CVE-2021-3262

CVE-2021-3262 affects TripSpark VEO Transportation (version 2.2.x) and NovusEDU (2.2.x XP_BB-20201123-184084). Root cause: unsafe data inputs in POST body parameters not sanitized server-side, enabling SQL injection in the Student Busing Information search queries. Impact stated as SQL commands c...

CVE-2023-3262

creationtimestamp| type| source ---|---|--- 2023-08-14 07:19:15+00:00| seen| https://t.me/cibsecurity/68420 2026-04-04 19:00:32+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/78796...

CVE-2023-3262

The CVE-2023-3262 entry concerns Dataprobe iBoot PDU firmware ≤1.43.03312023 that uses hard-coded credentials to interact with the internal Postgres database. A local attacker capable of executing OS commands on the device can read, modify, or delete arbitrary database records. The Trellix analys...

Important: Red Hat Security Advisory: sudo security update

An update for sudo is now available for Red Hat Enterprise Linux 7.6 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

SUSE CVE-2011-3262

tools/libxc/xcdombzimageloader.c in Xen 3.2, 3.3, 4.0, and 4.1 allows local users to cause a denial of service management software infinite loop and management domain resource consumption via unspecified vectors related to "Lack of error checking in the decompression loop."...

CVE-2022-3262

A flaw was found in Openshift. A pod with a DNSPolicy of "ClusterFirst" may incorrectly resolve the hostname based on a service provided. This flaw allows an attacker to supply an incorrect name with the DNS search policy, affecting confidentiality and availability...

CVE-2022-3262

The CVE-2022-3262 entry concerns Red Hat OpenShift. A pod using DNSPolicy: ClusterFirst may resolve hostnames based on a provided service, enabling an attacker to supply an incorrect name via the DNS search policy. This impacts confidentiality and availability. The available documents identify th...

CVE-2015-3262

...

CVE-2015-3262

CVE-2015-3262 entry is rejected and does not represent an active vulnerability.

Cisco Wireless LAN Controller CAPWAP DoS (cisco-sa-wlc-capwap-dos-Y2sD9uEw)

According to its self-reported version, the Control and Provisioning of Wireless Access Points CAPWAP protocol handler of Cisco Wireless LAN Controller WLC is affected by a vulnerability due to insufficient validation of CAPWAP packets. An unauthenticated, remote attacker can exploit this, by...

CVE-2020-3262

CVE-2020-3262 affects Cisco Wireless LAN Controller (WLC) CAPWAP protocol handler. The issue stems from insufficient CAPWAP packet validation in the WLC software, allowing an unauthenticated, remote attacker to trigger a DoS by sending a malformed CAPWAP packet, potentially restarting the device....

Photon OS 1.0: Openjdk PHSA-2017-0016

An update of the openjdk package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0016. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121693;...

Photon OS 1.0: Openjre PHSA-2017-0016

An update of the openjre package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0016. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid121694;...

CVE-2018-3262

CVE-2018-3262 affects Oracle PeopleSoft Enterprise PeopleTools Stylesheet (versions 8.55, 8.56, 8.57). The vulnerability allows unauthenticated attackers with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools, with successful attacks requiring user interaction. The impact ca...

CVE-2017-3262

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Java Mission Control. The supported version that is affected is Java SE: 8u112. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful...

CVE-2017-3262

CVE-2017-3262 affects Oracle Java SE 8u112 (Java Mission Control). The flaw is in the Java Mission Control component of Java SE, allowing unauthenticated, network-accessible read of a subset of data. Exploitation status and concrete fix/remediation are not detailed in the provided documents.

CVE-2017-3262

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Java Mission Control. The supported version that is affected is Java SE: 8u112. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful...

CVE-2016-3262

Graphics Device Interface aka GDI or GDI+ in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for Business 2016; Lync...

CVE-2016-3262

CVE-2016-3262 and CVE-2016-3263 describe a Graphics Device Interface (GDI+/GDI) information-disclosure problem in multiple Windows versions. The description specifies that remote attackers can bypass ASLR through unspecified vectors. Affected products include Windows Vista SP2, Windows Server 200...

MS16-120: Security Update for Microsoft Graphics Component (3192884)

The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - Multiple information disclosure vulnerabilities exist in the Windows GDI component due to improper handling of objects in memory. A local attacker can exploit these vulnerabilities, vi...