CVE-2019-0386

CVE-2019-0386 concerns SAP ERP Sales and S/4HANA Sales where order processing does not perform required authorization checks for an authenticated user, enabling privilege escalation. Affected: SAP_APPL 6.0, 6.02, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18 and S4CORE 1.0, 1.01, 1.02, 1.03, 1.04. Roo...

Improper Access Control

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and libraries. This update fixes several vulnerabilities in the MySQL database server. Information about these flaws can be found on the Oracle Critical Patch Update...

CVE-2018-0386

Cisco Unified Communications Domain Manager Software contains a cross-site scripting (XSS) vulnerability (CVE-2018-0386) due to improper input validation. A remote, unauthenticated attacker can lure a user to a malicious URL to access sensitive information or perform actions in the user’s securit...

Updated libnl3 packages fix security vulnerability

An elevation of privilege vulnerability in the libnl library could enable a local malicious application to execute arbitrary code within the context of a privileged process CVE-2017-0386. An integer overflow vulnerability was found in nlmsgreserve triggered by crafted @len argument resulting into...

Virtuozzo Linux Errata and Security Advisory 2017:0386 Important

Upstream security update. Follow RHSA-2017-0386 for details...

RedHat Update for kernel RHSA-2017:0386-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 7 : kernel (ELSA-2017-0386)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-0386 advisory. - x86 kvm: x86: Check memopp before dereference Mateusz Guzik 1395805 1395806 CVE-2016-8630 - vfio pci: Fix integer overflows, bitmask check Mateusz...

Fedora 24 : libnl3 (2017-1423c7b4b0)

check valid input arguments for nlareserve rh 1414305, CVE-2017-0386 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora Update for libnl3 FEDORA-2017-1423c7b4b0

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-0386

An elevation of privilege vulnerability in the libnl library could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally...

CVE-2017-0386

CVE-2017-0386 describes an elevation of privilege in the libnl library that could allow a local malicious application to execute arbitrary code within the context of a privileged process on Android. Affected products/versions include Android 5.0.2–7.1 (as listed). The impact is local code executi...

CVE-2017-0386

An elevation of privilege vulnerability in the libnl library could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally...

CVE-2016-0386

IBM TRIRIGA Application Platform is affected by CVE-2016-0386 through versions 3.3 (before 3.3.2.6), 3.4 (before 3.4.2.4), and 3.5 (before 3.5.0.2). The vulnerability is a Cross-Site Request Forgery (CSRF) caused by improper input validation, allowing remote authenticated users to hijack administ...

Mageia: Security Advisory (MGASA-2015-0386)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2007-0386)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2009-0271)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-0386

The CVE-2015-0386 entry concerns an unspecified vulnerability in the Oracle HTTP Server Web Listener component of Oracle Fusion Middleware 11.1.1.7.0, 12.1.2.0, and 12.1.3.0. It states that remote attackers could affect availability via unknown vectors, and explicitly notes this is a different is...

Fedora Update for mariadb FEDORA-2014-16003

Check the version of mariadb SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868576";...

CentOS 6 : mariadb55-mariadb (CESA-2014:0189)

The remote CentOS host is missing a security update which has been documented in Red Hat advisory RHSA-2014:0189. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Red Hat Security Advisory RHSA-2014:0189 and CentOS...

Medium: mysql51

Issue Overview: This update fixes several vulnerabilities in the MySQL database server. CVE-2014-0386, CVE-2014-0393, CVE-2014-0401, CVE-2014-0402, CVE-2014-0412, CVE-2014-0437, CVE-2013-5908 A buffer overflow flaw was found in the way the MySQL command line client tool mysql processed excessivel...