CVE-2023-3349

CVE-2023-3349 affects Ibermatica RPS 2019. The vuln is an information-disclosure flaw where an unauthenticated user can retrieve sensitive data (usernames, IPs, SQL queries) by triggering the logging mechanism via the URL /RPS2019Service/status.html, which generates a downloadable log file. The c...

CVE-2023-3349 Information exposure on IBERMATICA RPS

Information exposure vulnerability in IBERMATICA RPS 2019, which exploitation could allow an unauthenticated user to retrieve sensitive information, such as usernames, IP addresses or SQL queries sent to the application. By accessing the URL /RPS2019Service/status.html, the application enables th...

RHEL 8 : kernel (RHSA-2023:3349)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3349 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: netfilter: use-after-free in nftables...

CVE-2022-3349

creationtimestamp| type| source ---|---|--- 2022-09-28 16:34:08+00:00| seen| https://t.me/cibsecurity/50576 2024-01-08 13:18:18+00:00| seen| https://t.me/arpsyndicate/2642 2025-04-15 13:54:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11818...

CVE-2022-3349

Summary: CVE-2022-3349 affects Sony PS4/PS5 in the exFAT Handler, specifically the UVFAT_readupcasetable function. The vulnerability stems from manipulating the dataLength argument, leading to a heap-based buffer overflow that can be triggered on a physical device. Impact & scope (as reported): H...

SUSE: Security Advisory (SUSE-SU-2020:3349-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DEBIAN-CVE-2021-3349

GNOME Evolution through 3.38.3 produces a "Valid signature" message for an unknown identifier on a previously trusted key because Evolution does not retrieve enough information from the GnuPG API. NOTE: third parties dispute the significance of this issue, and dispute whether Evolution is the bes...

CVE-2021-3349

GNOME Evolution through 3.38.3 produces a "Valid signature" message for an unknown identifier on a previously trusted key because Evolution does not retrieve enough information from the GnuPG API. NOTE: third parties dispute the significance of this issue, and dispute whether Evolution is the bes...

CVE-2021-3349

GNOME Evolution through 3.38.3 produces a "Valid signature" message for an unknown identifier on a previously trusted key because Evolution does not retrieve enough information from the GnuPG API. NOTE: third parties dispute the significance of this issue, and dispute whether Evolution is the bes...

CVE-2021-3349

CVE-2021-3349 concerns GNOME Evolution up to version 3.38.3, where the client can display a "+Valid signature+" for a key/identity that is unknown, because Evolution does not retrieve sufficient information from the GnuPG API. The issue is a verification/identity-trust UI quirk rather than a clas...

Cisco Data Center Network Manager XSS (cisco-sa-dncm-xss-AvMyAwd2)

According to its self-reported version, Cisco Data Center Network Manager is affected by multiple vulnerabilities. Please see the included Cisco BID and Cisco Security Advisory for more information. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid139007;...

CVE-2020-3349

Cisco Data Center Network Manager (DCNM) Web UI is affected by multiple XSS vulnerabilities caused by insufficient input validation. The issues allow an authenticated attacker to lure a user to click a crafted link, enabling arbitrary script execution in the interface context or access to browser...

SUSE SLED15 / SLES15 Security Update : trousers (SUSE-SU-2019:3349-1)

This update for trousers fixes the following issues : CVE-2019-18898: Fixed a local symlink attack where a rogue tss user could have gain ownership of arbitrary files in the system during installation/update of the trousers package bsc1157651. Note that Tenable Network Security has extracted the...

CVE-2011-3349

lightdm before 0.9.6 writes in .dmrc and Xauthority files using root permissions while the files are in user controlled folders. A local user can overwrite root-owned files via a symlink, which can allow possible privilege escalation...

CVE-2011-3349

LightDM before 0.9.6 writes in .dmrc and Xauthority files with root permissions while the files are in user-controlled folders. A local user can overwrite root-owned files via a symlink, which can allow possible privilege escalation. Exploitation status is not provided in the linked documents; no...

CVE-2011-3349

lightdm before 0.9.6 writes in .dmrc and Xauthority files using root permissions while the files are in user controlled folders. A local user can overwrite root-owned files via a symlink, which can allow possible privilege escalation...

Ubuntu 14.04 LTS / 16.04 LTS : NTP vulnerabilities (USN-3349-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3349-1 advisory. Yihan Lian discovered that NTP incorrectly handled certain large request data values. A remote attacker could possibly use this issue to caus...

CVE-2017-3349

Vulnerability in the Oracle Marketing component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTT...

CVE-2017-3349

CVE-2017-3349 affects Oracle E‑Business Suite’s Oracle Marketing (User Interface) component. Affected versions: 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, and 12.2.6. The vulnerability allows an unauthenticated attacker who can reach Oracle Marketing over HTTP to compromise data, with the at...

CVE-2016-3349

The CVE-2016-3349 issue is a Win32k Elevation of Privilege in Windows where the Windows kernel-mode driver (Win32k.sys) fails to handle memory objects correctly. An attacker who can log on locally and run a crafted application could execute arbitrary code in kernel mode, gaining full control and ...