Microsoft Windows Kernel 'Win32k.sys' CVE-2016-3349 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker can exploit this issue to execute arbitrary code in kernel mode with elevated privileges. Technologies Affected Microsoft Windows 10 for 32-bit Systems Microsof...

CVE-2015-3349

Multiple cross-site request forgery CSRF vulnerabilities in the Htaccess module before 7.x-2.3 for Drupal allow remote attackers to hijack the authentication of administrators for requests that 1 deploy or 2 delete an .htaccess file via unspecified vectors...

CVE-2015-3349

Multiple cross-site request forgery CSRF vulnerabilities in the Htaccess module before 7.x-2.3 for Drupal allow remote attackers to hijack the authentication of administrators for requests that 1 deploy or 2 delete an .htaccess file via unspecified vectors...

CVE-2015-3349

The CVE-2015-3349 entry concerns Drupal’s Htaccess module (7.x-2.x) with CSRF flaws that allow remote attackers to hijack administrator sessions to deploy or delete an .htaccess file. Affected: Htaccess module for Drupal 7.x, prior to 7.x-2.3. Root cause: Cross-site request forgery in the module’...

CVE-2014-3349

Cisco Intelligent Automation for Cloud (Cisco Cloud Portal) suffers an arbitrary file upload vulnerability due to insufficient input validation of file types during file submission. An authenticated, remote attacker could submit a crafted file to an affected device, enabling arbitrary file upload...

Adobe ColdFusion JRun Application Server Denial of Service (APSB13-19; CVE-2013-3349)

A denial of service vulnerability has been found on Adobe ColdFusion. A remote attacker can exploit this vulnerability by sending specially crafted data to a target system. This protection will detect and block attempts to exploit this vulnerability...

Adobe ColdFusion远程拒绝服务漏洞(CVE-2013-3349)

BUGTRAQ ID: 61039 CVECAN ID: CVE-2013-3349 Adobe ColdFusion是一个动态Web服务器。 Adobe ColdFusion在实现上存在远程拒绝服务漏洞，攻击者可利用此漏洞使受影响应用崩溃。 0 Adobe ColdFusion 9.0.1 Adobe ColdFusion 9.0 厂商补丁： Adobe ----- Adobe已经为此发布了一个安全公告（apsb13-19）以及相应补丁: apsb13-19：Security update: Hotfixes available for ColdFusion...

CVE-2013-3349

Adobe ColdFusion 9.0–9.0.2 running on the JRun application server is affected by an unspecified remote DoS vulnerability (CVE-2013-3349). The issue, disclosed in APSB13-19, allows an attacker to cause the ColdFusion server to crash via unknown vectors. Remediation is to apply the hotfixes describ...

Fedora Update for ardour FEDORA-2010-15560

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2010-3349

Ardour 2.8.11 places a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

CVE-2010-3349

CVE-2010-3349 affects Ardour 2.8.11; it places a zero-length directory in LD_LIBRARY_PATH, enabling local users to gain privileges via a Trojan horse shared library in the current working directory. Root cause: manipulation of LD_LIBRARY_PATH by including a zero-length directory name. Impact: loc...

Fedora Update for ardour FEDORA-2010-15499

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for ardour FEDORA-2010-15510

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 14 : ardour-2.8.11-5.fc14 (2010-15560)

Fix CVE-2010-3349 - insecure library loading vulnerability Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora 13 : ardour-2.8.11-5.fc13 (2010-15510)

Fix CVE-2010-3349 - insecure library loading vulnerability Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

CVE-2009-3349

Datavore Gyro 5.0 is affected by a SQL injection vulnerability in the home component’s cat action, exploitable via the cid parameter. This allows remote attackers to execute arbitrary SQL commands. The NVD entry lists a CVSS v2 base score of 7.5 (HIGH) with network attack vector and no authentica...

Gentoo Security Advisory GLSA 200511-16 (GNUMP3d)

The remote host is missing updates announced in advisory GLSA 200511-16. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200511-16 (GNUMP3d)

The remote host is missing updates announced in advisory GLSA 200511-16. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-3349

CVE-2008-3349 concerns multiple unspecified vulnerabilities in NetApp Data ONTAP (used on NetApp and IBM eServer platforms) that allow remote attackers to execute arbitrary commands, cause a denial of service (system crash), or obtain sensitive information, probably due to insufficient access con...

Debian Security Advisory DSA 901-1 (gnump3d)

The remote host is missing an update to gnump3d announced via advisory DSA 901-1. Several vulnerabilities have been discovered in gnump3d, a streaming server for MP3 and OGG files. The Common Vulnerabilities and Exposures Project identifies the following problems: CVE-2005-3349 Ludwig Nussel...