SOL15013 - OpenSSH vulnerability CVE-2011-0539

Recommended Action None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents. SOL4602: Overview of the F5 security vulnerability response policy...

PT-2014-1964 · Libxml2 +2 · Libxml2 +2

Name of the Vulnerable Software and Affected Versions: libxml2 versions prior to 2.9.2 Description: The issue is related to the handling of external entities expansion in libxml2, which can be exploited by remote attackers to cause a denial of service, send HTTP requests to intranet servers, or...

SOL14933 - Apache Struts vulnerability CVE-2013-2251

Recommended action None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL15260: Apache Struts vulnerability...

SOL14930 - PHP vulnerability CVE-2011-4718

Recommended action None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents...

PT-2014-1191 · Oracle +5 · Mysql Server +5

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 5.5.34 and earlier Oracle MySQL versions 5.6.14 and earlier Description: The issue affects the MySQL Server component in Oracle MySQL, specifically the Replication subcomponent, allowing remote authenticated users to...

SOL14909 - OpenSSL vulnerability CVE-2013-4248

Recommended Action None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents. SOL4602: Overview of the F5 security vulnerability response policy...

SEC Consult SA-20131227-0 :: IBM Web Content Manager (WCM) XPath Injection

SEC Consult Vulnerability Lab Security Advisory 20131227-0 ======================================================================= title: XPath Injection product: IBM Web Content Manager WCM vulnerable version: 6.x, 7.x, 8.x fixed version: - impact: high homepage: http://www.ibm.com/ found:...

Brian Donohue on the NSA Panel Report

Dennis Fisher talks with Brian Donohue, Threatpost’s Washington, D.C. writer, about the new report from the NSA reform panel and whether any of the recommended changes will ever be implemented...

Jumbotcms 6. x by injection by pass the backend certification authority-vulnerability warning-the black bar safety net

Jumbotcms is a widely used open source. NET CMS program, jumbotcms using Microsoft's recommended multi-layer security architecture, widely used, Safety coefficient is high. It appears the problem is mainly the new modified permissions to the authentication aspects and injection By injection to ge...

DSA-2804-1 drupal7 - several

Bulletin has no description...

PT-2013-1034 · Oracle +5 · Mysql Server +5

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 5.1.71 and earlier Oracle MySQL versions 5.5.33 and earlier Oracle MySQL versions 5.6.13 and earlier Description: The issue allows remote authenticated users to affect availability via unknown vectors related to Locking ...

SOL14739 - OpenSSH vulnerability CVE-2008-3234

Recommended Action None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5 critical issue...

PT-2013-5811 · Oracle +4 · Mysql Server +4

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Server versions 5.5.x through 5.5.32 Oracle MySQL Server versions 5.6.x through 5.6.12 Description: The issue affects confidentiality and integrity, and it is related to Replication. Remote authenticated users can exploit this...

PT-2013-1253 · Gentoo Linux · Strongswan

Name of the Vulnerable Software and Affected Versions: strongswan versions prior to 5.1.0 Description: The issue affects the strongswan package in Gentoo Linux, potentially leading to breaches in confidentiality, integrity, and availability of protected information. Exploitation of the...

CentOS Update for java CESA-2013:0957 centos6

Check for the Version of java OpenVAS Vulnerability Test CentOS Update for java CESA-2013:0957 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

PT-2013-3799 · Oracle +4 · Oracle Java Se +6

Name of the Vulnerable Software and Affected Versions: Oracle Java SE versions 7 Update 21 and earlier Oracle Java SE versions 6 Update 45 and earlier Oracle Java SE versions 5.0 Update 45 and earlier OpenJDK 7 Description: The issue affects confidentiality, integrity, and availability via unknow...

SOL14446 - OpenSSH vulnerability CVE-2012-0814

Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents. SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...

PT-2013-1185 · None +3 · Libtirpc-Debuginfo +5

Name of the Vulnerable Software and Affected Versions: libtirpc versions 0.2.1 through 0.2.3 libtirpc-devel versions 0.2.1 libtirpc-debuginfo versions 0.2.1 Description: The issue allows remote attackers to cause a denial of service, potentially leading to disruption of protected information. Thi...

SOL14434 - OpenSSH vulnerability CVE-2006-5794

Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...

SOL14432 - PHP SOAP wdsl cache file vulnerability CVE-2013-1635

Vulnerability Recommended Actions None Supplemental Information CVE-2013-1635 Note: The previous link takes you to a resource outside of AskF5, and it is possible that the information may be removed without our knowledge. SOL9970: Subscribing to email notifications regarding F5 products SOL9957:...