4366 matches found
RHEL 6 : kernel (RHSA-2012:1064)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:1064 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: A NUL...
CentOS 6 : 389-ds-base (CESA-2012:0813)
Updated 389-ds-base packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, whi...
CentOS 6 : sos (CESA-2012:0958)
An updated sos package that fixes one security issue, several bugs, and adds various enhancements is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which...
CentOS 5 / 6 : postgresql / postgresql84 (CESA-2012:1037)
Updated postgresql84 and postgresql packages that fix two security issues are now available for Red Hat Enterprise Linux 5 and 6 respectively. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which...
RHEL 6 : java-1.7.0-oracle (RHSA-2012:1019)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:1019 advisory. The Oracle Java 7 release includes the Oracle Java 7 Runtime Environment and the Oracle Java 7 Software Development Kit. This update fixes...
Important: Red Hat Security Advisory: jbossas security update
An update for JBoss Enterprise Web Platform 5.1.2 that fixes one security issue is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...
OpenJDK: insufficient field accessibility checks (HotSpot, 7152811)
Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.237 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to...
RHEL 6 : rsyslog (RHSA-2012:0796)
Updated rsyslog packages that fix one security issue, multiple bugs, and add two enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which...
CentOS 6 : java-1.6.0-openjdk (CESA-2012:0729)
Updated java-1.6.0-openjdk packages that fix several security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...
RHEL 5 / 6 : expat (RHSA-2012:0731)
Updated expat packages that fix two security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...
CentOS 5 / 6 : expat (CESA-2012:0731)
Updated expat packages that fix two security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...
OpenJDK: SynthLookAndFeel application context bypass (Swing, 7143614)
Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, and 5 update 35 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Swing...
RHEL 5 : kernel (RHSA-2012:0721)
The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0721 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: It wa...
RHEL 5 / 6 : openoffice.org (RHSA-2012:0705)
The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0705 advisory. OpenOffice.org is an office productivity suite that includes desktop applications, such as a word processor, spreadsheet application,...
HPSBPI02779 SSRT100855 rev.2 - HP Web Jetadmin v8.x Running on Windows, Remote Cross Site Scripting (XSS)
Potential Security Impact Remote cross site scripting XSS VULNERABILITY SUMMARY Potential security vulnerabilities have been identified with HP Web Jetadmin v8.x. These vulnerabilities could be exploited remotely resulting in cross site scripting XSS. RESOLUTION HP has provided HP Web Jetadmin...
WordPress Better WP Security Cross Site Scripting
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Wordpress Security audit betterwpsecurity 1. Cross-site scripting reflected Summary Severity: High Confidence: Certain Host: http://127.0.0.1 Path: /wp-admin/admin.php?page=betterwpsecurity Issue detail The value of the User-Agent HTTP header is copie...
正方教务管理系统web端补考成绩录入漏洞
简要描述： web端成绩录入可绕过密码验证录入补考成绩。 详细说明： 此漏洞与 WooYun: 正方教务管理系统web端成绩录入漏洞 类似。 web端在进行成绩录入时可以通过直接将动态页面从jscjmm.aspx修改为xfjsbkcjlr.aspx进行绕过，只要具有教师的登录权限，不需要验证成绩录入密码即可直接进入成绩的录入和提交页面。 我写了一个脚本用于测试我所在学校的教师账户，发现有几百个教师账户仍旧使用默认账户密码，如果通过此漏洞将造成巨大影响，我也准备将所收集的资料上报校方处理。 漏洞证明： 此漏洞与 WooYun: 正方教务管理系统web端成绩录入漏洞 类似，就不再截图证明了。...
Moderate: Red Hat Security Advisory: JBoss Enterprise Portal Platform 5.2.1 update
JBoss Enterprise Portal Platform 5.2.1, which fixes two security issues and various bugs, is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which giv...
CentOS 5 / 6 : openssl (CESA-2012:0518)
Updated openssl, openssl097a, and openssl098e packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which giv...
