84 matches found
CVE-2017-3249
Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware subcomponent: Security. Supported versions that are affected are 2.1.1, 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle GlassFish...
CVE-2017-3249
Removed by vendor...
CVE-2016-3249
The CVE-2016-3249 vulnerability is a Win32k Elevation of Privilege issue affecting Windows Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, 8.1, Server 2012 Gold/R2, Windows RT 8.1, and Windows 10 Gold/1511. It arises from improper handling of objects in memory by kernel-mode drivers, enabling local...
MS16-090: Security Update for Windows Kernel-Mode Drivers (3171481)
The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - Multiple elevation of privilege vulnerabilities exist in the kernel-mode driver due to improper handling of objects in memory. An authenticated, remote attacker can exploit these, via ...
Microsoft Windows Kernel 'Win32k.sys' CVE-2016-3249 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker can exploit this issue to execute arbitrary code in kernel mode with elevated privileges. Technologies Affected Microsoft Windows 10 for 32-bit Systems Microsof...
[SECURITY] [DSA 3249-2] jqueryui security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3249-2 [email protected] http://www.debian.org/security/ Sebastien Delafond June 02, 2015 http://www.debian.org/security/faq -...
[SECURITY] [DSA 3249-2] jqueryui security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3249-2 [email protected] http://www.debian.org/security/ Sebastien Delafond June 02, 2015 http://www.debian.org/security/faq -...
Fedora Update for libmspack FEDORA-2015-3249
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Puppet < 2.7.26 / 3.6.2 and Enterprise 2.8.x < 2.8.7 Multiple Vulnerabilities
According to its self-reported version number, the Puppet install on the remote host is affected by multiple vulnerabilities : - A privilege escalation vulnerability related to input validation and paths exists in the bundled Ruby environment. An attacker could trick a privileged user into...
Vtiger CRM 5.0.4 Pre-Auth Local File Inclusion Exploit
No description provided by source. !/usr/bin/python INFORMATION: Exploit Title: Vtiger CRM 5.0.4 Pre-Auth Local File Inclusion Exploit Google Dork: The honest Open Source CRM vtiger CRM 5.0.4 Date: 5/3/2011 CVE: CVE-2009-3249 Windows link: http://bit.ly/fiOYCL Linux link: http://bit.ly/hluzLf...
CVE-2014-3249
CVE-2014-3249 affects Puppet Enterprise 2.8.x before 2.8.7. The vulnerability is an information-disclosure issue allowing remote attackers to obtain sensitive information via vectors involving hiding and unhiding nodes. The NVD entry documents a MEDIUM severity (CVSS2 base score 5.0) with network...
CVE-2014-3249
Removed by vendor...
CVE-2013-3249
DameWare Remote Support vulnerable to a stack-based buffer overflow in the DWExporter.exe component (DWExporter) via the Add from text file feature. Affected: DameWare Remote Support versions including 10.0.0.372 and 9.0.1.247 and earlier. Root cause: stack-based overflow allowing user-assisted a...
CVE-2013-3249
Stack-based buffer overflow in the "Add from text file" feature in the DameWare Exporter tool DWExporter.exe in DameWare Remote Support 10.0.0.372, 9.0.1.247, and earlier allows user-assisted attackers to execute arbitrary code via unspecified vectors...
Fortify Software Security Center
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03447895 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03447895 Version: 1 HPSBMU02802...
CVE-2012-3249
CVE-2012-3249 affects HP Fortify Software Security Center versions 3.1, 3.3, 3.4, and 3.5. The issue allows remote authenticated users to obtain sensitive information via unspecified vectors. HP’s Security Bulletin notes a privileged information disclosure vulnerability and lists affected platfor...
Mac OS X Multiple Vulnerabilities (2012-001)
This host is missing an important security update according to Mac OS X Update/Mac OS X Security Update 2012-001. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Mac OS X Multiple Vulnerabilities (Security Update 2012-001) (BEAST)
The remote host is running a version of Mac OS X 10.6 that does not have Security Update 2012-001 applied. This update contains multiple security-related fixes for the following components : - Apache - ATS - ColorSync - CoreAudio - CoreMedia - CoreText - curl - Data Security - dovecot - filecmds ...
CVE-2011-3249
Buffer overflow in Apple QuickTime before 7.7.1 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted movie file with FLC encoding...
CVE-2011-3249
CVE-2011-3249 involves a buffer overflow in Apple QuickTime prior to version 7.7.1 . A crafted movie file using the FLC encoding can be used by a remote attacker to trigger arbitrary code execution or cause a denial of service (application crash). The vulnerability is reported as highly impactful...