CVE-2017-3273

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DDL. Supported versions that are affected are 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL...

Oracle Mysql Security Updates (jan2017-2881727) 03 - Windows

Oracle MySQL is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql"; ifdescription...

CVE-2016-3273

CVE-2016-3273 is a browser information disclosure vulnerability in the XSS Filter of Microsoft Internet Explorer 9–11 and Microsoft Edge. The root cause is improper restriction of JavaScript by the XSS Filter, allowing remote attackers to obtain sensitive information via a crafted website. The is...

KLA10844 Multiple vulnerabilities in Microsoft Edge and Internet Explorer

Multiple serious vulnerabilities have been found in Microsoft browsers. Malicious users can exploit these vulnerabilities to spoof user interface, execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1. An improper memory objects handling can be...

MS16-085: Cumulative Security Update for Microsoft Edge (3169999)

The version of Microsoft Edge installed on the remote Windows host is missing Cumulative Security Update 3169999. It is, therefore, affected by multiple vulnerabilities : - A security feature bypass vulnerability exists due to a failure to properly implement Address Space Layout Randomization ASL...

CVE-2015-3273

mod/forum/post.php in Moodle 2.9.x before 2.9.1 does not consider the mod/forum:canposttomygroups capability before authorizing "Post a copy to all groups" actions, which allows remote authenticated users to bypass intended access restrictions by leveraging per-group authorization...

CVE-2015-3273

CVE-2015-3273 affects Moodle 2.9.x prior to 2.9.1. The vulnerability arises in mod/forum/post.php where the mod/forum:canposttomygroups capability is not honored when authorizing the "Post a copy to all groups" action, allowing remote authenticated users to bypass per-group access restrictions. I...

CVE-2015-3273

mod/forum/post.php in Moodle 2.9.x before 2.9.1 does not consider the mod/forum:canposttomygroups capability before authorizing "Post a copy to all groups" actions, which allows remote authenticated users to bypass intended access restrictions by leveraging per-group authorization...

Fedora 22 : moodle-2.8.7-1.fc22 (2015-14988)

moodle-2.8.7-1.fc22 - Latest upstream release. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 21 : moodle-2.7.9-1.fc21 (2015-14996)

moodle-2.7.9-1.fc21 - 2.7.9. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

moodle -- multiple vulnerabilities

Marina Glancy reports: MSA-15-0026: Possible phishing when redirecting to external site using referer header. CVE-2015-3272 MSA-15-0027: Capability 'mod/forum:canposttomygroups' is not respected when using 'Post a copy to all groups' in forum CVE-2015-3273 MSA-15-0028: Possible XSS through custom...

Debian DSA-3273-1 : tiff - security update

William Robinet and Michal Zalewski discovered multiple vulnerabilities in the TIFF library and its tools, which may result in denial of service or the execution of arbitrary code if a malformed TIFF file is processed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Debian Security Advisory DSA 3273-1 (tiff - security update)

William Robinet and Michal Zalewski discovered multiple vulnerabilities in the TIFF library and its tools, which may result in denial of service or the execution of arbitrary code if a malformed TIFF file is processed. OpenVAS Vulnerability Test $Id: deb3273.nasl 6609 2017-07-07 12:05:59Z cfische...

CVE-2014-3273

CVE-2014-3273 affects Cisco IOS LLDP processing. The vulnerability arises from incorrect handling of malformed LLDP packets, enabling an adjacent unauthenticated attacker to cause a device reload. Exploitation details indicate the attack requires LLDP to be enabled and, per Nessus guidance, CIP m...

JBoss Status Servlet Information Gathering

This module queries the JBoss status servlet to collect sensitive information, including URL paths, GET parameters and client IP addresses. This module has been tested against JBoss 4.0, 4.2.2 and 4.2.3. This module requires Metasploit: https://metasploit.com/download Current source:...

CVE-2013-3273

Vulnerability CVE-2013-3273 affects RSA Authentication Manager 8.0 prior to Patch 2 and 7.1 prior to Service Pack 4 Patch 26 (including Appliance 3.0). The issue is that when using the SDK to develop custom applications and with trace logging set to verbose, the administrative account password ca...

RHEL 4 : JBoss EAP (RHSA-2010:0377)

Updated JBoss Enterprise Application Platform JBEAP 4.3 packages that fix three security issues and multiple bugs are now available for Red Hat Enterprise Linux 4 as JBEAP 4.3.0.CP08. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability...

RHEL 5 : JBoss Enterprise Application Platform 4.3.0.CP08 update (Critical) (RHSA-2010:0379)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0379 advisory. JBoss Enterprise Application Platform is the market leading platform for innovative and scalable Java applications; integrating the JBoss...

[security bulletin] HPSBPI02807 SSRT100928 rev.1 - HP LaserJet Pro 400 Multi Function Printers, Remote Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03464042 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03464042 Version: 1 HPSBPI02807...

CVE-2012-3273

CVE-2012-3273 affects HP LaserJet Pro 400 MFP M425 (firmware 20120625) and LaserJet Pro 400 M401 (firmware 20120621). The HP Security Bulletin notes multiple unspecified vulnerabilities that could be remotely exploited to obtain sensitive information and allow remote unauthorized access. Affected...