9月 - 2016 - 漏洞银行丨0daybank

漏洞类别：Debian 漏洞等级：漏洞信息 Debian has released security update for python-django to fix the vulnerabilities. 漏洞危害 Successful exploitation allows attacker to compromise the system. 解决方案 Refer to Debian security advisory DSA 3678-1 to address this issue and obtain f…

2016-09-29 0条评论 2340点热度 0人点赞 admin 阅读全文

漏洞类别：Debian 漏洞等级：漏洞信息 Debian has released security update for libarchive to fix the vulnerabilities. 漏洞危害 The sandboxing code in libarchive mishandles hardlink archive entries of non-zero data size, which might allow remote attackers to write to arbitrary fil…

2016-09-29 0条评论 1885点热度 0人点赞 admin 阅读全文

漏洞类别：Debian 漏洞等级：漏洞信息 Debian has released security update for unadf to fix the vulnerabilities. 漏洞危害 Successful exploitation allows attacker to compromise the system. 解决方案 Refer to Debian security advisory DSA 3676-1 to address this issue and obtain further d…

2016-09-29 0条评论 2004点热度 0人点赞 admin 阅读全文

漏洞类别：Local 漏洞等级：漏洞信息 Cisco AnyConnect is a VPN Client for multiple platforms. Cisco AnyConnect Secure Mobility Client contains a vulnerability that could allow an authenticated, local attacker to execute arbitrary code with elevated privileges. Affected Versi…

2016-09-29 0条评论 2087点热度 0人点赞 admin 阅读全文

漏洞类别：Local 漏洞等级：漏洞信息 HPE Data Protector software provides comprehensive data backup and recovery across physical, virtual and hybrid environments. Hewlett Packard Enterprise is announcing the version discontinuance of HP Data Protector 6.0x Affected Version :…

2016-09-29 0条评论 2014点热度 0人点赞 admin 阅读全文

漏洞类别：CGI 漏洞等级：漏洞信息 Joomla! is a free open-source content management system written in PHP. It uses object oriented programming techniques and is built on a model-view-controller web application framework. It includes features such as page caching, RSS feeds, …

2016-09-29 0条评论 2284点热度 0人点赞 admin 阅读全文

漏洞类别：OEL 漏洞等级：漏洞信息 Oracle Enterprise Linux has released security update for openssl to fix the vulnerabilities. Affected Products: Oracle Linux 7 Oracle Linux 6 漏洞危害 Successful exploitation allows remote attackers to cause a denial of service (false-positive …

2016-09-29 0条评论 2370点热度 0人点赞 admin 阅读全文

漏洞类别：SUSE 漏洞等级：漏洞信息 Suse has released security update for openssh to fix the vulnerabilities. Affected Products: SUSE OpenStack Cloud 5 SUSE Manager Proxy 2.1 SUSE Manager 2.1 SUSE Linux Enterprise Server 11-SP3-LTSS SUSE Linux Enterprise Point of Sale 11-SP3…

2016-09-29 0条评论 2268点热度 0人点赞 admin 阅读全文

漏洞类别：SUSE 漏洞等级：漏洞信息 Suse has released security update for libtcnative-1-0 to fix the vulnerabilities. Affected Products: SUSE Linux Enterprise Server 11-SP4 SUSE Linux Enterprise Debuginfo 11-SP4 漏洞危害 Malicious users could use this vulnerability to change par…

2016-09-29 0条评论 1973点热度 0人点赞 admin 阅读全文

漏洞类别：CGI 漏洞等级：漏洞信息 Drupal is a free and open-source content-management framework written in PHP and distributed under the GNU General Public License. Drupal 5 has been detected on the host. Drupal 5 has reached end of life on January 6, 2011 and will no longe…

2016-09-27 0条评论 2321点热度 0人点赞 admin 阅读全文

漏洞类别：Local 漏洞等级：漏洞信息 Apple Mac OS X v10.11.5 and Security Update 2016-003 are missing on the target host. Apple Mac OS X El Capitan 10.11.5 and Security Update 2016-003 are available to resolve multiple security vulnerabilities. 漏洞危害 Successfully exploiting t…

2016-09-27 0条评论 1990点热度 0人点赞 admin 阅读全文

漏洞类别：RedHat 漏洞等级：漏洞信息 The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update fixes multiple vulnerabilities in Adobe Flash Player. These vulnerabilities, detailed in the Adobe Security Bulletin liste…

2016-09-27 0条评论 1975点热度 0人点赞 admin 阅读全文

漏洞类别：CGI 漏洞等级：漏洞信息 JIRA is used for issue tracking and project management. JIRA 6.1.x reached end of life on June 8, 2016 and is no longer be supported by Atlassian. 漏洞危害 The system is at high risk of being exposed to security vulnerabilities. Since Atlassian…

2016-09-27 0条评论 2207点热度 0人点赞 admin 阅读全文

漏洞类别：Security Policy 漏洞等级：漏洞信息 The host is running XenServer 5.6. Microsoft ended support for XenServer 5.6 on 31st March 2014 and provides no further support for this operating system. 漏洞危害 The system is at high risk of being exposed to security vulnerabilit…

2016-09-27 0条评论 2060点热度 0人点赞 admin 阅读全文

漏洞类别：Security Policy 漏洞等级：漏洞信息 The host is running XenServer 5.5. Microsoft ended support for XenServer 5.5 on 15th September 2013 and provides no further support for this operating system. 漏洞危害 The system is at high risk of being exposed to security vulnerab…

2016-09-27 0条评论 2026点热度 0人点赞 admin 阅读全文

漏洞类别：SUSE 漏洞等级：漏洞信息 Suse has released security update for flash-player to fix the vulnerabilities. Affected Products: openSUSE 13.1 NonFree 漏洞危害 This vulnerability could be exploited to gain complete access to sensitive information. Malicious users could also…

2016-09-27 0条评论 1886点热度 0人点赞 admin 阅读全文

漏洞类别：SUSE 漏洞等级：漏洞信息 Suse has released security update for flash-player to fix the vulnerabilities. Affected Products: openSUSE 13.2 NonFree 漏洞危害 This vulnerability could be exploited to gain complete access to sensitive information. Malicious users could also…

2016-09-27 0条评论 1905点热度 0人点赞 admin 阅读全文

漏洞类别：CentOS 漏洞等级：漏洞信息 CentOS has released security update for firefox to fix the vulnerabilities. Affected Products: centos 6 centos 5 centos 7 漏洞危害 This vulnerability could be exploited to gain partial access to sensitive information. Malicious users could a…

2016-09-27 0条评论 1819点热度 0人点赞 admin 阅读全文

漏洞类别：OEL 漏洞等级：漏洞信息 Oracle Enterprise Linux has released security update for firefox to fix the vulnerabilities. Affected Products: Oracle Linux 7 Oracle Linux 6 Oracle Linux 5 漏洞危害 Successful exploitation allows remote attackers to execute arbitrary code via …

2016-09-27 0条评论 1912点热度 0人点赞 admin 阅读全文

漏洞类别：Security Policy 漏洞等级：漏洞信息 Oracle WebLogic Server is a Java EE application server currently developed by Oracle Corporation. Oracle WebLogic Server 10.3.x has been detected on the host. Oracle WebLogic Server 10.3 has reached end of life on January 2014 a…

2016-09-27 0条评论 2459点热度 0人点赞 admin 阅读全文

漏洞类别：Windows漏洞等级：漏洞信息 The Print Spooler service is an executable file that is installed as a service. The spooler is loaded when the operating system starts, and it continues to run until the operating system is shut down. The Print Spooler service manages th…

2016-09-27 0条评论 1629点热度 0人点赞 admin 阅读全文

漏洞类别：Office Application漏洞等级：漏洞信息 Multiple remote code execution vulnerabilities exist in Microsoft Office software when the Office software fails to properly handle objects in memory. A vulnerability exists when Microsoft Office fails to properly handle XLA f…

2016-09-27 0条评论 1548点热度 0人点赞 admin 阅读全文

漏洞类别：Local 漏洞等级：漏洞信息 Adobe Flash Player is a multimedia application for multiple platforms. Adobe has released security updates for Adobe Flash Player. These updates address critical vulnerabilities that could potentially allow an attacker to take control of …

2016-09-27 0条评论 1428点热度 0人点赞 admin 阅读全文

漏洞类别：RedHat漏洞等级：漏洞信息 The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update upgrades Flash Player to version 11.2.202.632. Security Fix(es): * This update fixes multiple vulnerabilities in Adobe Flas…

2016-09-27 0条评论 1728点热度 0人点赞 admin 阅读全文

漏洞类别：Database 漏洞等级：漏洞信息 This Critical Patch Update contains 22 new security fixes for Oracle MySQL. 3 of these vulnerabilities may be remotely exploitable without authentication Affected Versions:- MySQL Server, version(s) 5.5.49 and prior, 5.6.30 and prior, …

2016-09-27 0条评论 1525点热度 0人点赞 admin 阅读全文

2016-09-27 0条评论 1583点热度 0人点赞 admin 阅读全文

漏洞类别：Local 漏洞等级：漏洞信息 SolarWinds Storage Resource Monitor is Comprehensive storage performance monitoring and alerting across all your storage arrays to ensure peak performance and avoid capacity surprises. The specific flaw exists within processing of the Xio…

2016-09-27 0条评论 1714点热度 0人点赞 admin 阅读全文

漏洞类别：CGI 漏洞等级：漏洞信息 Drupal is a free and open-source content-management framework written in PHP and distributed under the GNU General Public License. Drupal 5 has been detected on the host. Drupal 8.0.x has reached end of life on April 5, 2016 and will no lon…

2016-09-27 0条评论 1507点热度 0人点赞 admin 阅读全文

漏洞类别：Debian 漏洞等级：漏洞信息 Debian has released security update for openssl to fix the vulnerabilities. 漏洞危害 A malicious remote user may be able to execute arbitrary code as well as cause a denial of service on the targeted host. 解决方案 Refer to Debian security advis…

2016-09-27 0条评论 1392点热度 0人点赞 admin 阅读全文

漏洞类别：Debian 漏洞等级：漏洞信息 Debian has released security update for imagemagick to fix the vulnerabilities. 漏洞危害 Successful exploitation allows attacker to compromise the system. 解决方案 Refer to Debian security advisory DSA 3675-1 to address this issue and obtain fur…

2016-09-27 0条评论 1401点热度 0人点赞 admin 阅读全文

漏洞类别：Debian 漏洞等级：漏洞信息 Debian has released security update for firefox-esr to fix the vulnerabilities. 漏洞危害 Successful exploitation allows remote attackers to obtain sensitive information about the previously retrieved page via Resource Timing API calls. 解决方案 …

2016-09-27 0条评论 1135点热度 0人点赞 admin 阅读全文

2016-09-27 0条评论 1051点热度 0人点赞 admin 阅读全文

漏洞类别：Debian 漏洞等级：漏洞信息 Debian has released security update for irssi to fix the vulnerabilities. 漏洞危害 A remote attacker could use this to cause a denial of service (application crash). 解决方案 Refer to Debian security advisory DSA 3672-1 to address this issue and…

2016-09-27 0条评论 1148点热度 0人点赞 admin 阅读全文

漏洞类别：SUSE 漏洞等级：漏洞信息 Suse has released security update for java-1_6_0-ibm to fix the vulnerabilities. Affected Products: SUSE OpenStack Cloud 5 SUSE Manager Proxy 2.1 SUSE Manager 2.1 SUSE Linux Enterprise Server 11-SP3-LTSS SUSE Linux Enterprise Server 11-SP2…

2016-09-27 0条评论 1242点热度 0人点赞 admin 阅读全文

漏洞类别：SUSE 漏洞等级：漏洞信息 Suse has released security update for java-1_7_1-ibm to fix the vulnerabilities. Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP1 SUSE Linux Enterprise Server for SAP 12 SUSE Linux Enterprise Server 12-SP1 SUSE Linu…

2016-09-27 0条评论 1010点热度 0人点赞 admin 阅读全文

漏洞类别：SUSE 漏洞等级：漏洞信息 Suse has released security update for libgcrypt to fix the vulnerabilities. Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP1 SUSE Linux Enterprise Server 12-SP1 SUSE Linux Enterprise Desktop 12-SP1 漏洞危害 This vulnera…

2016-09-27 0条评论 1129点热度 0人点赞 admin 阅读全文

漏洞类别：SUSE 漏洞等级：漏洞信息 Suse has released security update for libgcrypt to fix the vulnerabilities. Affected Products: SUSE Linux Enterprise Software Development Kit 11-SP4 SUSE Linux Enterprise Server 11-SP4 SUSE Linux Enterprise Debuginfo 11-SP4 漏洞危害 This vulne…

2016-09-27 0条评论 1187点热度 0人点赞 admin 阅读全文

漏洞类别：SUSE 漏洞等级：漏洞信息 Suse has released security update for mysql to fix the vulnerabilities. Affected Products: SUSE OpenStack Cloud 5 SUSE Manager Proxy 2.1 SUSE Manager 2.1 SUSE Linux Enterprise Software Development Kit 11-SP4 SUSE Linux Enterprise Server 11…

2016-09-27 0条评论 1293点热度 0人点赞 admin 阅读全文

漏洞类别：Fedora 漏洞等级：漏洞信息 Fedora has released security update for bash to fix the vulnerability. Affected OS: Fedora 24 漏洞危害 A local attacker can exploit these issues to execute arbitrary code in the context of the user running the affected application. 解决方案 Fedo…

2016-09-27 0条评论 1247点热度 0人点赞 admin 阅读全文

漏洞类别：OEL 漏洞等级：漏洞信息 Oracle Enterprise Linux has released security update for unbreakable enterprise kernel to fix the vulnerabilities. Affected Products: Oracle Linux 6 Oracle Linux 5 漏洞危害 An attacker could use this to cause a denial of service (system crash).…

2016-09-27 0条评论 1271点热度 0人点赞 admin 阅读全文

漏洞类别：OEL 漏洞等级：漏洞信息 Oracle Enterprise Linux has released security update for unbreakable enterprise kernel to fix the vulnerabilities. Affected Products: Oracle Linux 7 Oracle Linux 6 漏洞危害 A local attacker could use this to cause a denial of service (system cr…

2016-09-27 0条评论 1069点热度 0人点赞 admin 阅读全文

2016-09-27 0条评论 1108点热度 0人点赞 admin 阅读全文

2016-09-27 0条评论 1000点热度 0人点赞 admin 阅读全文

漏洞类别：Hardware 漏洞等级：漏洞信息 The HPE Integrated Lights-Out (iLO) is an embedded server management technology that is useful as an out-of-band management technology. HPE iLO3 and HPE iLO4 contain multiple unspecified vulnerabilities that allow remote attackers to t…

2016-09-27 0条评论 1161点热度 0人点赞 admin 阅读全文

漏洞类别：Local 漏洞等级：漏洞信息 MySQL is an open-source relational database management system (RDBMS) for Linux and Windows. MySQL installed on Windows system stores user supplied credentials in plaintext in memory. Affected Versions: MySQL version 5.5.45, Older version…

2016-09-27 0条评论 1227点热度 0人点赞 admin 阅读全文

漏洞类别：Fedora 漏洞等级：漏洞信息 Fedora has released security update for xen to fix the vulnerability. Affected OS: Fedora 23 漏洞危害 A malicious HVM guest administrator can cause Xen to fail a bug check, causing a denial of service to the host. 解决方案 Fedora has issued upda…

2016-09-27 0条评论 1060点热度 0人点赞 admin 阅读全文

漏洞类别：Fedora 漏洞等级：漏洞信息 Fedora has released security update for drupal7-google_analytics to fix the vulnerability. Affected OS: Fedora 25 Fedora 24 Fedora 23 漏洞危害 Successful exploitation allows attacker to compromise the system. 解决方案 Fedora has issued updated p…

2016-09-27 0条评论 1118点热度 0人点赞 admin 阅读全文

漏洞类别：Fedora 漏洞等级：漏洞信息 Fedora has released security update for drupal7-panels to fix the vulnerability. Affected OS: Fedora 24 Fedora 23 Fedora 25 漏洞危害 Successful exploitation allows attacker to compromise the system. 解决方案 Fedora has issued updated packages to…

2016-09-27 0条评论 1125点热度 0人点赞 admin 阅读全文

漏洞类别：Fedora 漏洞等级：漏洞信息 Fedora has released security update for php to fix the vulnerability. Affected OS: Fedora 25 漏洞危害 Successful exploitation allows attacker to compromise the system. 解决方案 Fedora has issued updated packages to fix this vulnerability. Update…

2016-09-27 0条评论 1093点热度 0人点赞 admin 阅读全文

漏洞类别：Amazon Linux 漏洞等级：漏洞信息 A memory leak flaw was found in the way OpenSSL handled TLS status request extension data during session renegotiation. A remote attacker could cause a TLS server using OpenSSL to consume an excessive amount of memory and, possibly…

2016-09-27 0条评论 1182点热度 0人点赞 admin 阅读全文

12 3 4 5…10