Scientific Linux Security Update : expat on SL7.x i686/x86_64 (2022:6834)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2022:6834-1 advisory. - expat: a use-after-free in the doContent function in xmlparse.c CVE-2022-40674 Note that Nessus has not tested for this issue but has instead relied onl...

Scientific Linux Security Update : bind on SL7.x i686/x86_64 (2022:6765)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2022:6765-1 advisory. - bind: memory leak in ECDSA DNSSEC verification code CVE-2022-38177 - bind: memory leaks in EdDSA DNSSEC verification code CVE-2022-38178 Note...

Scientific Linux Security Update : thunderbird on SL7.x x86_64 (2022:6710)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2022:6710-1 advisory. - Mozilla: Leaking of sensitive information when composing a response to an HTML email with a META refresh tag CVE-2022-3033 - Mozilla: Bypassing...

Scientific Linux Security Update : firefox on SL7.x i686/x86_64 (2022:6711)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2022:6711-1 advisory. - Mozilla: Bypassing FeaturePolicy restrictions on transient pages CVE-2022-40959 - Mozilla: Data-race when parsing non-UTF-8 URLs in threads...

Scientific Linux Security Update : open-vm-tools on SL7.x x86_64 (2022:6381)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2022:6381-1 advisory. - open-vm-tools: local root privilege escalation in the virtual machine CVE-2022-31676 Note that Nessus has not tested for this issue but has instead reli...

Scientific Linux Security Update : thunderbird on SL7.x x86_64 (2022:6169)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2022:6169-1 advisory. - Mozilla: Address bar spoofing via XSLT error handling CVE-2022-38472 - Mozilla: Cross-origin XSLT Documents would have inherited the parent's...

Scientific Linux Security Update : systemd on SL7.x i686/x86_64 (2022:6160)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2022:6160-1 advisory. - systemd-resolved: use-after-free when dealing with DnsStream in resolved-dns-stream.c CVE-2022-2526 Note that Nessus has not tested for this issue but h...

Scientific Linux Security Update : firefox on SL7.x i686/x86_64 (2022:6179)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2022:6179-1 advisory. - Mozilla: Address bar spoofing via XSLT error handling CVE-2022-38472 - Mozilla: Cross-origin XSLT Documents would have inherited the parent's...

Scientific Linux Security Update : rsync on SL7.x x86_64 (2022:6170)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2022:6170-1 advisory. - rsync: remote arbitrary files write inside the directories of connecting peers CVE-2022-29154 Note that Nessus has not tested for this issue but has...

campbellsci.fr Cross Site Scripting vulnerability OBB-2843987

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Scientific Linux Security Update : xorg-x11-server on SL7.x i686/x86_64 (2022:5905)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2022:5905-1 advisory. - xorg-x11-server: X.Org Server ProcXkbSetGeometry out-of-bounds access CVE-2022-2319 - xorg-x11-server: out-of-bounds access in...

Scientific Linux Security Update : thunderbird on SL7.x x86_64 (2022:5773)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2022:5773-1 advisory. - Mozilla: Memory safety bugs fixed in Firefox 103 and 102.1 CVE-2022-2505 - Mozilla: Directory indexes for bundled resources reflected URL...

Scientific Linux Security Update : kernel on SL7.x x86_64 (2022:5937)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2022:5937-1 advisory. - Incomplete cleanup of multi-core shared buffers aka SBDR CVE-2022-21123 - Incomplete cleanup of microarchitectural fill buffers aka SBDS...

Scientific Linux Security Update : java-11-openjdk on SL7.x i686/x86_64 (2022:5687)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2022:5687-1 advisory. - OpenJDK: integer truncation issue in Xalan-J JAXP, 8285407 CVE-2022-34169 - OpenJDK: class compilation issue Hotspot, 8281859 CVE-2022-21540 -...

Scientific Linux Security Update : squid on SL7.x x86_64 (2022:5542)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2022:5542-1 advisory. - squid: DoS when processing gopher server responses CVE-2021-46784 Note that Nessus has not tested for this issue but has instead relied only on the...

Scientific Linux Security Update : java-1.8.0-openjdk on SL7.x i686/x86_64 (2022:5698)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2022:5698-1 advisory. - OpenJDK: integer truncation issue in Xalan-J JAXP, 8285407 CVE-2022-34169 - OpenJDK: class compilation issue Hotspot, 8281859 CVE-2022-21540 -...

Scientific Linux Security Update : firefox on SL7.x i686/x86_64 (2022:5479)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2022:5479-1 advisory. - Mozilla: CSP sandbox header without allow-scripts can be bypassed via retargeted javascript: URI CVE-2022-34468 - Mozilla: Use-after-free in...

Scientific Linux Security Update : thunderbird on SL7.x x86_64 (2022:5480)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2022:5480-1 advisory. - Mozilla: CSP sandbox header without allow-scripts can be bypassed via retargeted javascript: URI CVE-2022-34468 - Mozilla: Use-after-free in...

Scientific Linux Security Update : python-virtualenv on SL7.x (noarch) (2022:5234)

The remote Scientific Linux 7 host has a package installed that is affected by a vulnerability as referenced in the SLSA-2022:5234-1 advisory. - python-pip: directory traversal in downloadhttpurl function in src/pip/internal/download.py CVE-2019-20916 Note that Nessus has not tested for this issu...

Scientific Linux Security Update : 389-ds-base on SL7.x x86_64 (2022:5239)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2022:5239-1 advisory. - 389-ds-base: sending crafted message could result in DoS CVE-2022-0918 - 389-ds-base: expired password was still allowed to access the database...