1875 matches found
Magento Community Edition 2.x < 2.0.4 Multiple Vulnerabilities
Binary data 9693.prm...
Puppet Client Detection
Binary data 9672.prm...
OpenSSL 1.0.2 < 1.0.2i Multiple Vulnerabilities
The version of OpenSSL installed on the remote host is prior to 1.0.2i. It is, therefore, affected by multiple vulnerabilities as referenced in the 1.0.2i advisory. - Multiple memory leaks in t1lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to...
[SECURITY] Fedora 23 Update: openvas-libraries-8.0.8-2.fc23
openvas-libraries is the base library for the OpenVAS network security scanner...
Apple iOS 9.3.x < 9.3.5 Multiple Vulnerabilities
Binary data 9548.prm...
ipmi-version NSE Script
Performs IPMI Information Discovery through Channel Auth probes. Example Usage nmap -sU --script ipmi-version -p 623 Script Output PORT STATE SERVICE REASON 623/udp open|filtered unknown | ipmi-version: | Version: IPMI-2.0 | UserAuth: password, md5, md2 | PassAuth: nulluser | Level: 1.2,2.0...
openSUSE Security Update : python3 (openSUSE-2016-997) (httpoxy)
This update for python3 fixes the following issues : - apply fix for CVE-2016-1000110 - CGIHandler: sets environmental variable based on user-supplied Proxy request header fixes boo989523, CVE-2016-1000110 - update to 3.4.5 check: https://docs.python.org/3.4/whatsnew/changelog.html fixes boo98475...
OpenSSH 7.x < 7.3 Multiple Vulnerabilities
Binary data 9507.prm...
openSUSE Security Update : Chromium (openSUSE-2016-919)
Chromium was updated to 52.0.2743.82 to fix the following security issues boo989901 : - CVE-2016-1706: Sandbox escape in PPAPI - CVE-2016-1707: URL spoofing on iOS - CVE-2016-1708: Use-after-free in Extensions - CVE-2016-1709: Heap-buffer-overflow in sfntly - CVE-2016-1710: Same-origin bypass in...
Legal Robot: Subdomain takeover at api.legalrobot.com due to non-used domain in Modulus.io.
Hi, I noticed that the following domain: api.legalrobot.com was returning the following information: NO APPLICATION WAS FOUND FOR api.legalrobot.com F102881 from Modulus.io. The problem with this is that this tends to be pretty bad depending on the service you use. In this case, what I did was to...
OracleVM 3.2 : openssl (OVMSA-2016-0071)
The remote OracleVM system is missing necessary patches to address critical security updates : - To disable SSLv2 client connections create the file /etc/sysconfig/openssl-ssl-client-kill-sslv2 John Haxby orabug 21673934 - Backport openssl 08-Jan-2015 security fixes John Haxby orabug 20409893 - f...
SUSE SLED12 / SLES12 Security Update : ntp (SUSE-SU-2016:1563-1)
ntp was updated to version 4.2.8p8 to fix five security issues. These security issues were fixed : - CVE-2016-4953: Bad authentication demobilizes ephemeral associations bsc982065. - CVE-2016-4954: Processing spoofed server packets bsc982066. - CVE-2016-4955: Autokey association reset bsc982067. ...
WordPress < 4.5 Multiple Vulnerabilities
Binary data 9366.prm...
Спортмастер - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Спортмастер published at the 'play' market has multiple vulnerabilities...
AIX 7.2 : bos.rte.control (U870330)
The remote host is missing AIX PTF U870330, which is related to the security of the package bos.rte.control. Libxml2 is vulnerable to a denial of service, caused by a heap-based buffer overflow in the xmlParseEntityDecl or xmlParseConditionalSections function. By using a specially crafted XML dat...
Wordpress BulletProof Security 53.3 Cross Site Scripting
Information -------------------- Advisory by Netsparker Name: Multiple XSS Vulnerabilities in BulletProof Security Affected Software : BulletProof Security Affected Versions: v53.3 and possibly below Vendor Homepage : https://wordpress.org/plugins/bulletproof-security/ Vulnerability Type :...
FreeBSD : ImageMagick -- multiple vulnerabilities (0d724b05-687f-4527-9c03-af34d3b094ec) (ImageTragick)
Openwall reports : Insufficient filtering for filename passed to delegate's command allows remote code execution during conversion of several file formats. Any service which uses ImageMagick to process user-supplied images and uses default delegates.xml / policy.xml, may be vulnerable to this...
[SECURITY] Fedora 22 Update: openvas-libraries-8.0.7-2.fc22
openvas-libraries is the base library for the OpenVAS network security scanner...
Debian DSA-3566-1 : openssl - security update
Several vulnerabilities were discovered in OpenSSL, a Secure Socket Layer toolkit. - CVE-2016-2105 Guido Vranken discovered that an overflow can occur in the function EVPEncodeUpdate, used for Base64 encoding, if an attacker can supply a large amount of data. This could lead to a heap corruption....