiple Vulnerabilities (487947)

IBM WebSphere Application Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of Imagination Technologies’ driver for the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created application...

The vulnerabilities in iOS and Mac OS X operating systems allow attackers to trigger service failures or increase their privileges.

The vulnerability of the kernel in iOS and Mac OS X operating systems arises due to buffer overflows. Exploiting this vulnerability can allow an attacker to increase their privileges or cause a service failure memory corruption...

GlassFish Arbitrary File Read Vulnerability

GlassFish is a JavaEE5-based business-compatible application server for development, deployment and redistribution. GlassFish suffers from an arbitrary file read vulnerability. Due to its implementation of unicode encoding flaws, resulting in multiple parsing of the same code, such as: java...

Microsoft Edge Multiple Vulnerabilities (3124904)

This host is missing a critical security update according to Microsoft Bulletin MS16-002. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

RHEL 7 : Storage Server (RHSA-2016:0016)

Updated samba packages that fix multiple security issues are now available for Red Hat Gluster Storage 3.1 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...