CVE-2023-3252

creationtimestamp| type| source ---|---|--- 2023-08-29 22:17:41+00:00| seen| https://t.me/cibsecurity/69380...

CVE-2023-3252

CVE-2023-3252 affects Tenable Nessus prior to 10.5.5, where an authenticated, remote attacker with administrator privileges could modify logging variables to write arbitrary files on the remote host, causing a denial of service. The vulnerability is addressed in Nessus 10.5.5 (per TNS-2023-31). R...

CVE-2022-3252

creationtimestamp| type| source ---|---|--- 2022-09-21 22:41:29+00:00| seen| https://t.me/cibsecurity/50232...

CVE-2022-3252

Improper detection of complete HTTP body decompression SwiftNIO Extras provides a pair of helpers for transparently decompressing received HTTP request or response bodies. These two objects HTTPRequestDecompressor and HTTPResponseDecompressor both failed to detect when the decompressed body was...

CVE-2022-3252

Improper detection of complete HTTP body decompression SwiftNIO Extras provides a pair of helpers for transparently decompressing received HTTP request or response bodies. These two objects HTTPRequestDecompressor and HTTPResponseDecompressor both failed to detect when the decompressed body was...

CVE-2022-3252

CVE-2022-3252 affects Apple SwiftNIO Extras. The issue arises in the transparent HTTP body decompression helpers, specifically HTTPRequestDecompressor and HTTPResponseDecompressor, which fail to detect when the decompressed body is complete. Attacks can append trailing junk data to a compressed H...

CVE-2022-3252

Improper detection of complete HTTP body decompression SwiftNIO Extras provides a pair of helpers for transparently decompressing received HTTP request or response bodies. These two objects HTTPRequestDecompressor and HTTPResponseDecompressor both failed to detect when the decompressed body was...

openSUSE: Security Advisory for freetype2 (SUSE-SU-2022:3252-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE: Security Advisory (SUSE-SU-2017:0346-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2017:0460-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-3252

creationtimestamp| type| source ---|---|--- 2021-02-23 18:35:11+00:00| seen| https://t.me/cibsecurity/23992...

CVE-2021-3252

KACO New Energy XP100U up to XP-JAVA 2.0 is affected by an information-disclosure vulnerability caused by incorrect access control during the authentication process, which results in credentials being returned in plain-text from the local server. The CVE entry (CVE-2021-3252) is corroborated by m...

Security Bulletin: Multiple vulnerabilities in IBM Java JRE, 8.0-1.1 affect IBM Netezza Platform Software clients.

Summary IBM Java JRE 8.0-1.1 is used by IBM Netezza Platform Software. IBM Netezza Platform Software has addressed the applicable CVEs by upgrading the IBM Java JRE to latest version 8.0-5.41, provided through PDA version 7.2.1.9-P1 will help resolve following CVEs. Vulnerability Details CVEID:...

Security Bulletin: Multiple vulnerabilities in IBM Java affect IBM Netezza Analytics

Summary IBM Java SDK is used by IBM Netezza Analytics. IBM Netezza Analytics has addressed the applicable CVEs by upgrading the IBM Java SDK to latest version 8.0-6.15. Vulnerability Details CVEID: CVE-2017-3539 DESCRIPTION: An unspecified vulnerability in Oracle Java SE related to the Java SE,...

CVE-2020-3252

CVE-2020-3252 covers multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data. The issues enable remote attackers to bypass authentication or perform directory traversal due to insufficient access validation and input validation in REST API endpoi...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect WebSphere Message Broker and IBM Integration Bus

Summary Multiple security vulnerabilities exist in IBM® Runtime Environment Java™ Technology Edition 6.0.16.30 and earlier used by WebSphere Message Broker, and IBM® Runtime Environment Java™ Technology Edition 7.0.9.50 and earlier used by WebSphere Message Broker and IBM Integration Bus, and the...

Huawei EulerOS: Security Advisory for java-1.8.0-openjdk (EulerOS-SA-2017-1016)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle WebLogic Server Deployment Service Servlet Insecure Deserialization (CVE-2018-3252)

An insecure deserialization vulnerability exists in the Oracle WebLogic Server Deployment Service . The vulnerability is due to the lack of input validation by the servlet. A successful attack could lead to a remote code execution...

CVE-2018-3252

CVE-2018-3252 affects Oracle WebLogic Server (WLS Core Components). Affected are Oracle Fusion Middleware WebLogic Server versions 10.3.6.0, 12.1.3.0, and 12.2.1.3. An unauthenticated attacker with network access via T3 can compromise the server, with potential takeover and high-impact confidenti...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK 7 affect IBM Systems Director.

Summary There are multiple vulnerabilities in IBM SDK Java Technology Edition, Version 7 that is used by IBM Systems Director. These issues were disclosed as part of the IBM Java SDK updates in October 2016 and January 2017. Vulnerability Details CVEID: CVE-2016-5546 DESCRIPTION: An unspecified...