CVE-2020-0365

CVE-2020-0365 affects Android 11 netd; root cause is a missing bounds check causing an out-of-bounds read that can lead to a remote DoS without user interaction. Exploitation is Local with low complexity; impact is DoS with partial availability impact. Remediation: addressed in Android 11 release...

RHEL 7 : Red Hat JBoss Enterprise Application Platform 7.1.6 for RHEL 7 (RHSA-2019:0365)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:0365 advisory. Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss Application Server. This release of Red...

CVE-2018-0365

Cisco Firepower Management Center’s web-based management interface is affected by a CSRF vulnerability due to insufficient CSRF protections. An unauthenticated, remote attacker could lure a user into clicking a malicious link and perform arbitrary actions in the web UI with the user’s privileges....

Security Bulletin: Relays do not properly authenticate agents attempting to download artifacts (CVE-2016-0365)

Summary When using Codestation caching of artifacts on agent relays, agents can download artifacts without properly authenticating. Vulnerability Details CVEID: CVE-2016-0365 DESCRIPTION: IBM UrbanCode Deploy could allow an attacker with special knowledge of the system to download artifacts witho...

CVE-2017-0365

Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a XSS vulnerability in SearchHighlighter::highlightText with non-default configurations...

CVE-2017-0365

CVE-2017-0365 is a XSS vulnerability in MediaWiki’s SearchHighlighter::highlightText() that affects MediaWiki versions prior to 1.28.1, 1.27.2, and 1.23.16 when non-default configurations are used. The issue is purely described as a cross‑site scripting flaw; no exploitation details or in‑the‑wil...

CVE-2017-0365

Mediawiki before 1.28.1 / 1.27.2 / 1.23.16 contains a XSS vulnerability in SearchHighlighter::highlightText with non-default configurations...

Fedora 25 : mediawiki (2017-3fb95ed01f)

T109140 T122209 Special:UserLogin and Special:Search allow redirect to interwiki links. CVE-2017-0363, CVE-2017-0364 - T144845 XSS in SearchHighlighter::highlightText when $wgAdvancedSearchHighlighting is true. CVE-2017-0365 - T125177 API parameters may now be marked as 'sensitive' to keep their...

CVE-2016-0365

IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1, when agent-relay Codestation artifact caching is enabled, allows remote attackers to bypass authentication and obtain sensitive artifact information via unspecified vectors...

CVE-2016-0365

IBM UrbanCode Deploy versions affected: 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1. When agent-relay Codestation artifact caching is enabled, authentication can be bypassed and sensitive artifact information can be obtained via unspecified vectors. Remediation: upgrade ...

Oracle: Security Advisory (ELSA-2009-0361)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-0365

Unspecified vulnerability in the Siebel Core - Server Infrastructure component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality via unknown vectors related to Security...

CVE-2015-0365

Oracle Siebel CRM 8.1.1 and 8.2.2 are affected by multiple vulnerabilities described in the January 2015 CPU, including issues in Siebel Core - Server Infrastructure and other components (e.g., UI Framework, BizLogic Script). CVE-2015-0365 is listed among these, with an unspecified confidentialit...

CVE-2015-0365

Unspecified vulnerability in the Siebel Core - Server Infrastructure component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality via unknown vectors related to Security...

Oracle Linux 4 : NetworkManager (ELSA-2009-0362)

From Red Hat Security Advisory 2009:0362 : Updated NetworkManager packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. NetworkManager is a network link manager that...

CVE-2013-0365

The CVE-2013-0365 entry affects Oracle Siebel CRM versions 8.1.1 and 8.2.2 (Siebel Security component). The Nessus/Oracle CPU data states it is an authenticated network vulnerability exploitable via HTTP that can lead to unauthorized read access to a subset of Siebel CRM data. No separate exploit...

Scientific Linux Security Update : NetworkManager on SL4.x, SL5.x i386/x86_64

An information disclosure flaw was found in NetworkManager's D-Bus interface. A local attacker could leverage this flaw to discover sensitive information, such as network connection passwords and pre-shared keys. CVE-2009-0365 A potential denial of service flaw was found in NetworkManager's D-Bus...

CVE-2012-0365

Cisco SRP 500 Series devices (including SRP 521W/526W/527W and SRP 521W-U/526W-U/527W-U; and SRP 541W/546W/547W) with firmware before 1.1.26 (520 series) or before 1.2.4 (520W‑U and 540 series) are affected by CVE-2012-0365. The vulnerability is a directory traversal in the Local TFTP file-upload...

Debian DSA-1955-1 : network-manager/network-manager-applet - information disclosure

It was discovered that network-manager-applet, a network management framework, lacks some dbus restriction rules, which allows local users to obtain sensitive information. If you have locally modified the /etc/dbus-1/system.d/nm-applet.conf file, then please make sure that you merge the changes...

CVE-2010-0365

Cross-site scripting XSS vulnerability in search.php in BitScripts Bits Video Script 2.04 and 2.05 Gold Beta allows remote attackers to inject arbitrary web script or HTML via the order parameter...