72 matches found
CentOS: Security Advisory for libsndfile (CESA-2021:3295)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2020-3295
Cisco Small Business RV320/RV325 Series and RV016/RV042/RV082 Routers expose multiple web‑based management interface vulnerabilities caused by insufficient input boundary checks, allowing an authenticated admin to trigger stack overflows and potentially execute arbitrary code with root privileges...
CVE-2010-3295
CVE-2010-3295 is rejected/not used and does not represent an active vulnerability entry.
Oracle VM VirtualBox < 5.2.20 Multiple Vulnerabilities (Oct 2018 CPU)
The version of Oracle VM VirtualBox running on the remote host is 5.2.x prior to 5.2.20. It is, therefore, affected by multiple vulnerabilities as noted in the October 2018 Critical Patch Update advisory : - An unspecified vulnerability in the Oracle VM VirtualBox component of Oracle Virtualizati...
CVE-2018-3295
CVE-2018-3295 affects Oracle VM VirtualBox core (VirtualBox component under Oracle Virtualization). A vulnerability in the core could allow takeover of Oracle VM VirtualBox on affected products prior to 5.2.20. Exploitation details in sources indicate the issue can be triggered by an attacker wit...
DEBIAN-CVE-2015-3295
markdown-it before 4.1.0 does not block data: URLs...
CVE-2015-3295
markdown-it before 4.1.0 does not block data: URLs...
CVE-2015-3295
markdown-it before 4.1.0 does not block data: URLs, enabling potential HTML injection when rendering user-provided content. Affected: markdown-it versions prior to 4.1.0. Root cause: failure to block data: URLs in the rendering process. Impact: authoring or rendering content could lead to uninten...
CVE-2015-3295
markdown-it before 4.1.0 does not block data: URLs...
Ubuntu: Security Advisory (USN-3295-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 14.04 LTS / 16.04 LTS : JasPer vulnerabilities (USN-3295-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3295-1 advisory. It was discovered that JasPer incorrectly handled certain malformed JPEG-2000 image files. If a user or automated system using JasPer were...
CVE-2017-3295
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters . Supported versions that are affected are 8.5.2 and 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
CVE-2017-3295
CVE-2017-3295 concerns Oracle Outside In Technology (Outside In Filters) used by Oracle Fusion Middleware. Affected are 8.5.2 and 8.5.3. The vulnerability allows unauthenticated, network-based access via HTTP that can hang or cause a frequently repeated crash (partial/complete DoS) in Outside In ...
CVE-2016-3295
CVE-2016-3295 is the Microsoft Browser Memory Corruption Vulnerability affecting Internet Explorer 10/11 and Microsoft Edge. The issue allows remote attackers to execute arbitrary code or cause a memory corruption-based DoS via a crafted web site. Root cause is memory handling in browser objects,...
Microsoft Internet Explorer and Edge CVE-2016-3295 Remote Memory Corruption Vulnerability
Description Microsoft Internet Explorer and Edge are prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Edge and Internet Explorer 10...
Microsoft Internet Explorer Memory Corruption (MS16-104: CVE-2016-3295)
A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to a type confusion when handling certain objects in JavaScript. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page that could...
MS16-105: Cumulative Security Update for Microsoft Edge (3183043)
The version of Microsoft Edge installed on the remote Windows host is missing Cumulative Security Update 3183043. It is, therefore, affected by multiple vulnerabilities, the majority of which are remote code execution vulnerabilities. An unauthenticated, remote attacker can exploit these...
Cisco NX-OS Software HSRP Authentication Denial of Service Vulnerability (Cisco-SA-20140611-CVE-2014-3295)
A vulnerability in Hot Standby Router Protocol HSRP authentication in the Cisco Nexus series could allow an unauthenticated, adjacent attacker to affect the state of HSRP group members and cause black holing of traffic. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be...
Debian DSA-3295-1 : cacti - security update
Several vulnerabilities cross-site scripting and SQL injection have been discovered in Cacti, a web interface for graphing of monitoring systems. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisor...