71 matches found
RHEL 6 : php (RHSA-2019:3287)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3287 advisory. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: underflow in envpathinfo in fpmmain.c...
Critical: Red Hat Security Advisory: php security update
An update for php is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...
openSUSE Security Update : VirtualBox (openSUSE-2019-863)
This update for VirtualBox 5.2.20 fixes security issues and bugs. A number of vulnerabilities were fixed a affecting multiple components of VirtualBox bsc1112097: CVE-2018-0732, CVE-2018-2909, CVE-2018-3287, CVE-2018-3288, CVE-2018-3289, CVE-2018-3290, CVE-2018-3291, CVE-2018-3292, CVE-2018-3293,...
Oracle VM VirtualBox < 5.2.20 Multiple Vulnerabilities (Oct 2018 CPU)
The version of Oracle VM VirtualBox running on the remote host is 5.2.x prior to 5.2.20. It is, therefore, affected by multiple vulnerabilities as noted in the October 2018 Critical Patch Update advisory : - An unspecified vulnerability in the Oracle VM VirtualBox component of Oracle Virtualizati...
CVE-2018-3287
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...
CVE-2018-3287
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...
CVE-2018-3287
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...
CVE-2018-3287
CVE-2018-3287 affects Oracle VM VirtualBox
Ubuntu 14.04 LTS / 16.04 LTS : Git vulnerability (USN-3287-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3287-1 advisory. Timo Schmid discovered that the Git restricted shell incorrectly filtered allowed commands. A remote attacker could possibly use this issue to run an...
CVE-2017-3287
Vulnerability in the Oracle iStore component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP t...
CVE-2017-3287
CVE-2017-3287 affects Oracle E-Business Suite’s Oracle iStore (User Interface) across versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, and 12.2.6. The vulnerability enables an unauthenticated attacker with network access via HTTP to compromise iStore, with human interaction required. Impa...
CVE-2016-3287
Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to bypass the Secure Boot protection mechanism by leveraging administrative access to install a crafted policy, aka "Secure Boot Security Feature Bypass."...
CVE-2016-3287
The CVE-2016-3287 vulnerability impacts Microsoft Windows platforms (Windows 8.1, Windows Server 2012/R2, Windows RT 8.1, and Windows 10 TH/1511) where an attacker with local access and administrative privileges can bypass Secure Boot by installing a crafted policy. Root cause: insecure handling ...
Microsoft Windows CVE-2016-3287 Local Security Bypass Vulnerability
Description Microsoft Windows is prone to a local security-bypass vulnerability. Local attackers can exploit this issue to bypass certain security restrictions and perform unauthorized actions. Technologies Affected Microsoft Windows 10 for 32-bit Systems Microsoft Windows 10 for x64-based System...
[SECURITY] [DSA 3320-1] openafs security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3320-1 [email protected] https://www.debian.org/security/ Sebastien Delafond July 30, 2015 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3320-1] openafs security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3320-1 [email protected] https://www.debian.org/security/ Sebastien Delafond July 30, 2015 https://www.debian.org/security/faq -...
[SECURITY] [DSA 3320-1] openafs security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3320-1 [email protected] https://www.debian.org/security/ Sebastien Delafond July 30, 2015 https://www.debian.org/security/faq -...
CVE-2013-3287
EMC Unisphere for VMAX prior to version 1.6.1.6 is affected. If an unspecified level of LDAP debug logging is enabled, local users can read the LDAP bind password in cleartext from the console output. Remediation shown across sources: upgrade to Unisphere for VMAX 1.6.1.6 and/or change the LDAP b...
CVE-2012-3287
The CVE concerns Poul-Henning Kamp’s md5crypt, where the md5crypt algorithm has insufficient complexity and short runtime. This enables context-dependent attackers to recover cleartext passwords via brute-force attacks, including GPU-based approaches, as described in the NVD entry and corroborate...