MySQL Server Login Possible

Nessus was able to log into the remote MySQL server using the supplied credentials. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid91823; scriptversion"1.5"; scriptsetattributeattribute:"pluginmodificationdate", value:"2026/01/27"; scriptnameenglish:"MySQL Server Log...

Mozilla Firefox < 47.0 Multiple Vulnerabilities

Binary data 9383.prm...

Debian DLA-524-1 : squidguard security update

It was discovered that there was a reflected cross-site scripting vulnerability in squidguard, a filter and redirector plugin for Squid. For Debian 7 'Wheezy', this issue has been fixed in squidguard version 1.5-1+deb7u1. We recommend that you upgrade your squidguard packages. NOTE: Tenable Netwo...

Debian DLA-517-1 : imagemagick security update

The code did not check the integer didn't overflow before trying to resize a buffer. A specially crafted file could result in using memory past the end of the allocated buffer. This security CVEs for this issue CVE-2016-4563 along with CVE-2016-4562 and CVE-2016-4564 were based on a security...

Debian DLA-520-1 : horizon security update

It was discovered that there was an XSS vulnerability in horizon, a Django module providing web interaction with OpenStack. For Debian 7 'Wheezy', this issue has been fixed in horizon version 2012.1.1-10+deb7u1. We recommend that you upgrade your horizon packages. NOTE: Tenable Network Security h...

CVE-2016-5362

CVE-2016-5362 affects OpenStack Neutron’s IPTables firewall feature. The vulnerability exists in the DHCP-spoofing protection mechanism, allowing remote attackers to bypass anti-spoof controls and potentially cause a denial of service or intercept traffic via a crafted DHCP discovery. Affected re...

Vulnerabilities in BIND affects AIX,Vulnerabilities in BIND affects VIOS,Vulnerability in BIND affects AIX

bindadvisory12.asc: Version 5 Version 5 Issued: Mon Dec 4 14:20:31 CST 2017 Version 5 Changes: APAR table updated to reflect both APARs where relevant. IBM SECURITY ADVISORY First Issued: Fri Jun 17 08:19:25 CDT 2016 |Updated: Mon Dec 4 14:20:31 CST 2017 |Update: APAR table updated to reflect bot...

SUSE SLED12 / SLES12 Security Update : ntp (SUSE-SU-2016:1563-1)

ntp was updated to version 4.2.8p8 to fix five security issues. These security issues were fixed : - CVE-2016-4953: Bad authentication demobilizes ephemeral associations bsc982065. - CVE-2016-4954: Processing spoofed server packets bsc982066. - CVE-2016-4955: Autokey association reset bsc982067. ...

SUSE SLES11 Security Update : ntp (SUSE-SU-2016:1584-1)

ntp was updated to version 4.2.8p8 to fix five security issues. These security issues were fixed : - CVE-2016-4953: Bad authentication demobilizes ephemeral associations bsc982065. - CVE-2016-4954: Processing spoofed server packets bsc982066. - CVE-2016-4955: Autokey association reset bsc982067. ...

SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2016:1596-1)

The SUSE Linux Enterprise 12 GA kernel was updated to fix one security issue. The following security bug was fixed : - CVE-2016-1583: Prevent the usage of mmap when the lower file system does not allow it. This could have lead to local privilege escalation when ecryptfs-utils was installed and...

ICS SCADA NSA Situational Awareness: Grassmarlin

ICS SCADA NSA Situational Awareness: Grassmarlin Provide IP network situational awareness of industrial control systems ICS and Supervisory Control and Data Acquisition SCADA networks to support network security. Passively map, and visually display, an ICS/SCADA network topology while safely...

FreeBSD : botan -- cryptographic vulnerability (f771880c-31cf-11e6-8e82-002590263bf5)

MITRE reports : The Miller-Rabin primality check in Botan before 1.10.8 and 1.11.x before 1.11.9 improperly uses a single random base, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a DH group. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

CVE-2016-2834

CVE-2016-2834 concernsMozilla Network Security Services (NSS), as used in Mozilla Firefox, with NSS versions before 3.23. Exploitation can lead to remote code execution, memory corruption, or denial of service, per connected IBM advisories. Relevant IBM records show NSS in various IBM products (P...

SQL Injection Vulnerability in minX Parameters of Zhongke Xinye Network Security Audit Platform

Zhongke Xinye Network Security Audit Platform is an Internet behavior analysis system. A SQL injection vulnerability exists in Zhongke Xinye Network Security Audit Platform due to the program not adequately filtering the minX parameter. An attacker is allowed to exploit the vulnerability to obtai...

OpenStack NeutronMAC Source Address Spoofing Vulnerability

OpenStack is a cloud platform management program developed by the National Aeronautics and Space Administration NASA in collaboration with Rackspace, Inc. in the U.S. Neutron is one of the networking components that provides Network-as-a-Service NaaS, which enables the creating networks between...

Unspecified Vulnerability in Mozilla Firefox Network Security Services

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation.Network Security Services NSS is a library Network Security Services library, which provides cross-platform support for SSL, S/MIME and other Internet security standards. An unspecified vulnerability exists in NSS...

Debian DLA-505-1 : libpdfbox-java security update

Apache PDFBox did not properly initialize the XML parsers, which allows context-dependent attackers to conduct XML External Entity XXE attacks via a crafted PDF. This may lead to the disclosure of confidential data, denial of service, server side request forgery, port scanning from the perspectiv...

Unpatched D-Link Wi-Fi Camera Flaw Remotely Exploitable

D-Link is wrestling with a vulnerability in its DCS­930L Wi-Fi camera that was privately disclosed by security company Senrio. The flaw exposes the cameras to remote code execution, a Senrio report says. CEO Stephen Ridley told Threatpost that his company is working with D-Link on remediation...

Debian DLA-506-1 : dhcpcd5 security update

Two vulnerabilities were discovered in dhcpcd5 a DHCP client package. A remote on a local network attacker can possibly execute arbitrary code or cause a denial of service attack by crafted messages. CVE-2014-7912 The getoption function does not validate the relationship between length fields and...

Debian DLA-498-1 : ruby-activemodel-3.2 security update

Active Model in Ruby on Rails 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 supports the use of instance-level writers for class accessors, which allows remote attackers to bypass intended validation steps via crafted parameters. For Debian 7 'Wheezy', these problems...