Debian DLA-1432-1 : gpac security update

Two heap buffer over read conditions were found in gpac. CVE-2018-13005 Due to an error in a while loop condition, the function urnRead in isomedia/boxcodebase.c has a heap-based buffer over-read. CVE-2018-13006 Due to an error in a strlen call, there is a heap-based buffer over-read in the...

An Intelligent Network Security Scanner: Red Team Arsenal

Red Team Arsenal is a web/network security scanner which has the capability to scan all company’s online facing assets and provide an holistic security view of any security anomalies. It’s a closely linked collections of security engines to conduct/simulate attacks and monitor public facing asset...

Debian DLA-1123-1 : golang security update

It was discovered that there was an issue in the Go programming language library where an attacker could generate a MIME request such that the server ran out of file descriptors. For Debian 7 'Wheezy', this issue has been fixed in golang version 2:1.0.2-1.1+deb7u1. We recommend that you upgrade...

Fedora 25 : xen (2017-cdb53b04e0)

Qemu: net: mcffec: infinite loop while receiving data in mcffecreceive CVE-2016-9776 Qemu: audio: memory leakage in ac97 CVE-2017-5525 Qemu: audio: memory leakage in es1370 device CVE-2017-5526 oob access in cirrus bitblt copy XSA-208, CVE-2017-2615 Note that Tenable Network Security has extracte...

[SECURITY] Fedora 23 Update: openvas-libraries-8.0.8-2.fc23

openvas-libraries is the base library for the OpenVAS network security scanner...

SUSE SLED12 / SLES12 Security Update : ntp (SUSE-SU-2016:1563-1)

ntp was updated to version 4.2.8p8 to fix five security issues. These security issues were fixed : - CVE-2016-4953: Bad authentication demobilizes ephemeral associations bsc982065. - CVE-2016-4954: Processing spoofed server packets bsc982066. - CVE-2016-4955: Autokey association reset bsc982067. ...

[SECURITY] Fedora 22 Update: openvas-libraries-8.0.7-2.fc22

openvas-libraries is the base library for the OpenVAS network security scanner...

[SECURITY] Fedora 23 Update: openvas-libraries-8.0.7-2.fc23

openvas-libraries is the base library for the OpenVAS network security scanner...

Ubuntu 12.04 LTS : linux-lts-trusty vulnerabilities (USN-2841-2)

Jan Beulich discovered that the KVM svm hypervisor implementation in the Linux kernel did not properly catch Debug exceptions on AMD processors. An attacker in a guest virtual machine could use this to cause a denial of service system crash in the host OS. CVE-2015-8104 Guoyong Gang discovered th...

[SECURITY] Fedora 22 Update: openvas-libraries-8.0.3-2.fc22

openvas-libraries is the base library for the OpenVAS network security scanner...

ManageEngine Security Manager Plus Detection

The remote web server hosts ManageEngine Security Manager Plus, a web- based network security scanner and patch management software written in Java. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid63204; scriptversion"1.5"; scriptcvsdate"Date: 2019/11/25";...

CVE-2011-3337

eEye Audit ID 2499 in eEye Digital Security Audits 2406 through 2423 for eEye Retina Network Security Scanner on HP-UX, IRIX, and Solaris allows local users to gain privileges via a Trojan horse gauntlet program in an arbitrary directory under /usr/local/...

eEye Retina Audit ID 2499权限提升漏洞

CVE ID: CVE-2011-3337 eEye Retina Network Security Scanner可针对目标系统执行多种审查，进行安全漏洞评估测试。 eEye Retina在实现上存在安全漏洞，可被恶意本地用户利用获取提升的权限。 此漏洞源于Audit ID 2499 "Gauntlet Firewall For UNIX Buffer Overflow"在"/usr/local"文件夹中执行特定文件，可通过在 "/usr/local"文件夹中放置恶意文件执行任意代码。 eEye Retina Network Security Scanner 5.x 厂商补丁： eEy...

Fedora 14 : mysql-5.1.50-2.fc14 (2010-15147)

Update to mysql 5.1.50, for numerous bug fixes including some low-grade security issues. See upstream release notes at : - http://dev.mysql.com/doc/refman/5.1/en/news-5-1-50.html - http://dev.mysql.com/doc/refman/5.1/en/news-5-1-49.htm l Note that Tenable Network Security has extracted the...

Ubuntu 6.06 LTS : gnutls12 vulnerability (USN-948-1)

It was discovered that GnuTLS did not always properly verify the hash algorithm of X.509 certificates. If an application linked against GnuTLS processed a crafted certificate, an attacker could make GnuTLS dereference a NULL pointer and cause a DoS via application crash. Note that Tenable Network...

CVE-2009-3859

Buffer overflow in eEye Retina WiFi Scanner 1.0.8.68, as used in Retina Network Security Scanner 5.10.14, allows user-assisted remote attackers to cause a denial of service application crash or execute arbitrary code via a .rws file with a long RWS010 entry...

iNTERNET.cms Cross-Site Scripting vulnerability

---------------------------------------------------------------------- PT-2009-33 Positive Technologies Security Advisory iNTERNET.cms Cross-Site Scripting vulnerability ---------------------------------------------------------------------- --- Affected Software iNTERNET.cms Versions prior to...

Neo CMS SQL Injection vulnerability

---------------------------------------------------------------------- PT-2009-36 Positive Technologies Security Advisory Neo CMS SQL Injection vulnerability ---------------------------------------------------------------------- --- Affected Software Neo CMS Versions up to 1.777 Product Link:...

Fedora 10 : Miro-2.0.5-3.fc10 / blam-1.8.5-13.fc10 / epiphany-2.24.3-9.fc10 / etc (2009-8288)

Update to new upstream Firefox version 3.0.13, fixing multiple security issues detailed in the upstream advisories: http://www.mozilla.org/security/known-vulnerabilities/firefox30.htmlf irefox3.0.13 Update also includes all packages depending on gecko-libs rebuilt against new version of Firefox /...

eEye Retina Network Security Scanner Detection

Retina Network Security Scanner is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid39807; scriptversion"1.13"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06"; scriptnameenglish:"eEye Retina Network Security Scann...