Ubuntu: Security Advisory (USN-3286-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-3286

CVE-2017-3286 describes a vulnerability in the Oracle Applications DBA component of Oracle E-Business Suite (subcomponent: Patching). Affected supported versions are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. The description states that an easily exploitable vulnerability could allow a high-privi...

CVE-2016-3286

CVE-2016-3286 affects Windows kernel-mode drivers (Win32k) across multiple OS versions (Vista through Windows 10 1511). The vulnerability arises in the Windows kernel-mode driver due to improper handling of memory objects, enabling a local attacker to gain elevated privileges via a crafted applic...

MS16-090: Security Update for Windows Kernel-Mode Drivers (3171481)

The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - Multiple elevation of privilege vulnerabilities exist in the kernel-mode driver due to improper handling of objects in memory. An authenticated, remote attacker can exploit these, via ...

Microsoft Win32k Elevation of Privilege (MS16-090 : CVE-2016-3286)

An elevation of privilege vulnerability exists in Windows Kernel. The vulnerability is caused when the Windows kernel-mode driver fails to properly handle objects in memory. A remote attacker can exploit this vulnerability by running a specially crafted application...

CVE-2015-3286

Buffer overflow in the Solaris kernel extension in OpenAFS before 1.6.13 allows local users to cause a denial of service panic or deadlock or possibly have other unspecified impact via a large group list when joining a PAG...

CVE-2015-3286

OpenAFS on Solaris has a local-privilege impact due to a buffer overflow in the Solaris kernel extension prior to version 1.6.13. The issue occurs when joining a PAG with a large group list, potentially causing a denial of service (panic or deadlock) or other unspecified impact. Affected componen...

CVE-2014-3286

The web framework in Cisco WebEx Meeting Server does not properly restrict the content of reply messages, which allows remote attackers to obtain sensitive information via a crafted URL, aka Bug IDs CSCuj81685, CSCuj81688, CSCuj81665, CSCuj81744, and CSCuj81661...

CVE-2014-3286

CVE-2014-3286 affects Cisco WebEx Meetings Server. The vulnerability resides in the web framework’s handling of reply messages, where improper sanitization allows an unauthenticated, remote attacker to enumerate valid user accounts by sending crafted URLs. Cisco's advisory confirms the issue and ...

CVE-2013-3286

EMC Documentum eRoom is affected by multiple cross‑site scripting (XSS) vulnerabilities prior to version 7.4.4 P11. Exploitation vector involves crafting a URL that triggers script/HTML execution in an authenticated user context. Affected products include EMC Documentum eRoom versions 7.4.4 P10 a...

KLA10145 CI vulnerability in Documentum eRoom

Multiple XSS were found in Documentum eRoom. By exploiting this vulnerability malicious users can inject web script. This vulnerability can be exploited remotely via a specially designed URL. Original advisories - Related products EMC-Documentum-eRoom CVE list CVE-2013-3286 warning Solution Updat...

Oracle Linux 5 : kernel (ELSA-2009-1548)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-1548 advisory. - fs fix pipe null pointer dereference Jeff Moyer 530938 530939 CVE-2009-3547 - security require root for mmapminaddr Eric Paris 518142 518143...

CVE-2012-3286

CVE-2012-3286: Unspecified vulnerability in HP ArcSight Connector Appliance ≤6.3 and ArcSight Logger ≤5.2 that could allow remote authenticated users to obtain sensitive information, modify data, or cause a denial of service via unknown vectors. HP’s security bulletin SSRT101056/HPSBMU02836 indic...

CentOS Update for kernel CESA-2009:1548 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

HP Systems Insight Manager logfile Parameter Arbitrary File Download

HP Systems Insight Manager is affected by an arbitrary file download vulnerability that can be leveraged by a remote attacker to download files of their choosing. If an attacker supplies a specially crafted HEAD request to the 'logfile' variable in 'switchFWInstallStatus.jsp', an arbitrary file c...

[security bulletin] HPSBMA02590 SSRT100182 rev.1 - HP Systems Insight Manager (SIM) for HP-UX, Linux, and Windows, Remote Arbitrary File Download

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02548231 Version: 1 HPSBMA02590 SSRT100182 rev.1 - HP Systems Insight Manager SIM for HP-UX, Linux, and Windows, Remote Arbitrary File Download NOTICE: The information in this Security Bulletin...

CVE-2010-3286

HP Systems Insight Manager (SIM) 6.0 and 6.1 contain an unspecified vulnerability described as CVE-2010-3286 that allows remote attackers to read arbitrary files. Public sources prime affected products as HP SIM on HP-UX, Linux, and Windows, with hotfixes released in 2010 to resolve the issue (ho...

VMSA-2010-0009 : ESXi ntp and ESX Service Console third-party updates

a. Service Console update for COS kernel Updated COS package 'kernel' addresses the security issues that are fixed through versions 2.6.18-164.11.1. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2009-2695, CVE-2009-2908, CVE-2009-3228, CVE-2009-3286,...

Debian DSA-1928-1 : linux-2.6.24 - privilege escalation/denial of service/sensitive memory leak

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service, sensitive memory leak or privilege escalation. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-2846 Michael Buesch noticed a typing issue in the...

Debian DSA-1929-1 : linux-2.6 - privilege escalation/denial of service/sensitive memory leak

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service, sensitive memory leak or privilege escalation. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-1883 Solar Designer discovered a missing capability...