Design/Logic Flaw

Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect confidentiality via unknown vectors related to Solaris Kernel Zones...

CVE-2015-4831

CVE-2015-4831 is described in Oracle Solaris 11.2 as a local, easily exploitable vulnerability in the Solaris Kernel Zones component. The exploit can cause a hang or frequent crash (complete DOS) on affected systems, with a local user able to impact availability. The Nessus-based content indicate...

CVE-2015-4801

Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect confidentiality via unknown vectors related to Solaris Kernel Zones...

CVE-2015-4801

CVE-2015-4801 affects Oracle Solaris 11.2, relating to the Solaris Kernel Zones component. The connected documents identify a local, confidentially impacting vulnerability in Solaris Kernel Zones, but do not provide exploitable vectors, affected package versions beyond the general 11.2 scope, or ...

CVE-2015-4822

CVE-2015-4822 affects Oracle Solaris 11.2, specifically the Solaris Kernel Zones component. The connected sources describe an unspecified local vulnerability in Solaris Kernel Zones that can impact availability when exploited by a local attacker. The NASL entry for oct2015 indicates multiple kern...

CVE-2015-4820

Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Solaris Kernel Zones, a different vulnerability than CVE-2015-4907...

CVE-2015-4817

Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect confidentiality, integrity, and availability via vectors related to Kernel Zones virtualized NIC driver...

CVE-2015-4831

Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect availability via unknown vectors related to Solaris Kernel Zones, a different vulnerability than CVE-2015-4822...

CVE-2015-4822

Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect availability via unknown vectors related to Solaris Kernel Zones, a different vulnerability than CVE-2015-4831...

Debian DLA-328-1 : tzdata new upstream version

Upstream published version 2015g, with changes to the following time zones compared to the current version in squeeze-lts : - Fiji - Fort Nelson, British Columbia - Morroco - Norfolk Island - North Korea - Turkey - Uruguay NOTE: Tenable Network Security has extracted the preceding description blo...

Electric Sheep Fencing Pfsense WebGUI Cross-Site Scripting Vulnerability

Electric Sheep Fencing pfsense is a free and open source FreeBSD-based firewall and router software from Electric Sheep Fencing. A cross-site scripting vulnerability exists in the WebGUI of Electric Sheep Fencing pfSense versions prior to 2.2.3, which stems from the servicescaptiveportalzones.php...

CVE-2015-2651

Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect availability via vectors related to Kernel Zones virtualized NIC driver...

Design/Logic Flaw

Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect availability via vectors related to Kernel Zones virtualized NIC driver...

CVE-2015-2651

Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect availability via vectors related to Kernel Zones virtualized NIC driver...

CVE-2015-2651

CVE-2015-2651 affects Oracle Solaris 11.2 kernel zones’ virtualized NIC driver. Local attackers can cause a denial of service by exploiting a vulnerability in the NIC driver component. No explicit exploit details are given in the provided sources. The vulnerability is discussed across multiple re...

Oracle Solaris Critical Patch Update : jul2015_SRU11_2_11_5_0

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: S10 Branded Zone. Supported versions that are affected are 10 and 11.2. Easily exploitable vulnerability requiring...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the admin panel in osCMax before 2.5.1 allow remote attackers to inject arbitrary web script or HTML via the 1 username parameter in a process action to admin/login.php; 2 pageTitle, 3 currentproductid, or 4 cPath parameter to...

ISC BIND NSEC3-Signed Zones Queries Processing Denial of Service - Ver2 (CVE-2014-0591)

A denial of service vulnerability exists in ISC BIND. The vulnerability is due to a failure to handle queries for NSEC3-signed zones. A remote attacker may exploit this vulnerability by sending a specially crafted query...

Internet Explorer HTML Help Remote Code Execution (MS05-001) - Ver2 (CVE-2004-1043)

Microsoft Internet Explorer executes with the concept of security zones, which enables the browser to apply different security policies based on the origin of the file that is being rendered. For instance, separate restrictions may be set for remote content and for local content. As a rule,...

Debian DLA-104-1 : pdns-recursor security update

Florian Maury from ANSSI discovered a flaw in pdns-recursor, a recursive DNS server : a remote attacker controlling maliciously-constructed zones or a rogue server could affect the performance of pdns-recursor, thus leading to resource exhaustion and a potential denial of service. NOTE: Tenable...