101 matches found
SUSE: Security Advisory (SUSE-SU-2023:3265-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
K98750200: Server component of Oracle MySQL vulnerabilities CVE-2017-3243, CVE-2017-3244, CVE-2017-3257, CVE-2017-3265, and CVE-2017-3273
Security Advisory Description CVE-2017-3243 Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Charsets. Supported versions that are affected are 5.5.53 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple...
GitLab < 15.3.5 (CVE-2022-3265)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2. It was possible to exploit a vulnerability in...
GitLab < 15.3.5, 15.4 < 15.4.4, 15.5 < 15.5.2 Multiple Vulnerabilities
GitLab is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gitlab:gitlab"; if description...
CVE-2022-3265
creationtimestamp| type| source ---|---|--- 2022-11-10 02:49:59+00:00| seen| https://t.me/cibsecurity/52805...
CVE-2022-3265
A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2. It was possible to exploit a vulnerability in setting the labels colour feature which could lead to a stored XSS that allowed attackers to perfo...
CVE-2022-3265
CVE-2022-3265 affects GitLab CE/EE. The issue is a stored cross-site scripting (XSS) vulnerability in the labels color feature, impacting all versions prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2. The root cause is exploitation of the labels color setting, enabling attackers to...
FreeBSD : Gitlab -- Multiple vulnerabilities (16f7ec68-5cce-11ed-9be7-454b1dd82c64)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 16f7ec68-5cce-11ed-9be7-454b1dd82c64 advisory. - Gitlab reports: DAST analyzer sends custom request headers with every request Stored-XSS wit...
CVE-2015-3265
CVE-2015-3265 is rejected/not used per the Initial Description.
ChakraCore RCE Vulnerability
The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3265...
Mageia: Security Advisory (MGASA-2017-0289)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2017:0411-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2017:0412-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Cisco SD-WAN Solutions < 19.2.2 Multiple Vulnerabilities
According to its self-reported version number, the instance of Cisco Viptela hosted on the remote server is prior to 19.2.2. It is, therefore, affected by multiple vulnerabilities: - A privilege escalation vulnerability exists in Cisco SD-WAN Solutions due to insufficient input validation. An...
CVE-2020-3265
Cisco SD-WAN Solution contains a privilege-escalation vulnerability (CVE-2020-3265) caused by insufficient input validation. An authenticated, local attacker can send a crafted request to an affected system to gain root-level privileges. Affected product: Cisco SD-WAN Solution software prior to 1...
CVE-2020-3265
creationtimestamp| type| source ---|---|--- 2020-03-19 03:54:24+00:00| seen| https://t.me/informationsecuritychannel/36043...
Huawei EulerOS: Security Advisory for mariadb (EulerOS-SA-2017-1170)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2018-3265
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Zones. The supported version that is affected is 11.3. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Solaris executes to compromise Solaris...
CVE-2018-3265
CVE-2018-3265 affects the Solaris component of Oracle Sun Systems Products Suite, subcomponent Zones, version 11.3. The vulnerability is described as allowing an unauthenticated attacker with logon to the infrastructure where Solaris runs to compromise Solaris, with potential for unauthorized upd...