CVE-2017-3276

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel Zones virtualized block driver. The supported version that is affected is 11.3. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Solaris execut...

CVE-2017-3276

Vulnerability CVE-2017-3276 affects Oracle Solaris 11.3 in the Kernel Zones virtualized block driver component. The root cause is a local vulnerability in the Kernel Zones subcomponent that could be exploited by a high-privilege attacker with logon to the Solaris host to compromise the system. Im...

Oracle Solaris Critical Patch Update : jan2017_SRU11_3_15_4_0

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. The supported version that is affected is 11.3. Difficult to exploit vulnerability allows unauthenticated...

CVE-2016-3276

Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to conduct content-spoofing attacks via a crafted URL, aka "Microsoft Browser Spoofing Vulnerability."...

CVE-2016-3276

CVE-2016-3276 affects Microsoft Internet Explorer 11 and Microsoft Edge. A remote attacker can trigger a content-spoofing attack by sending or hosting a specially crafted URL, potentially convincing users to visit a malicious page after user interaction (clicking the URL). Exploitation scenarios ...

CVE-2016-3276

Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to conduct content-spoofing attacks via a crafted URL, aka "Microsoft Browser Spoofing Vulnerability."...

KLA10844 Multiple vulnerabilities in Microsoft Edge and Internet Explorer

Multiple serious vulnerabilities have been found in Microsoft browsers. Malicious users can exploit these vulnerabilities to spoof user interface, execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1. An improper memory objects handling can be...

MS16-085: Cumulative Security Update for Microsoft Edge (3169999)

The version of Microsoft Edge installed on the remote Windows host is missing Cumulative Security Update 3169999. It is, therefore, affected by multiple vulnerabilities : - A security feature bypass vulnerability exists due to a failure to properly implement Address Space Layout Randomization ASL...

CVE-2015-3276

The nssparseciphers function in libraries/libldap/tlsm.c in OpenLDAP does not properly parse OpenSSL-style multi-keyword mode cipher strings, which might cause a weaker than intended cipher to be used and allow remote attackers to have unspecified impact via unknown vectors...

CVE-2015-3276

The nssparseciphers function in libraries/libldap/tlsm.c in OpenLDAP does not properly parse OpenSSL-style multi-keyword mode cipher strings, which might cause a weaker than intended cipher to be used and allow remote attackers to have unspecified impact via unknown vectors...

RedHat Update for openldap RHSA-2015:2131-03

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 7 : openldap (RHSA-2015:2131)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:2131 advisory. OpenLDAP is an open-source suite of Lightweight Directory Access Protocol LDAP applications and development tools. LDAP is a set of protocol...

Moderate: Red Hat Security Advisory: openldap security, bug fix, and enhancement update

Updated openldap packages that fix one security issue, several bugs, and add one enhancement are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...

Debian DSA-3276-1 : symfony - security update

Jakub Zalas discovered that Symfony, a framework to create websites and web applications, was vulnerable to restriction bypass. It was affecting applications with ESI or SSI support enabled, that use the FragmentListener. A malicious user could call any controller via the /fragment path by...

CVE-2014-3276

Cisco's advisory and CVE records describe a denial-of-service vulnerability in Cisco Identity Services Engine (ISE) prior to or including 1.2(.1 patch 2). The issue stems from improper handling of deadlock conditions when receiving crafted RADIUS accounting packets from two different NAS devices,...

ESA-2013-057: RSA Archer(r) GRC Multiple Vulnerabilities

ESA-2013-057.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-057: RSA Archer® GRC Multiple Vulnerabilities EMC Identifier: ESA-2013-057 CVE Identifier: CVE-2013-3276, CVE-2013-3277 Severity Rating: CVSS v2 Base Score: See below for individual scores Affected Products: RSA Archer versio...

CVE-2013-3276

RSA Archer GRC 5.x before 5.4 is affected by CVE-2013-3276: an improper restriction of user login allows remote authenticated users to bypass login by leveraging a deactivated account. The vulnerability (CVSSv2 base score 6.0) impacts authentication, with partial confidentiality, integrity, and a...

Oracle Linux 5 : kernel (ELSA-2008-0957)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2008-0957 advisory. - i386 vDSO: use installspecialmapping Peter Zijlstra 460275 460276 CVE-2008-3527 - fs remove SUID when splicing into an inode Eric Sandeen 464451 4644...

CVE-2012-3276

The CVE-2012-3276 entry affects HP OpenVMS on Itanium (8.3, 8.3-1H1, 8.4) and Alpha (7.3-2, 8.2, 8.3, 8.4). The issue is a flaw in the LOGIN and ACME_SERVER ACMELOGIN implementations that can allow a local user to cause a Denial of Service. The vulnerability is characterized as local (AV:L, AC:L)...

CVE-2011-3276

CVE-2011-3276 relates to Cisco IOS NAT vulnerabilities affecting SIP over TCP (port 5060). The connected Cisco advisory and security entries describe how crafted SIP traffic could trigger a DoS, causing a device reload or hang by NAT processing SIP over TCP. The vulnerability is part of a broader...