RHEL 8 : thunderbird (RHSA-2020:3343)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:3343 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 68.11.0. Security Fixes:...

CVE-2020-3343

A vulnerability in Cisco AMP for Endpoints Linux Connector Software and Cisco AMP for Endpoints Mac Connector Software could allow an authenticated, local attacker to cause a buffer overflow on an affected device. The vulnerability is due to insufficient input validation. An attacker could exploi...

CVE-2020-3343

CVE-2020-3343 affects Cisco AMP for Endpoints Linux Connector Software and Mac Connector Software. The root cause is insufficient input validation that allows a crafted packet to trigger a memory buffer overflow, enabling an authenticated local attacker to crash the Cisco AMP for Endpoints servic...

Ubuntu: Security Advisory (USN-3343-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-3343

CVE-2017-3343 is a vulnerability in Oracle E-Business Suite's Oracle Marketing component (UI subcomponent) affecting 12.1.1, 12.1.2, 12.1.3, 12.2.3–12.2.6. The issue allows an unauthenticated attacker with network access over HTTP to compromise Oracle Marketing, with successful attacks requiring ...

CVE-2016-3343

CVE-2016-3343 affects the Common Log File System (CLFS) driver in multiple Windows versions (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, Server 2012, RT 8.1, 10 variants, Server 2016). It enables local users to gain privileges via a crafted application, i.e., a local privilege escalation vulnerabi...

Microsoft Windows CLFS Driver Elevation of Privilege (MS16-134: CVE-2016-3343)

An elevation of privilege vulnerability exists in Microsoft Windows. The vulnerability is due to improper handling of objects in memory. The attacker must entice the victim to run an executable file to exploit this vulnerability...

Microsoft Windows CVE-2016-3343 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to run processes with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based Syste...

[SECURITY] [DSA 3343-1] twig security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3343-1 [email protected] https://www.debian.org/security/ Sebastien Delafond August 26, 2015 https://www.debian.org/security/faq...

Debian DSA-3343-1 : twig - security update

James Kettle, Alain Tiemblo, Christophe Coevoet and Fabien Potencier discovered that twig, a templating engine for PHP, did not correctly process its input. End users allowed to submit twig templates could use specially crafted code to trigger remote code execution, even in sandboxed templates...

Debian Security Advisory DSA 3343-1 (twig - security update)

James Kettle, Alain Tiemblo, Christophe Coevoet and Fabien Potencier discovered that twig, a templating engine for PHP, did not correctly process its input. End users allowed to submit twig templates could use specially crafted code to trigger remote code execution, even in sandboxed templates...

CVE-2015-3343

Cross-site request forgery CSRF vulnerability in the OPAC module before 7.x-2.3 for Drupal allows remote attackers to hijack the authentication of unspecified victims for requests that remove a mapping via unknown vectors...

CVE-2015-3343

The Drupal OPAC module (7.x-2.x) is vulnerable to a Cross-Site Request Forgery (CSRF) that allows remote attackers to hijack user authentication and remove mappings, because the module does not require confirmation when removing a mapping. Affected versions are OPAC 7.x-2.x prior to 7.x-2.3. The ...

SA-CONTRIB-2015-001 - OPAC - Cross Site Request Forgery (CSRF)

OPAC module enables you to create mappings between node fields and ILS record fields. The module doesn't ask for confirmation when removing a mapping, leaving this operation vulnerable to cross-site request forgery CSRF attacks. CVE identifiers issued CVE-2015-3343 Versions affected OPAC 7.x-2.x...

CVE-2014-3343

Cisco IOS XR Software DHCPv6 Denial of Service (CVE-2014-3343) affects IOS XR 5.1 and related builds. The issue stems from incorrect handling of malformed DHCPv6 packets, allowing remote attackers to cause the DHCPv6 server process to crash (DoS). Exploitation is network-based and does not requir...

openSUSE Security Update : flash-player (openSUSE-SU-2013:1063-1)

This updates of Adobe Flash Player addresses current security problems. - Update to 11.2.202.291: bnc824512 - APSB13-16, CVE-2013-3343 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

Adobe Flash Player Memory Corruption (APSB13-16; CVE-2013-3343)

A remote code execution vulnerability has been reported in Adobe Flash Player...

SuSE 10 Security Update : flash-player (ZYPP Patch Number 8610)

Adobe flash-player has been updated to the 11.2.202.291 security update which fixes security issues. Bug824512 / CVE-2013-3343 / APSB13-16 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

SuSE 11.2 / 11.3 Security Update : flash-player (SAT Patch Numbers 7850 / 7917)

Adobe flash-player has been updated to the 11.2.202.291 security update which fixes security issues bnc824512, CVE-2013-3343, APSB13-16. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The...

Adobe Air Remote Code Execution Vulnerability -June13 (Windows)

This host is installed with Adobe Air and is prone to remote code execution vulnerability. OpenVAS Vulnerability Test $Id: gbadobeaircodeexecvulnjun13win.nasl 8176 2017-12-19 12:50:00Z cfischer $ Adobe Air Remote Code Execution Vulnerability -June13 Windows Authors: Arun Kallavi Copyright:...