Low: Red Hat Security Advisory: Red Hat JBoss Web Framework Kit 2.4.0 update

Red Hat JBoss Web Framework Kit 2.4.0, which fixes one security issue, various bugs, and adds enhancements, is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base...

OTRS Email Body XSS Vulnerability (OSA-2012-03)

Open Ticket Request System OTRS is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

MGASA-2013-0279 Updated freeswitch packages fix security vulnerability

In FreeSWITCH before 1.2.12, if the routing configuration includes regular expressions that don't constrain the length of the input, buffer overflows are possible. Since these regular expressions are matched against untrusted input, remote code execution may be possible CVE-2013-2238...

CVE-2013-3370

Request Tracker RT 3.8.x before 3.8.17 and 4.0.x before 4.0.13 does not properly restrict access to private callback components, which allows remote attackers to have an unspecified impact via a direct request...

Fedora Update for strongswan FEDORA-2013-14510

Check for the Version of strongswan OpenVAS Vulnerability Test Fedora Update for strongswan FEDORA-2013-14510 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Oracle Linux 5 / 6 : thunderbird (ELSA-2013-1142)

The remote Oracle Linux 5 / 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2013-1142 advisory. 17.0.8-5.0.1.el64 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 17.0.8-5 - Update to 17.0.8 ESR - Added...

Fedora Update for gegl FEDORA-2013-12075

Check for the Version of gegl OpenVAS Vulnerability Test Fedora Update for gegl FEDORA-2013-12075 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Fedora Update for ksudoku FEDORA-2013-10182

Check for the Version of ksudoku OpenVAS Vulnerability Test Fedora Update for ksudoku FEDORA-2013-10182 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

PT-2013-2626 · Mozilla +1 · Firefox Esr +4

Name of the Vulnerable Software and Affected Versions: Mozilla Firefox versions prior to 20.0 Firefox ESR versions 17.x prior to 17.0.5 Thunderbird versions prior to 17.0.5 Thunderbird ESR versions 17.x prior to 17.0.5 Description: A buffer overflow issue in the Mozilla Maintenance Service allows...

Fedora Update for zfs-fuse FEDORA-2013-3425

Check for the Version of zfs-fuse OpenVAS Vulnerability Test Fedora Update for zfs-fuse FEDORA-2013-3425 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

PT-2013-3205 · Oracle +1 · Mysql Server +1

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 5.5.29 and earlier Oracle MySQL versions 5.6.10 and earlier Description: The issue affects confidentiality, integrity, and availability. It can be exploited by remote authenticated users via unknown vectors related to...

SuSE Update for calligra openSUSE-SU-2012:1061-1 (calligra)

Check for the Version of calligra OpenVAS Vulnerability Test $Id: gbsuse201210611.nasl 8045 2017-12-08 08:39:37Z santu $ SuSE Update for calligra openSUSE-SU-2012:1061-1 calligra Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This...

openSUSE: Security Advisory for calligra (openSUSE-SU-2012:1061-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2013-1004

Name of the Vulnerable Software and Affected Versions OpenSSH versions prior to 6.6 p1-r1 OpenSSH through 6.1 VMware vCenter Server affected versions not specified Check Point GAiA affected versions not specified Description The issue is related to a mechanism in OpenSSH that can cause a denial o...

update for bogofilter (important)

Update to version 1.2.3. Update configure.ac to avoid autoconf 2.68 warnings, by a quoting the first ACRUNIFELSE argument, an ACLANGPROGRAM, with , and b providing an explicit "true" assumption for Berkeley DB capabilities to avoid cross-compilation warnings. Security bugfix; bnc792939, Fix a...

Fedora Update for php-ZendFramework FEDORA-2013-0061

Check for the Version of php-ZendFramework OpenVAS Vulnerability Test Fedora Update for php-ZendFramework FEDORA-2013-0061 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

PT-2013-1809 · Libtiff +3 · Libtiff +3

Name of the Vulnerable Software and Affected Versions: LibTIFF versions prior to 4.0.2 Description: The issue is related to a stack-based buffer overflow in the tif dir.c file, which can be triggered by a crafted DOTRANGE tag in a TIFF image. This can cause a denial of service, resulting in a...

KLA10084 DoS vulnerability in Siemens ALM

A memory leak was found in Siemens ALM. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via specially designed packets. Original advisories Siemens bulletin Related products Automation-License-Manager CVE list CVE-2012-469...

Fedora 16 : cgit-0.9.1-2.fc16 (2012-18462)

Fix syntax highlight to use the correct version of highlight. Update to new upsteam version with 2 security fixes, enhancements and misc other bug fixes. See http://git.zx2c4.com/cgit/commit/?id=a6a932e198e8b6b564d7a4bb43e78078d 8296026 for details. Note that Tenable Network Security has extracte...

PT-2012-6157 · Sinapsi +1 · Sinapsi Esolar Light Photovoltaic System Monitor +3

Name of the Vulnerable Software and Affected Versions: Sinapsi eSolar Light Photovoltaic System Monitor aka Schneider Electric Ezylog photovoltaic SCADA management server versions prior to 2.0.2870 2.2.12 Sinapsi eSolar versions prior to 2.0.2870 2.2.12 Sinapsi eSolar DUO versions prior to 2.0.28...