CVE-2020-3302

CVE-2020-3302 refers to a vulnerability in the web UI of Cisco Firepower Management Center (FMC) where insufficient input validation lets an authenticated, remote attacker upload a crafted file to overwrite files on the device’s filesystem. The issue is documented across multiple sources (Cisco a...

Huawei EulerOS: Security Advisory for mariadb (EulerOS-SA-2017-1170)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Updates for Exchange (February 2019)

The Microsoft Exchange Server installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - Multiple Vulnerabilites with the included libraries from Oracle Outside. CVE-2018-18223, CVE-2018-18224, CVE-2018-3147, CVE-2018-3217, CVE-2018-3218,...

CVE-2018-3302

CVE-2018-3302 affects Oracle Outside In Technology (Outside In Filters) used by Oracle Fusion Middleware. Impact is that version 8.5.3/8.5.4 may allow an unauthenticated, network-accessible attacker (via HTTP) to cause a hang/crash (DOS) and unauthorized data read, with user interaction required....

Moderate: Red Hat Security Advisory: rh-mariadb100-mariadb security update

An update for rh-mariadb100-mariadb is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2015-3302

TheCartPress WordPress plugin (TheCartPress, aka The Professional WordPress eCommerce Plugin) for WordPress is affected by CVE-2015-3302. The vulnerability arises from a broken authentication mechanism that permits non-authenticated users to access sensitive order data due to improper access cont...

Important: Red Hat Security Advisory: rh-mysql56-mysql security and bug fix update

An update for rh-mysql56-mysql is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

EulerOS 2.0 SP1 : mariadb (EulerOS-SA-2017-1169)

According to the versions of the mariadb packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was discovered that the mysql and mysqldump tools did not correctly handle database and table names containing newline characters. A databas...

EulerOS 2.0 SP2 : mariadb (EulerOS-SA-2017-1170)

According to the versions of the mariadb packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was discovered that the mysql and mysqldump tools did not correctly handle database and table names containing newline characters. A databas...

Scientific Linux Security Update : mariadb on SL7.x x86_64 (20170801)

The following packages have been upgraded to a later upstream version: mariadb 5.5.56. Security Fixes : - It was discovered that the mysql and mysqldump tools did not correctly handle database and table names containing newline characters. A database user with privileges to create databases or...

Oracle Linux 7 : mariadb (ELSA-2017-2192)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-2192 advisory. - Rebase to 5.5.56 That release also fixes the following security issues: CVE-2016-5617/CVE-2016-6664 CVE-2017-3312 CVE-2017-3238 CVE-2017-3243...

Moderate: Red Hat Security Advisory: mariadb security and bug fix update

An update for mariadb is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

openSUSE Security Update : mariadb (openSUSE-2017-644)

This update for mariadb fixes the following issues : - update to MariaDB 10.0.30 GA - notable changes : - XtraDB updated to 5.6.35-80.0 - TokuDB updated to 5.6.35-80.0 - PCRE updated to 8.40 - MDEV-11027: better InnoDB crash recovery progress reporting - MDEV-11520: improvements to how InnoDB dat...

Ubuntu 14.04 LTS / 16.04 LTS : ImageMagick vulnerabilities (USN-3302-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3302-1 advisory. It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were...

SUSE SLED12 / SLES12 Security Update : mariadb (SUSE-SU-2017:1315-1)

This update for mariadb fixes the following issues : - update to MariaDB 10.0.30 GA - notable changes : - XtraDB updated to 5.6.35-80.0 - TokuDB updated to 5.6.35-80.0 - PCRE updated to 8.40 - MDEV-11027: better InnoDB crash recovery progress reporting - MDEV-11520: improvements to how InnoDB dat...

openSUSE Security Update : mysql-community-server (openSUSE-2017-555) (Riddle)

This update for mysql-community-server to version 5.6.36 fixes the following issues : These security issues were fixed : - CVE-2016-5483: Mysqldump failed to properly quote certain identifiers in SQL statements written to the dump output, allowing for execution of arbitrary commands bsc1029014 -...

openSUSE: Security Advisory for mysql-community-server (openSUSE-SU-2017:1209-1)

The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for mysql-community-server (important)

This update for mysql-community-server to version 5.6.36 fixes the following issues: These security issues were fixed: - CVE-2016-5483: Mysqldump failed to properly quote certain identifiers in SQL statements written to the dump output, allowing for execution of arbitrary commands bsc1029014 -...

[SECURITY] [DLA 916-1] mysql-5.5 security update

Package : mysql-5.5 Version : 5.5.55-0+deb7u1 CVE ID : CVE-2016-5483 CVE-2017-3302 CVE-2017-3305 CVE-2017-3308 CVE-2017-3309 CVE-2017-3329 CVE-2017-3453 CVE-2017-3456 CVE-2017-3461 CVE-2017-3462 CVE-2017-3463 CVE-2017-3464 CVE-2017-3600 Debian Bug : 854713 860544 Several issues have been discover...

[SECURITY] [DSA 3834-1] mysql-5.5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3834-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 25, 2017 https://www.debian.org/security/faq -...