RHEL 6 : curl (RHSA-2014:0561)

Updated curl packages that fix two security issues and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Oracle Linux 6 : curl (ELSA-2014-0561)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0561 advisory. - fix re-use of wrong HTTP NTLM connection CVE-2014-0015 - fix connection re-use when using different log-in credentials CVE-2014-0138 Tenable has...

XML injection vulnerability hazard warning-vulnerability warning-the black bar safety net

Vulnerability description: the Extensible Markup Language Extensible Markup Language, XML for marking an electronic file so that it has a structural markup language that can be used to tag data definition data type is a allows the user to Own the markup language for the definition of the source...

Updated kernel-rt packages fix multiple vulnerabilities

Updated kernel-rt provides upstream 3.10.40 kernel and fixes the following security issues: The microcode on AMD 16h 00h through 0Fh processors does not properly handle the interaction between locked instructions and write-combined memory types, which allows local users to cause a denial of servi...

RHEL 5 : mysql55-mysql (RHSA-2014:0536)

Updated mysql55-mysql packages that fix several security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings...

CentOS 5 : mysql55-mysql (CESA-2014:0536)

Updated mysql55-mysql packages that fix several security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings...

Fedora 19 : python-fedora-0.3.34-1.fc19 (2014-5948)

Fix two security issues for services using python-fedora's TG1 and flask helpers. The TG1 fix quotes variables that could have been used to launch an XSS attack. The flask fix addresses OpenID Covert Redirect for web services which use flaskfasopenid to authenticate against the Fedora Account...

RHEL 6 : libxml2 (RHSA-2014:0513)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:0513 advisory. The libxml2 library is a development toolbox providing the implementation of various XML standards. It was discovered that libxml2 loaded...

Updated kernel packages fix multiple vulnerabilities

Updated kernel provides upstream 3.10.40 kernel and fixes the following security issues: The microcode on AMD 16h 00h through 0Fh processors does not properly handle the interaction between locked instructions and write-combined memory types, which allows local users to cause a denial of service...

IBM WebSphere MQ 7.1 < 7.1.0.5 / 7.5 < 7.5.0.3 Multiple Vulnerabilities

The version of IBM WebSphere MQ server 7.1 / 7.5 installed on the remote Windows host is missing fix pack 7.1.0.5 / 7.5.0.3 or later. It is, therefore, affected by the following vulnerabilities : - An information disclosure vulnerability exists due to a failure to sanitize user-supplied input in...

[oss-security] Zenoss Open Source monitoring System - Open Redirect &amp; Stored XSS Vulnerabilities

hi, Several security issues were found in Zenoss monitoring system. 1. Stored XSS. A persistent XSS vulnerability was found in Zenoss core, by creating a malicious host with the Title scriptalert"Xss"/script any user browsing to the relevant manufacturers page will get a client-side script execut...

RHEL 6 : kernel (RHSA-2014:0475)

Updated kernel packages that fix three security issues and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severit...

CentOS 6 : kernel (CESA-2014:0475)

Updated kernel packages that fix three security issues and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severit...

Fedora 20 : python-fedora-0.3.34-1.fc20 (2014-5962)

Fix two security issues for services using python-fedora's TG1 and flask helpers. The TG1 fix quotes variables that could have been used to launch an XSS attack. The flask fix addresses OpenID Covert Redirect for web services which use flaskfasopenid to authenticate against the Fedora Account...

Moderate: Red Hat Security Advisory: Red Hat JBoss Operations Network 3.2.1 update

Red Hat JBoss Operations Network 3.2.1, which fixes two security issues and several bugs, is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which giv...

Ubuntu Update for thunderbird USN-2189-1

Check for the Version of thunderbird OpenVAS Vulnerability Test $Id: gbubuntuUSN21891.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for thunderbird USN-2189-1 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

CentOS Update for firefox CESA-2014:0448 centos5

Check for the Version of firefox OpenVAS Vulnerability Test CentOS Update for firefox CESA-2014:0448 centos5 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Ubuntu Update for firefox USN-2185-1

Check for the Version of firefox OpenVAS Vulnerability Test $Id: gbubuntuUSN21851.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for firefox USN-2185-1 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software...

Debian: Security Advisory (DSA-2924-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for mysql-5.5 USN-2170-1

Check for the Version of mysql-5.5 OpenVAS Vulnerability Test $Id: gbubuntuUSN21701.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for mysql-5.5 USN-2170-1 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free...