SUSE: Security Advisory (SUSE-SU-2020:3351-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cisco SD-WAN Solution Software DoS (cisco-sa-sdw-dos-KWOdyHnB)

A denial of service DoS vulnerability exists in Cisco SD-WAN Solution Software due to improper validation of fields in Cisco SD-WAN peering messages that are encapsulated in UDP packets. An unauthenticated, remote attacker can exploit this issue, by sending crafted UDP messages to the targeted...

CVE-2020-3351

CVE-2020-3351 is a denial-of-service vulnerability in Cisco SD-WAN Solution Software caused by improper validation of fields in Cisco SD-WAN peering messages encapsulated in UDP packets. An unauthenticated, remote attacker can send crafted UDP messages to trigger a DoS affecting the targeted devi...

CVE-2012-3351

CVE-2012-3351 affects LongTail Video JW Player up to and including 5.10.2295 (and older 5.9.x in some advisories). The vulnerability is a set of XSS flaws in parameters (link, logo.link, aboutlink) or nested URI schemes (javascript, asfunction, vbscript) that could be exploited when a user clicks...

CVE-2011-3351

creationtimestamp| type| source ---|---|--- 2019-11-26 00:32:35+00:00| seen| https://t.me/cibsecurity/8306 2024-02-27 17:21:19+00:00| seen| https://t.me/ctinow/194631...

CVE-2011-3351

CVE-2011-3351 affects OpenVAS Scanner. OpenVAS-Scanner before 2011-09-11 creates a temporary file insecurely while generating the OVAL system characteristics document using the ovaldi tool, enabling a local attacker to perform symlink attacks and overwrite arbitrary files. The linked OpenVAS entr...

Ubuntu 14.04 LTS / 16.04 LTS : Evince vulnerability (USN-3351-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3351-1 advisory. Felix Wilhelm discovered that Evince did not safely invoke tar when handling tar comic book cbt files. An attacker could use this to construct a...

CVE-2017-3351

Vulnerability in the Oracle Marketing component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTT...

CVE-2017-3351

CVE-2017-3351 affects Oracle E-Business Suite’s Oracle Marketing (UI) component. Affected versions: 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6. An unauthenticated attacker with network access via HTTP can compromise Oracle Marketing; attacks may require human interaction and can lead ...

CVE-2017-3351

Vulnerability in the Oracle Marketing component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTT...

CVE-2016-3351

creationtimestamp| type| source ---|---|--- 2016-09-14 16:34:32+00:00| exploited| https://t.me/itsecalert/38 2016-09-15 14:32:32+00:00| exploited| https://t.me/xakepru/913 2016-09-16 11:59:44+00:00| seen| MISP/57dbde53-bfe8-4aaa-99b9-03ffbce2ab96 2023-03-09 09:29:35+00:00| seen|...

Microsoft Fixes 47 Vulnerabilities with September Patch Tuesday

Microsoft patched 47 vulnerabilities as part of 14 security bulletins, seven critical, with its monthly Patch Tuesday updates today. The company is warning users that if left unpatched, 10 of the issues can lead to remote execution. The updates resolve issues in Microsoft Windows, Office, Office...

Microsoft Browser Information Disclosure (MS16-104: CVE-2016-3351)

An information disclosure vulnerability has been reported in Microsoft Internet Explorer and EDGE browsers. The vulnerability is due to improperly handling requests for module resources. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page with an...

KLA11907 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, cause denial of service, obtain sensitive information, bypass security restrictions. Below is a complete list of...

MS16-105: Cumulative Security Update for Microsoft Edge (3183043)

The version of Microsoft Edge installed on the remote Windows host is missing Cumulative Security Update 3183043. It is, therefore, affected by multiple vulnerabilities, the majority of which are remote code execution vulnerabilities. An unauthenticated, remote attacker can exploit these...

Debian DSA-3351-1 : chromium-browser - security update

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2015-1291 A cross-origin bypass issue was discovered in DOM. - CVE-2015-1292 Mariusz Mlynski discovered a cross-origin bypass issue in ServiceWorker. - CVE-2015-1293 Mariusz Mlynski discovered a cross-origin bypass...

Debian: Security Advisory (DSA-3351-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-3351

Multiple cross-site request forgery CSRF vulnerabilities in the Log Watcher module before 6.x-1.2 for Drupal allow remote attackers to hijack the authentication of administrators for requests that 1 enable, 2 disable, or 3 delete a report via unspecified vectors...

CVE-2015-3351

CVE-2015-3351 affects the Drupal Log Watcher module (6.x-1.x) before 6.x-1.2. The issue is a CSRF vulnerability in the report administration links that can allow an attacker to trigger actions (enable, disable, or delete a report) on behalf of an authenticated administrator, effectively hijacking...

CVE-2014-3351

Cisco Intelligent Automation for Cloud (Cisco Cloud Portal) is affected by CVE-2014-3351 due to a failure to properly validate NULL sessions. An unauthenticated, remote attacker could send crafted packets to an affected device and view sensitive information, per Cisco’s advisory (Bug IDs CSCuh873...