96 matches found
SUSE: Security Advisory (SUSE-SU-2015:0979-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CASAP Automated Enrollment System 1.0 Cross Site Scripting
Exploit Title: CASAP Automated Enrollment System 1.0 - 'First Name' Stored XSS Author: nu11secur1ty Date: 02.15.2021 Vendor: https://www.sourcecodester.com/php/12210/casap-automated-enrollment-system.html Software Athor: https://www.sourcecodester.com/users/yna-ecole Link:...
CVE-2021-3294
CVE-2021-3294 concerns the CASAP Automated Enrollment System 1.0. The vulnerability is a Stored Cross-Site Scripting (XSS) in users.php, arising from insufficient validation of user data in the “First Name” field, enabling an attacker to steal cookies and redirect victims to a malicious site. Pub...
CVE-2020-3294
Cisco CVE-2020-3294 describes multiple stack-overflow vulnerabilities in the web-based management interface of Cisco Small Business RV320/RV325 and RV016/RV042/RV082 routers. The root cause is insufficient boundary restrictions on user-supplied input to scripts in the web UI. An authenticated adm...
Oracle VM VirtualBox < 5.2.20 Multiple Vulnerabilities (Oct 2018 CPU)
The version of Oracle VM VirtualBox running on the remote host is 5.2.x prior to 5.2.20. It is, therefore, affected by multiple vulnerabilities as noted in the October 2018 Critical Patch Update advisory : - An unspecified vulnerability in the Oracle VM VirtualBox component of Oracle Virtualizati...
CVE-2018-3294
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows low privileged attacker with network access via VRDP to compromise Oracle VM VirtualBox. Successful...
CVE-2018-3294
CVE-2018-3294 affects Oracle VM VirtualBox Core (VirtualBox) prior to version 5.2.20. The vulnerability allows a low-privilege attacker who has network access via VRDP to take over VirtualBox, with the attack reportedly requiring user interaction and potentially impacting other products. The Open...
Ubuntu 14.04 LTS / 16.04 LTS : Bash vulnerabilities (USN-3294-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3294-1 advisory. Bernd Dietzel discovered that Bash incorrectly expanded the hostname when displaying the prompt. If a remote attacker were able to modify a...
CVE-2017-3294
CVE-2017-3294 describes a vulnerability in the Oracle Outside In Technology (subcomponent: Outside In Filters). Connected sources confirm affected products/versions: Oracle Outside In Technology 8.5.2 and 8.5.3 are vulnerable when data is processed over a network. The issue can be triggered via H...
CVE-2016-3294
Technical details (affected product, component, root cause, impacted versions, or exploitation data) are not publicly provided in the supplied documents; monitor for updates.
Microsoft Edge Memory Corruption (MS2016-08: CVE-2016-3294)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to a type confusion when handling certain objects in JavaScript. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page that could...
MS16-105: Cumulative Security Update for Microsoft Edge (3183043)
The version of Microsoft Edge installed on the remote Windows host is missing Cumulative Security Update 3183043. It is, therefore, affected by multiple vulnerabilities, the majority of which are remote code execution vulnerabilities. An unauthenticated, remote attacker can exploit these...
dnsmasq < 2.73rc4 setup_reply() Function Return Value Checking Information Disclosure
The remote dnsmasq server is running a version prior to 2.73rc4. It is, therefore, affected by an information disclosure vulnerability due not properly checking the return value from the setupreply function during TCP connections. An unauthenticated, remote attacker can exploit this to disclose...
Gentoo Security Advisory GLSA 201512-01
Gentoo Linux Local Security Checks GLSA 201512-01 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...
GLSA-201512-01 : Dnsmasq: Denial of Service
The remote host is affected by the vulnerability described in GLSA-201512-01 Dnsmasq: Denial of Service An out-of-bounds read vulnerability has been found in the tcprequest function in Dnsmasq. Impact : A remote attacker could send a specially crafted DNS request, possibly resulting in a Denial o...
Debian DSA-3294-1 : wireshark - security update
Multiple vulnerabilities were discovered in the dissectors for WCCP and GSM DTAP, which could result in denial of service. The oldstable distribution wheezy is not affected. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...
SUSE SLED11 / SLES11 Security Update : dnsmasq (SUSE-SU-2015:1015-1)
The DNS server dnsmasq was updated to fix one security issue and one non-security bug : CVE-2015-3294: A remote unauthenticated attacker could have caused a denial of service DoS or read memory from the heap, potentially disclosing information such as performed DNS queries or encryption keys...
Debian DLA-225-1 : dnsmasq security update
The following vulnerability vulnerability was found in dnsmasq : CVE-2015-3294 Remote attackers could read process memory and cause DoS via malformed DNS requests. For Debian 6 'Squeeze', these issues have been fixed in dnsmasq version 2.55-2+deb6u1. NOTE: Tenable Network Security has extracted t...
[SECURITY] [DLA 225-1] dnsmasq security update
Package : dnsmasq Version : 2.55-2+deb6u1 CVE ID : CVE-2015-3294 Debian Bug : 783459 The following vulnerability vulnerability was found in dnsmasq: CVE-2015-3294 Remote attackers could read process memory and cause DoS via malformed DNS requests. For Debian 6 “Squeeze”, these issues have been...
