Lucene search
+L

4554 matches found

Tenable Nessus
Tenable Nessus
added 2015/03/30 12:00 a.m.34 views

Mandriva Linux Security Advisory : samba (MDVSA-2015:081)

Updated samba packages fix security vulnerabilities : An uninitialized pointer use flaw was found in the Samba daemon smbd. A malicious Samba client could send specially crafted netlogon packets that, when processed by smbd, could potentially lead to arbitrary code execution with the privileges o...

10CVSS8.2AI score0.87636EPSS
SaveExploits7References2
Tenable Nessus
Tenable Nessus
added 2015/03/30 12:00 a.m.24 views

Mandriva Linux Security Advisory : egroupware (MDVSA-2015:087)

Updated egroupware packages fix security vulnerabilities : eGroupware prior to 1.8.006.20140217 is vulnerable to remote file deletion and possible remote code execution due to user input being passed to PHP's unserialize method CVE-2014-2027. eGroupWare before 1.8.007 allows logged in users with...

7.5CVSS6.5AI score0.0405EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2015/03/30 12:00 a.m.35 views

Mandriva Linux Security Advisory : cpio (MDVSA-2015:065)

Updated cpio package fixes security vulnerabilities : Heap-based buffer overflow in the processcopyin function in GNU Cpio 2.11 allows remote attackers to cause a denial of service via a large block value in a cpio archive CVE-2014-9112. Additionally, a NULL pointer dereference in the copyinlink...

5CVSS6.7AI score0.07093EPSS
SaveExploits5References4
Tenable Nessus
Tenable Nessus
added 2015/03/30 12:00 a.m.43 views

Mandriva Linux Security Advisory : ntp (MDVSA-2015:140)

Updated ntp packages fix security vulnerabilities : If no authentication key is defined in the ntp.conf file, a cryptographically-weak default key is generated CVE-2014-9293. ntp-keygen before 4.2.7p230 uses a non-cryptographic random number generator with a weak seed to generate symmetric keys...

7.5CVSS7.1AI score0.79069EPSS
SaveExploits4References8
Tenable Nessus
Tenable Nessus
added 2015/03/30 12:00 a.m.29 views

Mandriva Linux Security Advisory : openldap (MDVSA-2015:074)

A vulnerability has been discovered and corrected in openldap : The derefparseCtrl function in servers/slapd/overlays/deref.c in OpenLDAP 2.4.13 through 2.4.40 allows remote attackers to cause a denial of service NULL pointer dereference and crash via an empty attribute list in a deref control in...

5CVSS5.6AI score0.11091EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2015/03/30 12:00 a.m.57 views

Mandriva Linux Security Advisory : glibc (MDVSA-2015:168)

Updated glibc packages fix security vulnerabilities : Stephane Chazelas discovered that directory traversal issue in locale handling in glibc. glibc accepts relative paths with .. components in the LC and LANG variables. Together with typical OpenSSH configurations with suitable AcceptEnv setting...

7.8CVSS7.9AI score0.18099EPSS
SaveExploits9References14
Tenable Nessus
Tenable Nessus
added 2015/03/30 12:00 a.m.40 views

Mandriva Linux Security Advisory : libarchive (MDVSA-2015:157)

Updated libarchive packages fix security vulnerability : Alexander Cherepanov discovered that bsdcpio, an implementation of the cpio program part of the libarchive project, is susceptible to a directory traversal vulnerability via absolute paths CVE-2015-2304. %NASLMINLEVEL 70300 C Tenable Networ...

6.4CVSS7.1AI score0.0489EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2015/03/30 12:00 a.m.39 views

Mandriva Linux Security Advisory : emacs (MDVSA-2015:117)

Updated emacs packages fix security vulnerabilities : Steve Kemp discovered multiple temporary file handling issues in Emacs. A local attacker could use these flaws to perform symbolic link attacks against users running Emacs CVE-2014-3421, CVE-2014-3422, CVE-2014-3423, CVE-2014-3424. %NASLMINLEV...

3.3CVSS7.7AI score0.00344EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2015/03/30 12:00 a.m.39 views

Mandriva Linux Security Advisory : sudo (MDVSA-2015:126)

Updated sudo packages fix security vulnerability : Prior to sudo 1.8.12, the TZ environment variable was passed through unchecked. Most libc tzset implementations support passing an absolute pathname in the time zone to point to an arbitrary, user-controlled file. This may be used to exploit bugs...

3.3CVSS5.4AI score0.0047EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2015/03/30 12:00 a.m.25 views

Mandriva Linux Security Advisory : pulseaudio (MDVSA-2015:134)

Updated pulseaudio package fixes RTP remote crash vulnerability : PulseAudio versions shipped in mbs2 were vulnerable to a remote RTP attack which could crash the PulseAudio server simply by sending an empty UDP packet. Additionally, the version of PulseAudio shipped in mbs2 was a pre-release...

2.9CVSS5.5AI score0.01457EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2015/03/30 12:00 a.m.51 views

Mandriva Linux Security Advisory : libpng (MDVSA-2015:090)

Updated libpng package fixes security vulnerabilities : The pngpushreadchunk function in pngpread.c in the progressive decoder in libpng 1.6.x through 1.6.9 allows remote attackers to cause a denial of service infinite loop and CPU consumption via an IDAT chunk with a length of zero CVE-2014-0333...

10CVSS8.3AI score0.04047EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2015/03/30 12:00 a.m.36 views

Mandriva Linux Security Advisory : jasper (MDVSA-2015:159)

Updated jasper packages fix security vulnerabilities : Josh Duart of the Google Security Team discovered heap-based buffer overflow flaws in JasPer, which could lead to denial of service application crash or the execution of arbitrary code CVE-2014-9029. A double free flaw was found in the way...

7.5CVSS7.8AI score0.18501EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2015/03/30 12:00 a.m.29 views

Mandriva Linux Security Advisory : nginx (MDVSA-2015:094)

Updated nginx package fixes security vulnerabilities : A bug in the experimental SPDY implementation in nginx was found, which might allow an attacker to cause a heap memory buffer overflow in a worker process by using a specially crafted request, potentially resulting in arbitrary code execution...

7.5CVSS9.1AI score0.09293EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2015/03/30 12:00 a.m.34 views

Mandriva Linux Security Advisory : pcre (MDVSA-2015:137)

Updated pcre packages fix security vulnerability : A flaw was found in the way PCRE handled certain malformed regular expressions. This issue could cause an application linked against PCRE to crash while parsing malicious regular expressions CVE-2014-8964. %NASLMINLEVEL 70300 C Tenable Network...

5CVSS6.6AI score0.06505EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2015/03/30 12:00 a.m.33 views

Mandriva Linux Security Advisory : sendmail (MDVSA-2015:128)

Updated sendmail packages fix security vulnerability : Sendmail before 8.14.9 does not properly closing file descriptors before executing programs. This bug could enable local users to interfere with an open SMTP connection if they can execute their own program for mail delivery e.g., via procmai...

1.9CVSS5.4AI score0.00635EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2015/03/30 12:00 a.m.33 views

Mandriva Linux Security Advisory : libssh (MDVSA-2015:086)

Updated libssh packages fix security vulnerabilities : When using libssh before 0.6.3, a libssh-based server, when accepting a new connection, forks and the child process handles the request. The RANDbytes function of openssl doesn't reset its state after the fork, but simply adds the current...

5CVSS6.6AI score0.05145EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2015/03/30 12:00 a.m.23 views

Mandriva Linux Security Advisory : libpng12 (MDVSA-2015:071)

Updated libpng12 package fixes security vulnerabilities : The pngdoexpandpalette function in libpng before 1.6.8 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a PLTE chunk of zero bytes or a NULL palette, related to pngrtran.c and pngset.c...

6.5CVSS8.2AI score0.04692EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
added 2015/03/30 12:00 a.m.41 views

Mandriva Linux Security Advisory : gnutls (MDVSA-2015:072)

Updated gnutls packages fix security vulnerabilities : Suman Jana reported a vulnerability that affects the certificate verification functions of gnutls 3.1.x and gnutls 3.2.x. A version 1 intermediate certificate will be considered as a CA certificate by default something that deviates from the...

6.8CVSS8.6AI score0.30078EPSS
SaveExploits3References9
Tenable Nessus
Tenable Nessus
added 2015/03/30 12:00 a.m.31 views

Mandriva Linux Security Advisory : e2fsprogs (MDVSA-2015:067)

Updated e2fsprogs packages fix security vulnerabilities : The libext2fs library, part of e2fsprogs and utilized by its utilities, is affected by a boundary check error on block group descriptor information, leading to a heap based buffer overflow. A specially crafted filesystem image can be used ...

4.6CVSS8.7AI score0.0089EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2015/03/30 12:00 a.m.27 views

Mandriva Linux Security Advisory : rsync (MDVSA-2015:131)

Updated rsync package fixes security vulnerability : Ryan Finnie discovered that rsync 3.1.0 contains a denial of service issue when attempting to authenticate using a nonexistent username. A remote attacker could use this flaw to cause a denial of service via CPU consumption CVE-2014-2855...

7.8CVSS5.4AI score0.04119EPSS
SaveExploits1References2
Rows per page
Query Builder