Fedora 21 : jenkins-external-monitor-job-plugin-1.4-1.fc21 / etc (2014-15776)

This big update fixes several security vulnerabilities 1 as well as few packaging bugs. 1: https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory +2014-10-01 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

[SECURITY] Fedora 21 Update: lsyncd-2.1.5-6.fc21

Lsyncd watches a local directory trees event monitor interface inotify. It aggregates and combines events for a few seconds and then spawns one or more processes to synchronize the changes. By default this is rsync. Lsyncd is thus a light-weight live mirror solution that is comparatively easy to...

[SECURITY] Fedora 20 Update: lsyncd-2.1.4-4.fc20.1

Lsyncd watches a local directory trees event monitor interface inotify. It aggregates and combines events for a few seconds and then spawns one or more processes to synchronize the changes. By default this is rsync. Lsyncd is thus a light-weight live mirror solution that is comparatively easy to...

OracleVM 3.1 : xen (OVMSA-2012-0046)

The remote OracleVM system is missing necessary patches to address critical security updates : - Xen Security Advisory CVE-2012-4411 / XSA-19 version 2 guest administrator can access qemu monitor console Disable qemu monitor by default. The qemu monitor is an overly powerful feature which must be...

Privacyware Privatefirewall 7.0 - Unquoted Service Path Privilege Escalation

Privacyware Privatefirewall 7.0 Unquoted Service Path Privilege Escalation Vendor: PWI, Inc. Product web page: http://www.privacyware.com Affected version: 7.0.30.3 Summary: Privatefirewall multi-layered endpoint security software protects 32 and 64 bit Windows desktops and servers from malware a...

Privacyware Privatefirewall 7.0 Privilege Escalation

Privacyware Privatefirewall 7.0 Unquoted Service Path Privilege Escalation Vendor: PWI, Inc. Product web page: http://www.privacyware.com Affected version: 7.0.30.3 Summary: Privatefirewall multi-layered endpoint security software protects 32 and 64 bit Windows desktops and servers from malware a...

The process cannot access the file because it is being used by another process

Antivirus Interference Antivirus software can cause access issues similar to those documented in this article. Such interference often occurs when security software detects a Veeam process attempting to access a file and simultaneously locks the file for inspection, coinciding with the Veeam...

CVE-2014-8326

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.5, 4.1.x before 4.1.14.6, and 4.2.x before 4.2.10.1 allow remote authenticated users to inject arbitrary web script or HTML via a crafted 1 database name or 2 table name, related to the...

DEBIAN-CVE-2014-8326

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.5, 4.1.x before 4.1.14.6, and 4.2.x before 4.2.10.1 allow remote authenticated users to inject arbitrary web script or HTML via a crafted 1 database name or 2 table name, related to the...

CVE-2014-8326

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.5, 4.1.x before 4.1.14.6, and 4.2.x before 4.2.10.1 allow remote authenticated users to inject arbitrary web script or HTML via a crafted 1 database name or 2 table name, related to the...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.5, 4.1.x before 4.1.14.6, and 4.2.x before 4.2.10.1 allow remote authenticated users to inject arbitrary web script or HTML via a crafted 1 database name or 2 table name, related to the...

CVE-2014-8326

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.5, 4.1.x before 4.1.14.6, and 4.2.x before 4.2.10.1 allow remote authenticated users to inject arbitrary web script or HTML via a crafted 1 database name or 2 table name, related to the...

CVE-2014-8326

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.5, 4.1.x before 4.1.14.6, and 4.2.x before 4.2.10.1 allow remote authenticated users to inject arbitrary web script or HTML via a crafted 1 database name or 2 table name, related to the...

CVE-2014-8326

Summary of CVE-2014-8326 (phpMyAdmin XSS): Multiple XSS vulnerabilities affect phpMyAdmin 4.0.x (before 4.0.10.5), 4.1.x (before 4.1.14.6), and 4.2.x (before 4.2.10.1). The issue enables remote authenticated users to inject arbitrary web script or HTML via crafted (1) database name or (2) table n...

CVE-2014-8326

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.5, 4.1.x before 4.1.14.6, and 4.2.x before 4.2.10.1 allow remote authenticated users to inject arbitrary web script or HTML via a crafted 1 database name or 2 table name, related to the...

Fedora 21 : phpMyAdmin-4.2.10.1-1.fc21 (2014-13479)

phpMyAdmin 4.2.10.1 2014-10-21 ================================ - security XSS in debug SQL output - security XSS in monitor query analyzer Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Updated phpmyadmin package fixes security vulnerability

In phpMyAdmin before 4.1.14.6, with a crafted database or table name it is possible to trigger an XSS in SQL debug output when enabled and in server monitor page when viewing and analysing executed queries CVE-2014-8326...

FreeBSD : phpMyAdmin -- XSS vulnerabilities in SQL debug output and server monitor page. (25b78f04-59c8-11e4-b711-6805ca0b3d42)

The phpMyAdmin development team reports : With a crafted database or table name it is possible to trigger an XSS in SQL debug output when enabled and in server monitor page when viewing and analysing executed queries. This vulnerability can be triggered only by someone who is logged in to...

WiFi software Acrylic WiFi Free v2.1 - WiFi analyzer software and WLAN scanner for network analysts

Acrylic WiFi Professional is the best WiFi analyzer software to identify access points and wifi channels, and to analyze and resolve incidences on 802.11a/b/g/n/ac wireless networks in real time. It is a perfect tool for advanced users and professional WiFi network analysts and administrators to...

XSS vulnerabilities in SQL debug output and server monitor page.

PMASA-2014-12 Announcement-ID: PMASA-2014-12 Date: 2014-10-21 Summary XSS vulnerabilities in SQL debug output and server monitor page. Description With a crafted database or table name it is possible to trigger an XSS in SQL debug output when enabled and in server monitor page when viewing and...