133 matches found
CVE-2022-3234
CVE-2022-3234 : The Vim/vim project contains a heap-based buffer overflow in the code paths handling inputs for certain files, affected in Vim versions prior to 9.0.0483. The connected sources confirm this as a Vim vulnerability with the described heap overflow, but they do not provide specific e...
Oracle Linux 7 : compat-exiv2-023 (ELSA-2021-3234) (deprecated)
REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-29457. Reason: This candidate is a duplicate of CVE-2021-29457. Notes: All CVE users should reference CVE-2021-29457 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental...
CVE-2020-3234
The CVE-2020-3234 issue affects Cisco IOS Software for Cisco 809/829 Industrial ISRs and CGR1000 devices, where the Virtual Device Server (VDS) authentication uses hard-coded/default credentials. A local, authenticated, low-privilege attacker can log in to VDS via the device’s virtual console and...
GE ST-3234 RSTi Slice Analog, 4 Channels Detection
Binary data 755600.prm...
Security Updates for Exchange (February 2019)
The Microsoft Exchange Server installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - Multiple Vulnerabilites with the included libraries from Oracle Outside. CVE-2018-18223, CVE-2018-18224, CVE-2018-3147, CVE-2018-3217, CVE-2018-3218,...
CVE-2018-3234
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
CVE-2018-3234
CVE-2018-3234 affects Oracle Outside In Technology (Outside In Filters) in Oracle Fusion Middleware; IBM Rational DOORS Next Generation 6.0.6 and prior Rational DOORS releases using OIT 8.5.3/8.5.4 are affected. Reported impact is denial of service (hangs/crashes) and unauthorized data read when ...
Generic HTTP Directory Traversal / File Inclusion (Web Application URL Parameter) - Active Check
Generic check for HTTP directory traversal / file inclusion vulnerabilities within URL parameters of the remote web application. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
CVE-2017-3234
Vulnerability in the Automatic Service Request ASR component of Oracle Support Tools subcomponent: ASR Manager. The supported version that is affected is Prior to 5.7. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via SFT to compromise Automatic Service...
CVE-2017-3234
Vulnerability in the Automatic Service Request ASR component of Oracle Support Tools subcomponent: ASR Manager. The supported version that is affected is Prior to 5.7. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via SFT to compromise Automatic Service...
CVE-2017-3234
The CVE-2017-3234 entry concerns Oracle's Automatic Service Request (ASR) component, specifically the ASR Manager, within Oracle Support Tools. Affected are versions prior to 5.7. The vulnerability allows an unauthenticated attacker with network access via SFT to compromise ASR, potentially leadi...
Ubuntu 14.04 LTS : Linux kernel (Xenial HWE) vulnerabilities (USN-3234-2)
The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3234-2 advisory. USN-3234-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enableme...
Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-3234-1)
The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3234-1 advisory. Ralf Spenneberg discovered that the ext4 implementation in the Linux kernel did not properly validate meta block groups. An attacker with physical access...
CVE-2016-3234
CVE-2016-3234 affects Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint 2010 SP2/2013 SP1, Office Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1. The root cause is an information disclosure flaw that...
Microsoft SharePoint Server WAS Multiple Vulnerabilities (3163610)
This host is missing an important security update according to Microsoft Bulletin MS16-070. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...
MS16-070: Security Update for Microsoft Office (3163610)
The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities in Microsoft Office : - Multiple remote code execution vulnerabilities exist due to improper handling of objects in memory. An unauthenticated, remote attacker can exploit these by...
Microsoft Office Word Viewer Information Disclosure Vulnerability (3163610)
This host is missing an important security update according to Microsoft Bulletin MS16-070. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Office Information Disclosure (MS16-070: CVE-2016-3234)
An out of bound memory access vulnerability was discovered within Microsoft office word. The root cause comes from wwlib.dll sub components that could lead to an out of bound memory read when processing a malformed rtf document...
Drupal 7.x < 7.38 Multiple Vulnerabilities
Binary data 9217.prm...
CVE-2008-3234
sshd in OpenSSH 4 on Debian GNU/Linux, and the 20070303 OpenSSH snapshot, allows remote authenticated users to obtain access to arbitrary SELinux roles by appending a :/ colon slash sequence, followed by the role name, to the username...