Red Hat Security Advisory 2016-1272-01 - OpenStack Dashboard provides administrators and users with a graphical interface to access, provision, and automate cloud-based resources. The following packages have been upgraded to a newer upstream version: python-django-horizon: 2015.1.4. Security Fix: A DOM-based, cross-site scripting vulnerability was found in the OpenStack dashboard, where user input was not filtered correctly. An authenticated dashboard user could exploit the flaw by injecting an AngularJS template into a dashboard form, triggering the vulnerability when another user browsed the affected page. As a result, this flaw could result in user accounts being compromised.
57c18e406ff48d256568840e79fd9a8a9165b5682bb8557bf2460e7a347077b8Red Hat Security Advisory 2016-1271-01 - OpenStack Dashboard provides administrators and users with a graphical interface to access, provision, and automate cloud-based resources. Security Fix: A DOM-based, cross-site scripting vulnerability was found in the OpenStack dashboard, where user input was not filtered correctly. An authenticated dashboard user could exploit the flaw by injecting an AngularJS template into a dashboard form, triggering the vulnerability when another user browsed the affected page. As a result, this flaw could result in user accounts being compromised.
332d67b19899392e831c09c54bc9fe1fc0b682a8f165e19386c332e202a75379Red Hat Security Advisory 2016-1270-01 - OpenStack Dashboard provides administrators and users with a graphical interface to access, provision, and automate cloud-based resources. Security Fix: A DOM-based, cross-site scripting vulnerability was found in the OpenStack dashboard, where user input was not filtered correctly. An authenticated dashboard user could exploit the flaw by injecting an AngularJS template into a dashboard form, triggering the vulnerability when another user browsed the affected page. As a result, this flaw could result in user accounts being compromised.
4988110b761f7d244c2b8fe79fc98028f74872c914e77416413a6b2c20fc1033Red Hat Security Advisory 2016-1269-01 - OpenStack Dashboard provides administrators and users with a graphical interface to access, provision, and automate cloud-based resources. Security Fix: A DOM-based, cross-site scripting vulnerability was found in the OpenStack dashboard, where user input was not filtered correctly. An authenticated dashboard user could exploit the flaw by injecting an AngularJS template into a dashboard form, triggering the vulnerability when another user browsed the affected page. As a result, this flaw could result in user accounts being compromised.
e8b5f2a5572c79a4a5333f0e6148e04ccab18504a755cadb8a52a22a30caf447Red Hat Security Advisory 2016-1268-01 - OpenStack Dashboard provides administrators and users with a graphical interface to access, provision, and automate cloud-based resources. Security Fix: A DOM-based, cross-site scripting vulnerability was found in the OpenStack dashboard, where user input was not filtered correctly. An authenticated dashboard user could exploit the flaw by injecting an AngularJS template into a dashboard form, triggering the vulnerability when another user browsed the affected page. As a result, this flaw could result in user accounts being compromised.
0c519befde1282ae9674cb5175276ec7b4452dbab552efe67d806f409758a58eRed Hat Security Advisory 2016-1267-01 - The setroubleshoot packages provide tools to help diagnose SELinux problems. When Access Vector Cache messages are returned, an alert can be generated that provides information about the problem and helps to track its resolution. The setroubleshoot-plugins package provides a set of analysis plugins for use with setroubleshoot. Each plugin has the capacity to analyze SELinux AVC data and system data to provide user friendly reports describing how to interpret SELinux AVC denials.
48d97575a2509ec4db6bcab27e3b6fa30160797714cb37a38ecd57b94bf060d2Banshee version 2.6.2 suffers from a local buffer overflow denial of service vulnerability.
26edc85d998730f46b90f3ca64e39f44f34bd5219d831c811db151048b8a3ce1ExpoActes version 3.1.2php suffers from a remote SQL injection vulnerability.
31123a37a71b3c5bc19f16cf8b4a1705250b8b84100d5a42f7fb67c1e68a178aDolibarr CRM versions prior to 3.9.1 suffer from a cross site scripting vulnerability.
0eb7db17895859a0ba9ec97232d788863fbf48cbf6bedb1eda1ed288f19d36caParishcouncil CMS version SAS4.5 suffers from a cross site scripting vulnerability.
73a4a6a03029369ee94859f7830e8b0463b27d0e945fcd98ad7d9e55aa6261c1
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed