Debian: Security Advisory (DSA-3118-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 19 : python-tornado-2.2.1-7.fc19 (2014-16477)

Add patch to fix CVE-2013-2098 CVE-2013-2099 bug 96627 - Drop requires python-simplejson, not needed for modern python Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...

LibreOffice 4.x < 4.2.7 Impress Remote RCE

A version of LibreOffice is installed on the remote Windows host that is 4.x prior to 4.2.7. It is, therefore, affected by a use-after-free vulnerability related to the Impress Remote socket manager that allows denial of service attacks or arbitrary code execution by means of a specially crafted...

GLSA-201412-30 : Varnish: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201412-30 Varnish: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Varnish. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could cause a Denial of Service...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2014-3105)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-3105 advisory. - HID: fix a couple of off-by-ones Jiri Kosina Orabug: 19849320 CVE-2014-3184 - ALSA: control: Protect user controls against concurrent access...

GLSA-201412-24 : OpenJPEG: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201412-24 OpenJPEG: Multiple vulnerabilities Multiple vulnerabilities have been discovered in OpenJPEG. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to open a...

GLSA-201412-10 : Multiple packages, Multiple vulnerabilities fixed in 2012

The remote host is affected by the vulnerability described in GLSA-201412-10 Multiple packages, Multiple vulnerabilities fixed in 2012 Vulnerabilities have been discovered in the packages listed below. Please review the CVE identifiers in the Reference section for details. EGroupware VTE Layer Fo...

GLSA-201412-23 : Nagios: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201412-23 Nagios: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Nagios. Please review the CVE identifiers referenced below for details. Impact : A remote attacker may be able to execute arbitrary code,...

VMware vCenter Update Manager Multiple Java Vulnerabilities (VMSA-2014-0012)

The version of VMware vCenter Update Manager installed on the remote Windows host is 5.1 prior to Update 3. It is, therefore, affected by multiple vulnerabilities related to the bundled version of Oracle JRE prior to 1.6.081. C Tenable Network Security, Inc. include"compat.inc"; if description...

Fedora 19 : firefox-34.0-1.fc19 / thunderbird-31.3.0-1.fc19 (2014-16242)

New Firefox release - 34.0. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

EMC Documentum Content Server Insecure Direct Object Reference (ESA-2014-156)

The remote host is running a version of EMC Documentum Content Server that is affected by an insecure direct object reference vulnerability, which allows a remote, authenticated attacker to potentially read or delete arbitrary files without authorization. C Tenable Network Security, Inc...

OracleVM 2.2 : kernel (OVMSA-2013-0039)

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2013-0039 for details. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory...

Oracle Linux 7 : mariadb (ELSA-2014-1861)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1861 advisory. - Rebase to 5.5.40 Also fixes: CVE-2014-4274 CVE-2014-4287 CVE-2014-6463 CVE-2014-6464 CVE-2014-6469 CVE-2014-6484 CVE-2014-6505 CVE-2014-6507...

RedHat Update for libvirt RHSA-2014:1873-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Business Transaction Management 'FlashTunnelService' 'WriteToFile' Message RCE

The remote web server is hosting a version of Oracle Business Transaction Management that is affected by a remote code execution vulnerability. The 'FlashTunnelService' web service does not require authentication and exposes the 'WriteToFile' function, which can allow a remote, unauthenticated...

Debian: Security Advisory (DSA-3061-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Pidgin < 2.10.10 Multiple Vulnerabilities

The version of Pidgin installed on the remote host is a version prior to 2.10.10. It is, therefore, affected by the following vulnerabilities : - An error exists in the included libpurple library related the SSL Basic Constraints extension and Certificate Authority CA verification that allows...

PHP 5.6.x < 5.6.2 Multiple Vulnerabilities

According to its banner, the version of PHP 5.6.x installed on the remote host is prior to 5.6.2. It is, therefore, affected by the following vulnerabilities : - A buffer overflow error exists in the function 'mkgmtime' that can allow application crashes or arbitrary code execution. CVE-2014-3668...

RedHat Update for thunderbird RHSA-2014:1647-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MS KB3001237: Update for Vulnerabilities in Adobe Flash Player in Internet Explorer

The remote host is missing KB3001237. It is, therefore, affected by the following vulnerabilities : - Multiple memory corruption issues due to improperly sanitized user-supplied input allow arbitrary code execution. CVE-2014-0564, CVE-2014-0558 - An integer overflow issue due to improperly...