MS16-102: Security Update for Microsoft Windows PDF Library (3182248)

The remote Windows host is missing a security update. It is, therefore, affected by a remote code execution vulnerability in the Microsoft Windows PDF Library due to improper handling of objects in memory. An unauthenticated, remote attacker can exploit this vulnerability by convincing a user to...

MS16-096: Cumulative Security Update for Microsoft Edge (3177358)

The version of Microsoft Edge installed on the remote Windows host is missing Cumulative Security Update 3177358. It is, therefore, affected by multiple vulnerabilities : - Multiple remote code execution vulnerabilities exist due to a failure to properly access objects in memory. A remote attacke...

Microsoft Edge PDF Remote Code Execution (MS16-096: CVE-2016-3319; CVE-2017-0291)

A remote code execution vulnerability exists in Microsoft Edge. The vulnerability is due to the way Edge improperly accesses objects in memory. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted PDF file...

Debian DSA-3319-1 : bind9 - security update

Jonathan Foote discovered that the BIND DNS server does not properly handle TKEY queries. A remote attacker can take advantage of this flaw to mount a denial of service via a specially crafted query triggering an assertion failure and causing BIND to exit. %NASLMINLEVEL 70300 C Tenable Network...

CVE-2015-3319

CVE-2015-3319 affects Hotspot Express hotEx Billing Manager version 73. The root cause is absence of the HttpOnly flag in Set-Cookie headers, enabling potential access to cookies via client-side scripts by remote attackers. Multiple sources (NVD entry and CNVD/OpenVAS notes) corroborate this expo...

CVE-2014-3319

Directory traversal vulnerability in the Real-Time Monitoring Tool RTMT in Cisco Unified Communications Manager CM 10.01 allows remote authenticated users to read arbitrary files via a crafted URL, aka Bug ID CSCup57676...

CVE-2014-3319

Cisco CVE-2014-3319 affects the Real-Time Monitoring Tool (RTMT) in Cisco Unified Communications Manager (CM) 10.0(1). The vulnerability is a directory traversal that lets an authenticated, remote attacker read arbitrary files by sending a crafted URL. Root cause is insufficient input validation ...

SAP Host Agent SOAP Web Service Information Disclosure (SAP Note 1816536)

The version of SAP Host Agent discloses sensitive system information, such as operating system version, databases version, CPU make and model, and information on network interfaces. A remote, unauthenticated attacker could use this to specialize attacks. %NASLMINLEVEL 70300 C Tenable Network...

CVE-2013-3319

CVE-2013-3319 affects SAP NetWeaver 7.03 via the HostControl service GetComputerSystem method, enabling remote disclosure of sensitive information through a crafted SOAP request to port 1128. Public references in Nessus note and vendor advisories (SAP Note 1816536) detail sensitive data exposure ...

SAP Host Agent Information Disclosure

This module attempts to retrieve Computer and OS info from Host Agent through the SAP HostControl service. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rexml/document' class MetasploitModule 'SAP Host Agen...

IBM RBD Web Services Information Disclosure Vulnerability (Windows)

This host is installed with IBM Rational Business Developer and is prone information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbibmrationalbusideveloperinfodiscvulnwin.nasl 5366 2017-02-20 13:55:38Z cfi $ IBM RBD Web Services Information Disclosure Vulnerability Windows Authors:...

CVE-2012-3319

CVE-2012-3319 affects IBM Rational Business Developer 8.x prior to 8.0.1.4. The vulnerability allows remote attackers to obtain potentially sensitive information via a connection to a web service created with Rational Business Developer. The NVD entry notes a Information Disclosure impact (Confid...

Cisco WebEx Player ATDL2006.dll Heap Memory Corruption (CVE-2011-3319)

A code execution vulnerability exists in Cisco WebEx Player...

ZDI-11-341 : Cisco WebEx Player WRF Type 0 Parsing Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-11-341 : Cisco WebEx Player WRF Type 0 Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-341 December 7, 2011 - -- CVE ID: CVE-2011-3319 - -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C - -- Affected Vendors:...

CVE-2011-3319

Cisco WebEx Player CVE-2011-3319 is a heap-based buffer overflow in the WRF parsing path (atdl2006.dll) that allows remote code execution via a crafted WRF file. Affected client builds include T26 before SP49 EP40 and T27 before SP28; fixed in later builds (e.g., T26 SP49 EP40, T27 SP11/EP23/EP9/...

CVE-2010-3319

IBM Records Manager (RM) 4.5.x before 4.5.1.1-IER-FP001 places a session token in the URI, potentially allowing remote attackers to read a Referer log file and obtain sensitive information. Remediate by upgrading to 4.5.1.1-IER-FP001.

CVE-2009-3319

SQL injection vulnerability in poems.php in DCI-Designs Dawaween 1.03 allows remote attackers to execute arbitrary SQL commands via the id parameter in a sec list action, a different vector than CVE-2006-1018...

CVE-2009-3319

The provided data documents CVE-2009-3319 as affecting the DCI-Designs Dawaween 1.03 package, specifically the poems.php module. The vulnerability is an SQL injection that allows remote attackers to execute arbitrary SQL commands via the id parameter in a sec list action (a vector distinct from C...

CVE-2008-3319

admin/index.php in Maian Links 3.1 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary linkscookie cookie...

CVE-2008-3319

CVE-2008-3319 affects Maian Links 3.1 and earlier. The vulnerability is an authentication bypass in admin/index.php caused by accepting an arbitrary links_cookie cookie, permitting remote attackers to bypass login and gain administrative access. The description from multiple sources confirms the ...