9595 matches found
TimThumb 'timthumb.php' WebShot 'src' Parameter Remote Command Execution
The TimThumb 'timthumb.php' script installed on the remote host is affected by a remote command execution vulnerability due to a failure to properly sanitize user-supplied input to the 'src' parameter. A remote, unauthenticated attacker can leverage this issue to execute arbitrary commands on the...
Fedora Update for libmikmod FEDORA-2014-8183
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
RedHat Update for firefox RHSA-2014:0919-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for kernel FEDORA-2014-8487
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle Linux 7 : tomcat (ELSA-2014-0686)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0686 advisory. - Related: CVE-2013-4286 - Related: CVE-2013-4322 - Related: CVE-2014-0050 Tenable has extracted the preceding description block directly from the Orac...
Oracle Linux 7 : tomcat (ELSA-2014-0827)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0827 advisory. - Resolves: CVE-2014-0099 Fix possible overflow when parsing - Resolves: CVE-2014-0096 Information discloser process XSLT Tenable has extracted the...
Oracle Linux 7 : libtasn1 (ELSA-2014-0687)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0687 advisory. 3.3-5 - Added missing check for null pointer 1102338 3.3-4 - Fix multiple decoding issues 1102338 Tenable has extracted the preceding description block...
Fedora 20 : firefox-31.0-1.fc20 (2014-8736)
See https://www.mozilla.org/en-US/firefox/31.0/releasenotes/ for changes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
Ubuntu 14.04 LTS : Firefox vulnerabilities (USN-2295-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2295-1 advisory. Christian Holler, David Keeler, Byron Campen, Gary Kwong, Jesse Ruderman, Andrew McCreight, Alon Zakai, Bobby Holley, Jonathan Watt, Shu-yu Guo, Steve...
Ubuntu: Security Advisory (USN-2288-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for python FEDORA-2014-7772
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
ansible -- code execution from compromised remote host data or untrusted local data
Ansible, Inc. reports: Arbitrary execution from data from compromised remote hosts or untrusted local data - resolved in Ansible 1.6.7...
Fedora Update for lz4 FEDORA-2014-8099
The remote host is missing an update for the Copyright C 2014 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Ubuntu: Security Advisory (USN-2279-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MS KB2982792: Improperly Issued Digital Certificates Could Allow Spoofing
The remote host is missing KB2982792, KB2677070 automatic updater, or the latest disallowed certificate update using KB2813430 manual updater. If KB2677070 is installed, it is missing the latest auto-updates. Note that this plugin checks that the updaters have actually updated the disallowed CTL...
Flash Player <= 14.0.0.125 Multiple Vulnerabilities (APSB14-17)
According to its version, the instance of Flash Player installed on the remote Windows host is equal or prior to 14.0.0.125. It is, therefore, affected by the following vulnerabilities : - A CSRF bypassing Same Origin Policy vulnerability exists that could leak potentially sensitive data...
CSO Lanifex Outreach Project Tool 0.946 b Request Origin Spoofing Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6630/info It has been reported that OPT accepts the values supplied supplied by users in HTTP headers as the originating IP address of a request. It is possible for a remote host to supply a fake IP address in one of thes...
Clicky Web Pseudo-frames 1.0 - Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4756/info Pseudo-frames is an application written in PHP and is maintained by Clicky Web. Pseudo-frames permit remote file including. As a result, a remote attacker may include an arbitrary file located on a remote host. ...
LPRNG html2ps 1.0 - Remote Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6079/info A vulnerability has been discovered in the html2ps filter which is included in the lprng print system. It has been reported that it is possible for a remote attacker to execute arbitrary commands. The attacker...
Solaris 2.5/2.6/7.0/8 tip Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2475/info tip is a utility included with Sun Microsystems Solaris Operating Environment. tip allows a user to establish a full duplex terminal connection with a remote host. A problem with tip could lead to a buffer...