11769 matches found
Nessus Web UI 2.3.3 Cross Site Scripting Vulnerability
Nessus Web UI version 2.3.3 suffers from a persistent cross site scripting vulnerability. Nessus Web UI 2.3.3: Stored XSS ========================================================= CVE number: CVE-2014-7280 Permalink: http://www.thesecurityfactory.be/permalink/nessus-stored-xss.html Vendor advisor...
Nessus Web UI 2.3.3 - Persistent Cross-Site Scripting
Nessus Web UI 2.3.3: Stored XSS ========================================================= CVE number: CVE-2014-7280 Permalink: http://www.thesecurityfactory.be/permalink/nessus-stored-xss.html Vendor advisory: http://www.tenable.com/security/tns-2014-08 -- Info -- Nessus is a proprietary...
Ubuntu 14.04 LTS : APT vulnerability (USN-2370-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2370-1 advisory. Guillem Jover discovered that APT incorrectly created a temporary file when handling the changelog command. A local attacker could use this issue to overwrite...
Fedora 20 : fish-2.1.1-1.fc20 (2014-11850)
Update to 2.1.1 NB: Most security bugs were already fixed Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...
Nessus Web UI 2.3.3 Cross Site Scripting
Nessus Web UI 2.3.3: Stored XSS ========================================================= CVE number: CVE-2014-7280 Permalink: http://www.thesecurityfactory.be/permalink/nessus-stored-xss.html Vendor advisory: http://www.tenable.com/security/tns-2014-08 -- Info -- Nessus is a proprietary...
Fedora 19 : nodejs-qs-0.6.6-3.fc19 (2014-11399)
The qs module has the ability to create sparse arrays during parsing. By specifying a high index it is possible to create a large array that will eventually take up all the allocated memory of the running process, resulting in a crash. More information:...
Fedora 20 : mediawiki-1.23.4-1.fc20 (2014-11727)
bug 69008 SECURITY: Enhance CSS filtering in SVG files. Filter elements; normalize style elements and attributes before filtering; add checks for attributes that contain css; add unit tests for html5sec and reported bugs. - bug 65998 Make MySQLi work with non-standard socket. - bug 66986...
Ubuntu 14.04 LTS : file vulnerability (USN-2369-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2369-1 advisory. It was discovered that file incorrectly handled certain CDF documents. A attacker could use this issue to cause file to hang or crash, resulting in a denial of...
Ubuntu 14.04 LTS : libvirt vulnerabilities (USN-2366-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2366-1 advisory. Daniel P. Berrange and Richard Jones discovered that libvirt incorrectly handled XML documents containing XML external entity declarations. An attacker...
Oracle Linux 5 / 6 : php53 / and / php (ELSA-2014-1326)
The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-1326 advisory. - spl: fix use-after-free in ArrayIterator due to object change during sorting. CVE-2014-4698 - spl: fix use-after-free in SPL Iterators...
Fedora 20 : bash-4.2.48-2.fc20 (2014-11527) (Shellshock)
This build should fix CVE-2014-7169 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 7030...
Fedora 20 : tomcat-7.0.52-1.fc20 (2014-11048)
Updated to 7.0.52 - Create and own %localstatedir/lib/tomcats, resolves: rhbz1026741 - Add pom for tomcat-jdbc, resolves: rhbz1011003 - Substitute libnames in catalina-tasks.xml, resolves: rhbz1126439 - Use CATALINAOPTS only on start, resolves: rhbz1051194 Note that Tenable Network Security has...
Fedora 21 : bash-4.3.25-2.fc21 (2014-11718) (Shellshock)
Fix for CVE-2014-7169 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...
Fedora 20 : python-oauth2-1.5.211-7.fc20 (2014-10786)
Fix CVE-2013-4346 and CVE-2013-4347, thanks to Philippe Makowski. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...
Fedora 19 : bash-4.2.48-2.fc19 (2014-11514) (Shellshock)
This build should fix CVE-2014-7169 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 7030...
Fedora 21 : nodejs-send-0.3.0-4.fc21 (2014-11289)
When relying on the root option to restrict file access it may be possible for an application consumer to escape out of the restricted directory and access files in a similarly named directory. For example, staticdirname + '/public' would allow access to dirname + '/public-restricted'...
SeaMonkey < 2.29.1 NSS Signature Verification Vulnerability
The version of SeaMonkey installed on the remote host is prior to 2.29.1. It is, therefore, affected by a flaw in the Network Security Services NSS library, which is due to lenient parsing of ASN.1 values involved in a signature and can lead to the forgery of RSA signatures, such as SSL...
Ubuntu 14.04 LTS : Bash vulnerability (USN-2362-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2362-1 advisory. Stephane Chazelas discovered that Bash incorrectly handled trailing code in function definitions. An attacker could use this issue to bypass environment...
Ubuntu 10.04 LTS : linux-ec2 vulnerabilities (USN-2355-1)
Chris Evans reported an flaw in the Linux kernel's handling of iso9660 compact disk filesystem images. An attacker who can mount a custom iso9660 image either via a CD/DVD drive or a loopback mount could cause a denial of service system crash or reboot. CVE-2014-5471 Chris Evans reported an flaw ...
Ubuntu 14.04 LTS : APT vulnerability (USN-2353-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2353-1 advisory. It was discovered that APT incorrectly handled certain http URLs. If a remote attacker were able to perform a machine-in-the-middle attack, this flaw could be...