Stable Channel Update for ChromeOS

The Stable channel is being updated to 105.0.5195.112 Platform version: 14989.85.0 for most ChromeOS devices and will be rolled out over the next few days. For Chrome browser fixes, see the Chrome Desktop release announcement. If you find new issues, please let us know one of the following ways:...

CVE-2021-3052

creationtimestamp| type| source ---|---|--- 2021-09-08 20:45:53+00:00| seen| https://t.me/cibsecurity/28516...

CVE-2021-3052

A reflected cross-site scripting XSS vulnerability in the Palo Alto Network PAN-OS web interface enables an authenticated network-based attacker to mislead another authenticated PAN-OS administrator to click on a specially crafted link that performs arbitrary actions in the PAN-OS web interface a...

CVE-2021-3052

The CVE-2021-3052 issue is a Reflected XSS in the PAN-OS web interface. A authenticated network-based attacker can lure another authenticated PAN-OS administrator into clicking a crafted link to perform arbitrary actions in the admin interface. Affected versions include PAN-OS 8.1.x before 8.1.20...

PAN-OS: Reflected Cross-Site Scripting (XSS) in Web Interface

A reflected cross-site scripting XSS vulnerability in the Palo Alto Network PAN-OS web interface enables an authenticated network-based attacker to mislead another authenticated PAN-OS administrator to click on a specially crafted link that performs arbitrary actions in the PAN-OS web interface a...

CentOS 7 : wget (CESA-2018:3052)

An update for wget is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

Oracle Linux 7 : wget (ELSA-2018-3052)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2018-3052 advisory. - Fix CVE-2018-0494 1576106 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

CVE-2018-3052

CVE-2018-3052 affects Oracle Retail Applications MICROS Relate CRM Software (Internal Operations). Affected versions: 10.8.x and 11.4.x. The vulnerability allows a low-privileged, network-accessible attacker (HTTP) to compromise MICROS Relate CRM Software, potentially enabling unauthorized update...

Security Bulletin: IBM QRadar SIEM contains vulnerable components and libraries. (CVE-2015-0176, CVE-2016-0379, CVE-2016-3052)

Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. Vulnerability Details CVEID: CVE-2015-0176 DESCRIPTION: IBM WebSphere MQ is vulnerable to reflected cross-site scripting, caused by improper validation of...

Security Bulletin: IBM Security Access Manager for Web - NIST setting (CVE-2014-3052)

Summary A defect in the configuration of IBM Security Access Manager ISAM for Web v8.0 could result in systems failing to properly comply to NIST800-131 standards. Vulnerability Details CVE ID : CVE-2014-3052 DESCRIPTION: The reverse proxy component of IBM Security Access Manager for Web can be...

Virtuozzo Linux Errata and Enhancement Advisory 2017:3052

Upstream security update. Follow RHEA-2017:3052 for details...

CVE-2017-3052

Technical details for CVE-2017-3052 are not provided in the supplied documents. Monitor for updates from official advisories.

CVE-2016-3052

IBM WebSphere MQ can reveal passwords in cleartext over the network under nonstandard configurations, enabling MITM exposure. The IBM bulletin references CVE-2016-3052 among vulnerable MQ components and provides remediation via QRadar MQJMS protocol fixes (e.g., 7.3.0-QRADAR-PROTOCOL-MQJMS-7.3-20...

Cisco VPN Client 5.x < 5.0.07.0440 Untrusted Search Path DLL Privilege Escalation

The version of the Cisco VPN client installed on the remote host is 5.x prior to 5.0.07.0440. It is, therefore, affected by a flaw related to loading dynamic link library DLL files due to searching fixed paths that may not be trusted or under user control. A local attacker can exploit this, via a...

Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-3052-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3052-1 advisory. It was discovered that the keyring implementation in the Linux kernel did not ensure a data structure was initialized before referencing it after an erro...

Oracle: Security Advisory (ELSA-2014-3052)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Adobe Reader Multiple Vulnerabilities - 01 (May 2015) - Mac OS X

Adobe Reader is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobatreader";...

Adobe Reader < 10.1.14 / 11.0.11 Multiple Vulnerabilities (APSB15-10)

The version of Adobe Reader installed on the remote host is a version prior to 10.1.14 / 11.0.11. It is, therefore, affected by the following vulnerabilities : - A buffer overflow condition exists in CoolType.dll due to improper validation of user-supplied input. A remote attacker can exploit thi...

Memory corruption

Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2014-9161, CVE-2015-3046, CVE-2015-3049, CVE-2015-3050,...

Memory corruption

Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2014-9161, CVE-2015-3046, CVE-2015-3049, CVE-2015-3050,...