CVE-2017-3243

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Charsets. Supported versions that are affected are 5.5.53 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

MySQL 5.5.x < 5.5.54 Multiple Vulnerabilities (January 2017 CPU)

The version of MySQL running on the remote host is 5.5.x prior to 5.5.54. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw exists in the Optimizer subcomponent that allows an authenticated, remote attacker to cause a denial of service condition. CVE-2017-3238 - An...

CVE-2016-3243

Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."...

CVE-2016-3243

Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."...

CVE-2016-3243

CVE-2016-3243 affects Microsoft Internet Explorer 10 and 11. The vulnerability arises from improper handling of memory objects, enabling remote attackers to execute arbitrary code or cause a denial of service (memory corruption) by convincing a user to view a crafted site. Public sources consiste...

Microsoft Internet Explorer Memory Corruption (MS16-084 : CVE-2016-3243)

A remote code execution vulnerability exists in Microsoft Internet Explorer. The vulnerability is due to a type confusion when handling certain objects in JavaScript. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page that could cause memory...

Fedora 22 : rsyslog-8.8.0-3.fc22 (2015-11039)

Besides other changes, this update mitigates this vulnerability: https://access.redhat.com/security/cve/CVE-2015-3243 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and forma...

CVE-2012-3243

Cross-site scripting XSS vulnerability in the SEOgento plugin for Magento allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2012-3243

The CVE-2012-3243 entry concerns a Cross-site Scripting (XSS) vulnerability in the SEOgento plugin for Magento, where an attacker can inject arbitrary script/HTML through the id parameter. The affected component is the SEOgento plugin for Magento; the root cause is an XSS flaw that enables script...

Debian Security Advisory DSA 3243-1 (libxml-libxml-perl - security update)

Tilmann Haak from xing.com discovered that XML::LibXML, a Perl interface to the libxml2 library, did not respect the expandentities parameter to disable processing of external entities in some circumstances. This may allow attackers to gain read access to otherwise protected resources, depending ...

Debian: Security Advisory (DSA-3243-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-3243

The CVE-2014-3243 issue affects SOAPpy 0.12.5, where recursion during entity expansion is not properly detected, allowing remote attackers to trigger a denial of service via crafted SOAP requests with deeply nested entity references. This is a network‑based vulnerability with memory and CPU impac...

Synology DiskStation Manager arbitrary file modification

Overview Synology DiskStation Manager versions 4.3-3776-3 and below contain a vulnerability that allows a remote unauthenticated user to append arbitrary data to an arbitrary file under root privileges. Description CWE-284: Improper Access Control - CVE-2013-6955Synology DiskStation Manager...

CVE-2013-3243

The CVE-2013-3243 issue affects OpenText/IXOS ECM for SAP NetWeaver (Doculink). It is a Remote ABAP Injection vulnerability that, per ESNC, could allow an attacker to inject and execute ABAP code on a remote SAP system. An exploit is claimed to exist in ESNC’s suite; vendor patching information p...

CVE-2011-3243

Cross-site scripting XSS vulnerability in WebKit, as used in Apple iOS before 5 and Safari before 5.1.1, allows remote attackers to inject arbitrary web script or HTML via vectors involving inactive DOM windows...

CVE-2011-3243

CVE-2011-3243 is a WebKit-based XSS vulnerability reported in WebKit as used by Apple iOS prior to version 5 and Safari prior to 5.1.1. The flaw involves vectors with inactive DOM windows, enabling remote attackers to inject arbitrary script or HTML. Connected sources confirm the affected scope (...

SuSE 11 / 11.1 Security Update : MySQL (SAT Patch Numbers 3220 / 3243)

The following bugs have been fixed : - local users could delete data files for tables of other users. CVE-2010-1626 - authenticated users could gather information for tables they should not have access to. CVE-2010-1849 - authenticated users could crash mysqld. CVE-2010-1848 - authenticated users...

CVE-2010-3243

Cross-site scripting XSS vulnerability in the toStaticHTML function in Microsoft Internet Explorer 8, and the SafeHTML function in Microsoft Windows SharePoint Services 3.0 SP2 and Office SharePoint Server 2007 SP2, allows remote attackers to inject arbitrary web script or HTML via unspecified...

CVE-2010-3243

CVE-2010-3243 describes an HTML sanitization vulnerability (HTML Sanitization Vulnerability) causing cross-site scripting in Microsoft Internet Explorer 8 and in SharePoint components: Windows SharePoint Services 3.0 SP2 and Office SharePoint Server 2007 SP2. The root cause is improper filtering ...

Microsoft Internet Explorer 8 toStaticHTML API Information Disclosure (MS10-072; CVE-2010-3243)

Multiple memory corruption vulnerabilities have been reported in Microsoft Internet Explorer. An information disclosure vulnerability has been reported in the way that the toStaticHTML API sanitizes HTML. The vulnerability is due to the way that Internet Explorer handles content using specific...