122 matches found
Ubuntu 14.04 LTS / 16.04 LTS : FreeType vulnerabilities (USN-3282-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3282-1 advisory. It was discovered that FreeType did not correctly handle certain malformed font files. If a user were tricked into using a specially crafted...
CVE-2017-3282
Vulnerability in the Oracle Partner Management component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network acces...
CVE-2017-3282
Vulnerability in the Oracle Partner Management component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network acces...
CVE-2017-3282
The CVE-2017-3282 issue affects Oracle E-Business Suite, specifically the Oracle Partner Management component’s User Interface. Affected versions include 12.1.1–12.2.6. The vulnerability allows an unauthenticated, network-accessing attacker (via HTTP) to compromise Partner Management; exploitatio...
CVE-2016-3282
CVE-2016-3282 is a Microsoft Office remote code execution vulnerability arising from memory corruption in Office components (Word, Word Automation Services, SharePoint-related components, etc.). It affects a broad set of Office products across Windows and macOS (Word 2007 SP3, Office 2010 SP2, Wo...
Microsoft Office Word Multiple Vulnerabilities (3170008)
This host is missing a critical security update according to Microsoft Bulletin MS16-088 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
OpenAFS Multiple Vulnerabilities - 01 - Windows
OpenAFS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openafs:openafs"; ifdescription...
[SECURITY] [DLA 342-1] openafs security update
Package : openafs Version : 1.4.12.1+dfsg-4+squeeze4 CVE ID : CVE-2015-3282 CVE-2015-3283 CVE-2015-3285 CVE-2015-6587 CVE-2015-7762 CVE-2015-7763 Several vulnerabilities have been found and solved in the distributed file system OpenAFS: CVE-2015-3282 vos leaked stack data clear on the wire when...
CVE-2015-3282
vos in OpenAFS before 1.6.13, when updating VLDB entries, allows remote attackers to obtain stack data by sniffing the network...
CVE-2015-3282
OpenAFS vos vulnerability CVE-2015-3282 affects OpenAFS prior to 1.6.13; on VLDB entry updates, stack data can be leaked over the network. The issue is mitigated by upgrading to a newer OpenAFS release (e.g., 1.6.13+ per description) or distribution-specific advisories recommending updated OpenAF...
[SECURITY] [DSA 3320-1] openafs security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3320-1 [email protected] https://www.debian.org/security/ Sebastien Delafond July 30, 2015 https://www.debian.org/security/faq -...
Scientific Linux Security Update : openafs on SL5.x, SL6.x, SL7.x i386/x86_64 (20150730)
All server platforms Fix for CVE-2015-3282: vos leaks stack data onto the wire in the clear when creating vldb entries Workaround for CVE-2015-3283: bos commands can be spoofed, including some which alter server state Disabled searching the VLDB by volume name regular expression to avoid possible...
[SECURITY] [DSA 3320-1] openafs security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3320-1 [email protected] https://www.debian.org/security/ Sebastien Delafond July 30, 2015 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3320-1] openafs security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3320-1 [email protected] https://www.debian.org/security/ Sebastien Delafond July 30, 2015 https://www.debian.org/security/faq -...
Debian DSA-3282-1 : strongswan - security update
Alexander E. Patrakov discovered an issue in strongSwan, an IKE/IPsec suite used to establish IPsec protected links. When an IKEv2 client authenticates the server with certificates and the client authenticates itself to the server using pre-shared key or EAP, the constraints on the server...
CVE-2014-3282
CVE-2014-3282 affects the Cisco Unified Communications Domain Manager (CDM) with VOSS, specifically the Administration GUI in the web framework of CDM 9.0(.1) and earlier. The root cause is an improper access-control implementation in the Admin GUI, allowing remote authenticated users with Locati...
CVE-2013-3282
CVE-2013-3282 is rejected and not used per the Initial Description.
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-3282. Reason: This candidate is a duplicate of CVE-2010-3282. Notes: All CVE users should reference CVE-2010-3282 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...