CVE-2016-3352

Microsoft Windows 8.1, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 do not properly check NTLM SSO requests for MSA logins, which makes it easier for remote attackers to determine passwords via a brute-force attack on NTLM password hashes, aka "Microsoft Information Disclosure Vulnerabilit...

CVE-2016-3352

Summary: CVE-2016-3352 describes an information-disclosure vulnerability in Windows NTLM SSO validation for Microsoft Account (MSA) logins. Details across connected docs show that Windows clients (Windows 8.1, Windows RT 8.1, Windows 10 variants 1511/1607, and related builds) do not properly vali...

Microsoft Windows CVE-2016-3352 Information Disclosure Vulnerability

Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to gain access to potentially sensitive information that may aid in further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10...

MS16-110: Security Update for Microsoft Windows (3178467)

The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists due to a failure to properly enforce permissions when loading specially crafted DLLs. A local attacker can exploit this vulnerability to...

CVE-2016-2005

HPE Data Protector before 7.03108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers to execute arbitrary code via unspecified vectors, aka ZDI-CAN-3352...

CVE-2016-2005

HPE Data Protector before 7.03108, 8.x before 8.15, and 9.x before 9.06 allows remote attackers to execute arbitrary code via unspecified vectors, aka ZDI-CAN-3352...

Debian DSA-3352-1 : screen - security update

A vulnerability was found in screen causing a stack overflow which results in crashing the screen server process, resulting in denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisor...

[SECURITY] [DLA 305-1] screen security update

Package : screen Version : 4.0.3-14+deb6u1 CVE ID : CVE-2015-6806 Debian Bug :797624 A vulnerability was found in screen causing a stack overflow which results in crashing the screen server process, resulting in denial of service. See DSA-3352-1 for information on other Debian releases. We...

Debian Security Advisory DSA 3352-1 (screen - security update)

A vulnerability was found in screen causing a stack overflow which results in crashing the screen server process, resulting in denial of service. OpenVAS Vulnerability Test $Id: deb3352.nasl 6609 2017-07-07 12:05:59Z cfischer $ Auto-generated from advisory DSA 3352-1 using nvtgen 1.0 Script...

CVE-2015-3352

The Jammer module for Drupal is affected by CVE-2015-3352. A CSRF weakness in Jammer 6.x-1.x (before 6.x-1.8) and 7.x-1.x (before 7.x-1.4) lets an attacker cause an administrator to perform actions that delete settings for (1) hidden form elements or (2) status messages via the report administrat...

SA-CONTRIB-2015-012 - Jammer - Cross Site Request Forgery (CSRF)

This module enables you to hide or remove items from displaying including the node and comment preview buttons, node delete button, revision log textarea, workflow form on the workflow tab, and feed icon. The report administration links are not properly protected from CSRF. A malicious user could...

CVE-2014-3352

CVE-2014-3352 affects Cisco Intelligent Automation for Cloud (Cisco Cloud Portal) 2008.3_SP9 and earlier. The root cause is improper handling of certain NULL sessions, leading to an information disclosure via crafted packets (the so-called iFrame vulnerability, Bug CSCuh84801). An unauthenticated...

Adobe Reader Multiple Unspecified Vulnerabilities-01 (Sep 2013) - Windows

Adobe Reader is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2013-3352

Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2013-3354 and CVE-2013-3355...

Memory corruption

Adobe Reader and Acrobat before 10.1.8 and 11.x before 11.0.04 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2013-3352 and CVE-2013-3354...

CVE-2013-3352

CVE-2013-3354 affects Adobe Reader and Acrobat on Windows and Mac OS X. The vulnerability is a memory corruption issue (via unspecified vectors) that could allow arbitrary code execution or cause a denial of service. Impact is as described for the related family: affected products include those b...

Adobe Acrobat < 11.0.4 / 10.1.8 Multiple Vulnerabilities (APSB13-22)

The version of Adobe Acrobat installed on the remote host is earlier than 11.0.4 / 10.1.8. It is, therefore, affected by multiple vulnerabilities : - An unspecified stack overflow issue exists that could lead to code execution. CVE-2013-3351 - Unspecified memory corruption vulnerabilities exist...

Mac OS X 10.5.3 Update / Mac OS X Security Update 2008-003

The remote host is missing Mac OS X 10.5.3 Update / Mac OS X Security Update 2008-003. One or more of the following components are affected: AFP Server Apache AppKit Apple Pixlet Video ATS CFNetwork CoreFoundation CoreGraphics CoreTypes CUPS Flash Player Plug-in Help Viewer iCal International...

SLES9: Security update for Apache

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: apache-devel modssl apache For more information, please visit the referenced security advisories. More details may also be found by searching for keyword...

SLES9: Security update for Apache2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: apache2-worker apache2 apache2-prefork For more information, please visit the referenced security advisories. More details may also be found by searching for...