SUSE SLES12 Security Update : ovmf (SUSE-SU-2020:3126-1)

This update for ovmf fixes the following issues : CVE-2019-14562: Fixed an overflow in DxeImageVerificationHandler bsc1175476. CVE-2019-14559: Fixed a memory leak in ArpOnFrameRcvdDpc bsc1163927. Note that Tenable Network Security has extracted the preceding description block directly from the SU...

CVE-2020-3126

Cisco Webex Meetings Multimedia Viewer vulnerability (CVE-2020-3126) allows an authenticated, remote attacker with the host role to bypass security warnings when viewing shared multimedia. The root cause is missing warning dialog boxes that should appear before a file is displayed; a former room ...

CVE-2018-3126

CVE-2018-3126 affects Oracle Retail Xstore Point of Service (Xenvironment) within Oracle Retail Applications. Affected versions are 15.0.2, 16.0.4 and 17.0.2. The vulnerability is difficult to exploit but, if exploited by a high-privilege attacker with network access via HTTP, it can lead to take...

WordPress < 3.1.3 Multiple Vulnerabilities

According to its self-reported version number, the WordPress application running on the remote web server is prior to 3.1.3. It is, therefore, affected by multiple unspecified vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's...

Sublime Text Buffer Overflow Vulnerability

Sublime Text is a cross-platform, extensible text editor for code, markup, and more. A buffer overflow vulnerability exists in Sublime Text 3 Build 3126. The vulnerability can be exploited by an attacker to execute code with the help of specially crafted .mkv files...

Design/Logic Flaw

Sublime Text 3 Build 3126 allows user-assisted attackers to cause a denial of service or possibly have unspecified other impact via a crafted .mkv file. One threat model is a victim who obtains an untrusted crafted file from a remote location and issues several user-defined commands, as...

CVE-2017-8368

Sublime Text 3 Build 3126 allows user-assisted attackers to cause a denial of service or possibly have unspecified other impact via a crafted .mkv file. One threat model is a victim who obtains an untrusted crafted file from a remote location and issues several user-defined commands, as...

Fortinet FortiAnalyzer / FortiManager 5.4.x < 5.4.3 Open Redirect (FG-IR-17-014)

The version of FortiAnalyzer or FortiManager running on the remote device is 5.4.x prior to 5.4.3. It is, therefore, affected by a cross-site redirection vulnerability in its web-based user interface due to improper validation of input before returning it to users. An unauthenticated, remote...

CVE-2017-3126

An Open Redirect vulnerability in Fortinet FortiAnalyzer 5.4.0 through 5.4.2 and FortiManager 5.4.0 through 5.4.2 allows attacker to execute unauthorized code or commands via the next parameter...

CVE-2017-3126

CVE-2017-3126 describes an open redirect in Fortinet FortiAnalyzer (versions 5.4.0–5.4.2) and FortiManager (versions 5.4.0–5.4.2) where a user-controlled next parameter enables redirects to an attacker‑chosen URL. The underlying cause is improper validation of input used for redirection in the We...

openSUSE Security Update : gimp (openSUSE-2017-462)

This update for gimp fixes the following issues : This security issue was fixed : - CVE-2007-3126: Context-dependent attackers were able to cause a denial of service via an ICO file with an InfoHeader containing a Height of zero bsc1032241. These non-security issues were fixed : - bsc1025717:...

SUSE SLED12 Security Update : gimp (SUSE-SU-2017:0945-1)

This update for gimp fixes the following issues: This security issue was fixed : - CVE-2007-3126: Context-dependent attackers were able to cause a denial of service via an ICO file with an InfoHeader containing a Height of zero bsc1032241. The update package also includes non-security fixes. See...

Ubuntu: Security Advisory (USN-3126-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 12.04 LTS : linux vulnerabilities (USN-3126-1)

Ondrej Kozina discovered that the keyring interface in the Linux kernel contained a buffer overflow when displaying timeout events via the /proc/keys interface. A local attacker could use this to cause a denial of service system crash. CVE-2016-7042 Dmitry Vyukov discovered a use-after-free...

Ubuntu: Security Advisory (USN-3126-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

BlackBerry Enterprise Service (BES) Management Console 12.x < 12.4.1 Multiple XSS

According to its self-reported version, the BlackBerry Enterprise Service BES management console running on the remote host is prior to 12.4.1. It is, therefore, affected by the following vulnerabilities : - A cross-site scripting vulnerability exists due to improper validation of crafted admin...

CVE-2016-3126

Cross-site scripting XSS vulnerability in the Management Console in BlackBerry Enterprise Server BES 12 before 12.4.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2016-3126

CVE‑2016‑3126 is a cross‑site scripting (XSS) vulnerability in the BlackBerry Enterprise Server (BES) Management Console. Affects BES 12.x before 12.4.1; an attacker can craft a URL to inject arbitrary script/HTML into a user’s browser session. Impact is client‑side script execution in the authen...

CVE-2016-3126

Cross-site scripting XSS vulnerability in the Management Console in BlackBerry Enterprise Server BES 12 before 12.4.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2015-3126

Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to cause a denial of service NULL pointer...