CentOS 7 : subversion (CESA-2015:0166)

Updated subversion packages that fix three security issues are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available...

CentOS 6 : subversion (CESA-2015:0165)

Updated subversion packages that fix two security issues are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available f...

CentOS Update for mod_dav_svn CESA-2015:0166 centos7

Check the version of moddavsvn SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882116";...

Oracle Linux 6 : subversion (ELSA-2015-0165)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-0165 advisory. - moddavsvn fix for CVE-2014-3580 backport Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Moderate: Red Hat Security Advisory: subversion security update

Updated subversion packages that fix two security issues are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available f...

Threat Outbreak Alert RuleID13469: Email Messages Distributing Malicious Software on February 9, 2015

Medium Alert ID: 37395 First Published: 2015 February 9 15:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13469 may contain the following files: Name |...

Threat Outbreak Alert RuleID13465: Email Messages Distributing Malicious Software on February 9, 2015

Medium Alert ID: 37393 First Published: 2015 February 9 15:52 GMT Last Updated: 2015 February 10 14:33 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13465...

Threat Outbreak Alert RuleID13457: Email Messages Distributing Malicious Software on February 6, 2015

Medium Alert ID: 37385 First Published: 2015 February 9 14:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13457 may contain the following files: Name |...

Threat Outbreak Alert RuleID13442: Email Messages Distributing Malicious Software on February 5, 2015

Medium Alert ID: 37365 First Published: 2015 February 5 22:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13442 may contain the following files: Name |...

Threat Outbreak Alert RuleID13428: Email Messages Distributing Malicious Software on February 4, 2015

Medium Alert ID: 37362 First Published: 2015 February 5 14:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13428 may contain the following files: Name |...

Threat Outbreak Alert RuleID13417: Email Messages Distributing Malicious Software on February 4, 2015

Medium Alert ID: 37357 First Published: 2015 February 5 14:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13417 may contain the following files: Name |...

CVE-2014-9044

Asset Pipeline in ownCloud 7.x before 7.0.3 uses an MD5 hash of the absolute file paths of the original CSS and JS files as the name of the concatenated file, which allows remote attackers to obtain sensitive information via a brute force attack...

Information disclosure

Asset Pipeline in ownCloud 7.x before 7.0.3 uses an MD5 hash of the absolute file paths of the original CSS and JS files as the name of the concatenated file, which allows remote attackers to obtain sensitive information via a brute force attack...

CVE-2014-9044

Asset Pipeline in ownCloud 7.x before 7.0.3 uses an MD5 hash of the absolute file paths of the original CSS and JS files as the name of the concatenated file, which allows remote attackers to obtain sensitive information via a brute force attack...

CVE-2014-9044

CVE-2014-9044 relates to ownCloud 7.x prior to 7.0.3, where the Asset Pipeline names the concatenated CSS/JS blob using an MD5 hash of the absolute file paths. This allowed an attacker to brute-force disclose the install path (e.g., /var/www/owncloud/). The root cause is the use of absolute paths...

Threat Outbreak Alert RuleID13399: Email Messages Distributing Malicious Software on February 3, 2015

Medium Alert ID: 37336 First Published: 2015 February 4 16:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat 13399KVR may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID13395: Email Messages Distributing Malicious Software on February 3, 2015

Medium Alert ID: 37334 First Published: 2015 February 3 16:53 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13395 may contain the following files: Name |...

[SYSS-2014-013] FancyFon FAMOC - Use of a One-Way Hash without a Salt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2014-013 Products: FAMOC Vendor: FancyFon Affected Versions: 3.16.5 Tested Versions: 3.16.5 Vulnerability Type: Use of a One-Way Hash without a Salt CWE-759 Risk Level: Low Solution Status: Fixed Vendor Notification: 2014-12-19...

Threat Outbreak Alert RuleID13340: Email Messages Distributing Malicious Software on January 29, 2015

Medium Alert ID: 37233 First Published: 2015 January 29 21:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13340 may contain the following files: Name |...

Threat Outbreak Alert RuleID13338: Email Messages Distributing Malicious Software on January 29, 2015

Medium Alert ID: 37231 First Published: 2015 January 29 21:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13338 may contain the following files: Name |...