Patch 1 Release Notes for Veeam ONE 6.5.0.676

Challenge Patch 1 for Veeam ONE 6.5.0.676 resolves a number of issues described in this article. All patches are cumulative, which means that this patch includes all fixes listed below. Cause Prior to applying this patch, make sure you are running Veeam ONE version 6.5.0.676. You can check this...

[SECURITY] Fedora 18 Update: zabbix-2.0.3-7.fc18

Zabbix is software that monitors numerous parameters of a network and the health and integrity of servers. Zabbix uses a flexible notification mechan ism that allows users to configure e-mail based alerts for virtually any event. This allows a fast reaction to server problems. Zabbix offers...

Manage Engine Exchange Reporter v4.1 - Multiple Web Vulnerabilites

Title: ====== Manage Engine Exchange Reporter v4.1 - Multiple Web Vulnerabilites Date: ===== 2012-11-14 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=688 VL-ID: ===== 688 Common Vulnerability Scoring System: ==================================== 4.5 Introduction:...

Agilebits 1Password 3.9.9 Cross Site Scripting

Exploit Title: agilebits 1Password XSS Vulnerability Date: 30 Nov 2012 Author: Christy Philip Mathew Vendor or Software Link: https://d13itkw33a7sus.cloudfront.net/dist/1P/win/1Password-1.0.9.305.exe Version: 3.9.9 Category:: local Tested on: Windows 7 1Password can create strong, unique password...

Piwik Detection

The remote web server is running Piwik, a web analytics tool used for detailed reporting of website analytics. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid63078; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01";...

Manage Engine Exchange Reporter 4.1 Cross Site Scripting

Exploit for php platform in category local exploits Manage Engine Exchange Reporter v4.1 - Multiple Web Vulnerabilites Introduction: ============= Microsoft Exchange Server is, by a distance, the most popular communication, collaboration and email messaging application today! MS Exchange serves a...

Fedora Update for bcfg2 FEDORA-2012-10402

Check for the Version of bcfg2 OpenVAS Vulnerability Test Fedora Update for bcfg2 FEDORA-2012-10402 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

Ocean Data Systems Dream Reports XSS and Write Access Violation Vulnerabilities

Overview Independent researchers Billy Rios and Terry McCorkle identified cross-site scripting XSS and write access violation vulnerabilities in Ocean Data Systems Dream Report application. ICS-CERT has coordinated these vulnerabilities with Ocean Data Systems, which has produced a new version th...

Oracle Critical Patch Update - October 2012

A Critical Patch Update CPU is a collection of patches for multiple security vulnerabilities. Critical Patch Update patches are usually cumulative but each advisory describes only the security fixes added since the previous Critical Patch Update advisory. Thus, prior Critical Patch Update...

Microsoft SQL Server Report Manager Cross Site Scripting Vulnerability (2754849)

This host has important security update missing according to Microsoft Bulletin MS12-070. OpenVAS Vulnerability Test $Id: secpodms12-070.nasl 5346 2017-02-19 08:43:11Z cfi $ Microsoft SQL Server Report Manager Cross Site Scripting Vulnerability 2754849 Authors: Rachana Shetty Copyright: Copyright...

SpiceWorks 6.0.00993 - Multiple Script Injection Vulnerabilities

SpiceWorks 6.0.00993 - Multiple Script Injection Vulnerabilities !-- Title: Spiceworks 6.0.00993 Multiple Script Injection Vulnerabilities Vendor: Spiceworks Inc. Product web page: http://www.spiceworks.com Affected version: 6.0.00993 and 6.0.00966 Summary: The Spiceworks IT Desktop delivers near...

CVE-2012-1152

Multiple format string vulnerabilities in the error reporting functionality in the YAML::LibYAML aka YAML-LibYAML and perl-YAML-LibYAML module 0.38 for Perl allow remote attackers to cause a denial of service process crash via format string specifiers in a 1 YAML stream to the Load function, 2 YA...

Format string

Multiple format string vulnerabilities in the error reporting functionality in the YAML::LibYAML aka YAML-LibYAML and perl-YAML-LibYAML module 0.38 for Perl allow remote attackers to cause a denial of service process crash via format string specifiers in a 1 YAML stream to the Load function, 2 YA...

[SECURITY] Fedora 17 Update: zabbix-1.8.15-1.fc17

ZABBIX is software that monitors numerous parameters of a network and the health and integrity of servers. ZABBIX uses a flexible notification mechanism that allows users to configure e-mail based alerts for virtually any event. This allows a fast reaction to server problems. ZABBIX offers...

PT-2012-5502

Name of the Vulnerable Software and Affected Versions McAfee ePolicy Orchestrator ePO versions 4.6.1 and earlier Description The issue allows remote authenticated users to bypass intended access restrictions and obtain sensitive information from arbitrary reporting panels. This is achieved by...

ManageEngine OpStor v7.4 - Multiple Web Vulnerabilities

Document Title: =============== ManageEngine OpStor v7.4 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=667 Release Date: ============= 2012-08-17 Vulnerability Laboratory ID VL-ID: ==================================== 667...

Scientific Linux Security Update : abrt, libreport, btparser, and python-meh on SL6.x i386/x86_64 (20120620)

ABRT Automatic Bug Reporting Tool is a tool to help users to detect defects in applications and to create a bug report with all the information needed by a maintainer to fix it. It uses a plug-in system to extend its functionality. libreport provides an API for reporting different problems in...

CentOS Update for libvirt CESA-2011:0478 centos5 x86_64

Check for the Version of libvirt OpenVAS Vulnerability Test CentOS Update for libvirt CESA-2011:0478 centos5 x8664 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Oracle Critical Patch Update - July 2012

A Critical Patch Update CPU is a collection of patches for multiple security vulnerabilities. Critical Patch Update patches are usually cumulative but each advisory describes only the security fixes added since the previous Critical Patch Update advisory. Thus, prior Critical Patch Update...

Data Breach Reports Remain Spotty, Study Finds

In a twist on Tolstoy’s famous observation that “all happy families are alike,” the Identity Theft Resource Center ITRC is warning that the public is being told that ‘all data breaches are alike,’ as corporations paint a worryingly bland portrait of breaches and other data loss incidents affectin...