Security update 2016-06-14

...

PT-2016-2335

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions 21.0.0.242 and earlier Description The issue is related to errors in the code of the Flash Player platform, allowing a remote attacker to execute arbitrary code. This has been exploited in the wild, with active...

Threat Outbreak Alert RuleID23412: Email Messages Distributing Malicious Software on June 12, 2016

Medium Alert ID: 46660 First Published: 2016 June 13 14:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23412 may contain the following files: Name | Siz...

CVE-2016-2489

The Qualcomm video driver in Android before 2016-06-01 on Nexus 5, 5X, 6, and 6P devices allows attackers to gain privileges via a crafted application, aka internal bug 27407629...

CVE-2016-2468

The Qualcomm GPU driver in Android before 2016-06-01 on Nexus 5, 5X, 6, 6P, and 7 devices allows attackers to gain privileges via a crafted application, aka internal bug 27475454...

CVE-2016-2466

The Qualcomm sound driver in Android before 2016-06-01 on Nexus 6 devices allows attackers to gain privileges via a crafted application, aka internal bug 27947307...

Security updates for all active release lines, June 2016

Security updates for all active release lines, June 2016 Update 23-June-2016 Releases available After a thorough assessment of the fixes we were planning on including, we have decided to scale back this security update to only include a subset. We are deferring some fixes while we improve the...

holidaybeddings.com XSS vulnerability

Vulnerable URL: http://holidaybeddings.com/search.php?location=%22%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3Eproptype=minarea=maxarea=bedrooms=bathrooms=minprice=maxprice= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:|...

hazelden.org XSS vulnerability

Vulnerable URL: https://www.hazelden.org/OAHTML/hazCAcdLogin.jsp?username=%22%3E%3Csvg/onload=alert%27OPENBUGBOUNTY%27%3E=10020:22372:US Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

vmsu.ru Open Redirect vulnerability

Vulnerable URL: http://www.vmsu.ru/go.php?url=http://openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check vmsu.ru SSL connection:|...

Threat Outbreak Alert RuleID23303: Email Messages Distributing Malicious Software on June 10, 2016

Medium Alert ID: 46631 First Published: 2016 June 10 13:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23303 may contain the following files: Name | Siz...

CVE-2016-1793

creationtimestamp| type| source ---|---|--- 2016-06-10 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39923...

CVE-2016-2494

creationtimestamp| type| source ---|---|--- 2016-06-10 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39921...

hn.portal.worldoftulo.com XSS vulnerability

Vulnerable URL: https://hn.portal.worldoftulo.com/Error/Common?aspxerrorpath=/Login Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check hn.portal.worldoftulo.com...

youngstaff.kz XSS vulnerability

Vulnerable URL: http://www.youngstaff.kz/search.php?searchcountry=vacancies=%22%3E%3Cscript%3Ealert%28%2FOPENBUGBOUNTY%2F%29%3C%2Fscript%3Etype=vacancies Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

Security fix for the ALT Linux 8 package openssl10 version 1.0.2h-alt2

1.0.2h-alt2 built June 9, 2016 Gleb Fotengauer-Malinovskiy in task 165702 June 8, 2016 Gleb Fotengauer-Malinovskiy - Backported upstream fix for CVE-2016-2178...

Threat Outbreak Alert RuleID23358: Email Messages Distributing Malicious Software on June 8, 2016

Medium Alert ID: 46618 First Published: 2016 June 8 18:48 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23358 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID23335: Email Messages Distributing Malicious Software on June 8, 2016

Medium Alert ID: 46613 First Published: 2016 June 8 12:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23335 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID23346: Email Messages Distributing Malicious Software on June 8, 2016

Medium Alert ID: 46611 First Published: 2016 June 8 12:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23346 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID23321: Email Messages Distributing Malicious Software on June 7, 2016

Medium Alert ID: 46595 First Published: 2016 June 7 13:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23321 may contain the following files: Name | Size...