RHEL 7 : microcode_ctl (RHSA-2021:3322)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:3322 advisory. The microcodectl packages provide microcode updates for Intel. Security Fixes: hw: Vector Register Data Sampling CVE-2020-0548 hw: L1D Cache...

CVE-2020-3322

Cisco Webex Network Recording Player and Cisco Webex Player for Windows are affected by an input-validation vulnerability in ARF/WRF recordings. The issue allows an attacker to cause the player to crash when opening a malicious ARF/WRF file, resulting in DoS on the affected system. The provided c...

CVE-2013-3322

NetApp OnCommand System Manager 2.1 and earlier allows remote attackers to inject arbitrary commands in the Halt/Reboot interface...

RHEL 7 : kernel-rt (RHSA-2017:3322)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2017:3322 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Securi...

Ubuntu: Security Advisory (USN-3322-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS / 16.04 LTS : Exim vulnerability (USN-3322-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3322-1 advisory. It was discovered that Exim did not properly deallocate memory when processing certain command line arguments. A local attacker could use this in...

CVE-2017-3322

Vulnerability in the MySQL Cluster component of Oracle MySQL subcomponent: Cluster: NDBAPI. Supported versions that are affected are 7.2.25 and earlier, 7.3.14 and earlier, 7.4.12 and earlier and . Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

CVE-2017-3322

Vulnerability in the MySQL Cluster component of Oracle MySQL subcomponent: Cluster: NDBAPI. Supported versions that are affected are 7.2.25 and earlier, 7.3.14 and earlier, 7.4.12 and earlier and . Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

CVE-2017-3322

Vulnerability in the MySQL Cluster component of Oracle MySQL subcomponent: Cluster: NDBAPI. Supported versions that are affected are 7.2.25 and earlier, 7.3.14 and earlier, 7.4.12 and earlier and . Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

CVE-2017-3322

The CVE-2017-3322 entry applies to Oracle MySQL Cluster (Cluster: NDBAPI). Affected: MySQL Cluster component versions 7.2.25 and earlier, 7.3.14 and earlier, 7.4.12 and earlier. Issue: a vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise MySQ...

MySQL Cluster 7.2.x < 7.2.26 Multiple DoS (January 2017 CPU)

The version of MySQL Cluster running on the remote host is 7.2.x prior to 7.2.26. It is, therefore, affected by multiple denial of service vulnerabilities : - An overflow condition exists in the NDBAPI subcomponent that allows an unauthenticated, remote attacker to cause a denial of service...

MySQL Cluster 7.3.x < 7.3.15 Multiple Vulnerabilities (January 2017 CPU)

The version of MySQL Cluster running on the remote host is 7.3.x prior to 7.3.15. It is, therefore, affected by multiple vulnerabilities : - An overflow condition exists in the NDBAPI subcomponent that allows an unauthenticated, remote attacker to update, insert, or delete arbitrary data...

Microsoft Internet Explorer Multiple Vulnerabilities (3177356)

This host is missing a critical security update according to Microsoft Bulletin MS16-095. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2016-3322

Microsoft Internet Explorer 11 and Edge allow remote attackers to execute arbitrary code via a crafted web page, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3289...

Microsoft Internet Explorer Memory Corruption (MS16-095: CVE-2016-3322)

A use after free vulnerability exists in Microsoft Internet Explorer. The vulnerability is due to the mishandling of cached objects in complex webpages. A remote attacker can exploit this issue by enticing a target victim to open a specially crafted web page that could allow attackers to execute...

MS16-096: Cumulative Security Update for Microsoft Edge (3177358)

The version of Microsoft Edge installed on the remote Windows host is missing Cumulative Security Update 3177358. It is, therefore, affected by multiple vulnerabilities : - Multiple remote code execution vulnerabilities exist due to a failure to properly access objects in memory. A remote attacke...

ThinkServer *50-series BIOS Password Encryption Weakness

Lenovo Security Advisory: LEN-2015-018 Potential Impact: Password Disclosure Severity: Low Summary: The ThinkServer 50-series of servers store user and administrator BIOS passwords using a legacy, proprietary form of encryption. This issue was found during an internal security review and correcte...

ThinkServer *50-series BIOS Password Encryption Weakness - Lenovo Support US

No description provided...

Debian DSA-3322-1 : ruby-rack - security update

Tomek Rabczak from the NCC Group discovered a flaw in the normalizeparams method in Rack, a modular Ruby webserver interface. A remote attacker can use this flaw via specially crafted requests to cause a SystemStackError and potentially cause a denial of service condition for the service...

Debian: Security Advisory (DSA-3322-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...