CVE-2022-3250 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in ikus060/rdiffweb

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.6...

SUSE: Security Advisory (SUSE-SU-2022:3250-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ch.cern.hadoop:hadoop-minikdc (>=2.7.4.0, <=2.7.5.1), com.alibaba.lindorm:lindorm-search-test-framework (>=8.10.1.3, <=8.10.2) +117 more potentially affected by CVE-2015-3250 via org.apache.directory.api:api-ldap-model (>=1.0.0-m14, <=1.0.0-m30)

org.apache.directory.api:api-ldap-model MAVEN version =1.0.0-m14, =2.7.4.0, =8.10.1.3, =2.0.0-beta1, =1.0.3, =1.0.3, =1.0.3, =0.1.1, =0.1.1, =0.3.0, =0.3.0, =0.4.0-m1, =0.4.0-m1, =1.8.0, =1.9.3 and more Source cves: CVE-2015-3250 Source advisory: OSV:GHSA-CX3Q-CV6W-MX4H...

ch.cern.hadoop:hadoop-minikdc (>=2.7.4.0, <=2.7.5.1), com.alibaba.lindorm:lindorm-search-test-framework (>=8.10.1.3, <=8.10.2) +117 more potentially affected by CVE-2015-3250 via org.apache.directory.api:api-ldap-model (>=1.0.0-m14, <=1.0.0-m30)

org.apache.directory.api:api-ldap-model MAVEN version =1.0.0-m14, =2.7.4.0, =8.10.1.3, =2.0.0-beta1, =1.0.3, =1.0.3, =1.0.3, =0.1.1, =0.1.1, =0.3.0, =0.3.0, =0.4.0-m1, =0.4.0-m1, =1.8.0, =1.9.3 and more Source cves: CVE-2015-3250 Source advisory: GHSA-CX3Q-CV6W-MX4H...

Cisco UCS Director Cloupia Script Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cisco UCS Director Cloupia Script RCE', 'Description' = %q This module exploits an authentication bypass and directory traversals in Cisco UCS...

CVE-2020-3250

creationtimestamp| type| source ---|---|--- 2020-06-04 20:04:10+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/ciscoucscloupiascriptrce.rb 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:28+00:00| see...

Cisco UCS Director Directory Traversal (CVE-2020-3250)

A directory traversal vulnerability exists in Cisco UCS Director. The vulnerability is due to insufficient validation of user input within the processing of the userAPIDownloadFile API...

Cisco UCS Director and Cisco UCS Director Express for Big Data Multiple Vuulnerabilities (cisco-sa-ucsd-mult-vulns-UNfpdW4E)

According to its self-reported version, the remote host is running a version of Cisco UCS Director that is affected by multiple vulnerabilities in the REST API which allow a remote attacker to bypass authentication or conduct directory traversal attacks on an affected device, including the...

CVE-2020-3250

Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks on an affected device. For more information about these vulnerabilities, see the Details section o...

CVE-2020-3250 Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data

Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication or conduct directory traversal attacks on an affected device. For more information about these vulnerabilities, see the Details section o...

CVE-2020-3250

Cisco UCS Director and Cisco UCS Director Express for Big Data have REST API vulnerabilities that may allow remote attackers to bypass authentication and perform directory traversal on affected devices. The common root cause cited is insufficient access control validation and improper input handl...

CVE-2018-3250

Oracle WebLogic Server (Oracle Fusion Middleware) – WLS Web Services subcomponent, affected version 10.3.6.0, is affected by CVE-2018-3250. An unauthenticated attacker with network access via HTTP can compromise the server, with potential for unauthorized update/insert/delete and read access to d...

CVE-2014-3250

CVE-2014-3250 affects Puppet before 3.6.2. The issue is that the default vhost configuration file does not include the SSLCARevocationCheck directive, which might allow remote attackers to obtain sensitive information via a revoked certificate when a Puppet master runs with Apache 2.4. The availa...

DEBIAN-CVE-2015-3250

Apache Directory LDAP API before 1.0.0-M31 allows attackers to conduct timing attacks via unspecified vectors...

CVE-2015-3250

CVE-2015-3250 affects the Apache Directory LDAP API prior to 1.0.0-M31. The vulnerability allows timing attacks via unspecified vectors. This is consistently described across multiple sources (GHSA, NVD, OSV, Ubuntu/Debian OSV), though exploitation details and remediation are not provided in the ...

CVE-2015-3250

Apache Directory LDAP API before 1.0.0-M31 allows attackers to conduct timing attacks via unspecified vectors...

Ubuntu 14.04 LTS : Linux kernel vulnerability (USN-3250-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-3250-1 advisory. It was discovered that the xfrm framework for transforming packets in the Linux kernel did not properly validate data received from user space. A local attacker...

Ubuntu: Security Advisory (USN-3250-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle GlassFish Server 2.1.1.x < 2.1.1.30 / 3.0.1.x < 3.0.1.15 / 3.1.2.x < 3.1.2.16 Multiple Vulnerabilities (January 2017 CPU)

Binary data 9947.prm...

CVE-2017-3250

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware subcomponent: Security. Supported versions that are affected are 2.1.1, 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GlassFish...