MariaDB 10.2.0 < 10.2.19 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.2.19. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.2.19 advisory. - The crc32big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors...

Fedora 29 : 3:mariadb (2018-242f6c1a41)

MariaDB 10.3.11 Release notes : https://mariadb.com/kb/en/mariadb-10311-release-notes/ CVEs fixed : CVE-2018-3282 CVE-2016-9843 CVE-2018-3174 CVE-2018-3143 CVE-2018-3156 CVE-2018-3251 CVE-2018-3185 CVE-2018-3277 CVE-2018-3162 CVE-2018-3173 CVE-2018-3200 CVE-2018-3284 Note that Tenable Network...

Fedora 28 : 3:mariadb (2018-55b875c1ac)

MariaDB 10.2.19 Release notes : https://mariadb.com/kb/en/library/mariadb-10219-release-notes/ CVEs fixed : CVE-2018-3282 CVE-2016-9843 CVE-2018-3174 CVE-2018-3143 CVE-2018-3156 CVE-2018-3251 CVE-2018-3185 CVE-2018-3277 CVE-2018-3162 CVE-2018-3173 CVE-2018-3200 CVE-2018-3284 Note that Tenable...

Fedora 28 : community-mysql (2018-b4820696e1)

MySQL 5.7.24 Release notes : https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-24.html CVEs fixed : CVE-2018-3276 CVE-2018-3200 CVE-2018-3284 CVE-2018-3173 CVE-2018-3162 CVE-2018-3247 CVE-2018-3156 CVE-2018-3161 CVE-2018-3278 CVE-2018-3282 CVE-2018-3187 CVE-2018-3277 CVE-2018-3144...

Fedora Update for community-mysql FEDORA-2018-b4820696e1

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 27 : community-mysql (2018-4ae94c8deb)

MySQL 5.7.24 Release notes : https://dev.mysql.com/doc/relnotes/mysql/5.7/en/news-5-7-24.html CVEs fixed : CVE-2018-3276 CVE-2018-3200 CVE-2018-3284 CVE-2018-3173 CVE-2018-3162 CVE-2018-3247 CVE-2018-3156 CVE-2018-3161 CVE-2018-3278 CVE-2018-3282 CVE-2018-3187 CVE-2018-3277 CVE-2018-3144...

Moderate: Red Hat Security Advisory: rh-mysql57-mysql security update

An update for rh-mysql57-mysql is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Ubuntu: Security Advisory (USN-3799-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MySQL 5.7.x < 5.7.24 Multiple Vulnerabilities (Oct 2018 CPU) (Jul 2019 CPU)

The version of MySQL running on the remote host is 5.7.x prior to 5.7.24 It is, therefore, affected by multiple vulnerabilities as noted in the October 2018 and July 2019 Critical Patch Update advisories. Please consult the CVRF details for the applicable CVEs for additional information. Note tha...

CVE-2018-3277 vulnerabilities

Vulnerabilities for packages: mysql...

CVE-2018-3277

CVE-2018-3277 affects the MySQL Server component (subcomponent: InnoDB). Affected versions are 5.7.23 and prior and 8.0.12 and prior. The vulnerability is exploitable by a high-privilege attacker with network access via multiple protocols, and can lead to a hang or a frequent crash of MySQL Serve...

CVE-2018-3277

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: InnoDB. Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

CVE-2015-3277

The modnss module before 1.0.11 in Fedora allows remote attackers to obtain cipher lists due to incorrect parsing of multi-keyword cipherstring...

CVE-2015-3277

Removed by vendor...

CVE-2015-3277

CVE-2015-3277 affects the mod_nss module in Fedora, vulnerable versions are before 1.0.11. The root cause is incorrect parsing of multi-keyword cipherstrings, allowing remote attackers to obtain cipher lists. Impact is information disclosure of cipher lists; CVSS v3 base 7.5 (HIGH) per NVD. Remed...

CVE-2017-3277

CVE-2017-3277 affects Oracle E-Business Suite through the Oracle Applications Manager (OAM) Client . A remote attacker with network access over HTTP can exploit this to gain unauthorized access to Oracle Applications Manager data. Affected versions include 12.1.3, 12.2.3, 12.2.4, 12.2.5, and 12.2...

Oracle E-Business Suite 12.x Unconstrainted File Download

Exploit Title: Unconstrained File Download - Oracle E-Business Suite Exploit Discoverer: Owais Mehtab, Tayeeb Rana Vendor Homepage: http://www.oracle.com Version: 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 CVE: 2017-3277 Attack Vectors exploitation may be done by sending a post request to following u...

CVE-2016-3277

Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Information Disclosure Vulnerability."...

CVE-2016-3277

CVE-2016-3277 affects Microsoft Internet Explorer 10/11 and Microsoft Edge. The issue is an information-disclosure vulnerability caused by improper handling of objects in memory, allowing remote attackers to obtain sensitive information via a crafted website. Mitigations are provided by Microsoft...

Microsoft Edge and Internet Explorer CVE-2016-3277 Information Disclosure Vulnerability

Description Microsoft Edge and Internet Explorer are prone to a information-disclosure vulnerability. Successful exploits will allow attackers to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Edge Microsoft Internet Explorer 10 Microsoft Internet...