Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers Multicast DNS DoS (cisco-sa-mdns-dos-3tH6cA9J)

A denial of service DoS vulnerability exists in Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers due to improper validation of mDNS packets. An unauthenticated, remote attacker can exploit this issue, via a crafted mDNS packet to an affected device, to cause the device to...

CVE-2020-3359

CVE-2020-3359 affects Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers. The issue stems from improper validation in the multicast DNS (mDNS) feature, allowing an unauthenticated remote attacker to cause a DoS by sending a crafted mDNS packet, potentially causing the devic...

CVE-2010-3359

If LDLIBRARYPATH is undefined in gargoyle-free before 2009-08-25, the variable will point to the current directory. This can allow a local user to trick another user into running gargoyle in a directory with a cracked libgarglk.so and gain access to the user's account...

CVE-2010-3359

CVE-2010-3359 affects gargoyle-free prior to 2009-08-25: if LD_LIBRARY_PATH is undefined, it may point to the current directory, allowing a local user to trick another user into executing gargoyle in a directory containing a cracked libgarglk.so and gain access to the user's account. The connecte...

CVE-2010-3359

If LDLIBRARYPATH is undefined in gargoyle-free before 2009-08-25, the variable will point to the current directory. This can allow a local user to trick another user into running gargoyle in a directory with a cracked libgarglk.so and gain access to the user's account...

CVE-2017-3359

CVE-2017-3359 affects Oracle E-Business Suite’s Oracle Customer Intelligence (User Interface), specifically versions 12.1.1–12.1.3. The vulnerability allows network-access, unauthenticated or semi-authenticated access via HTTP to compromise Oracle Customer Intelligence; attacks may leverage user ...

CVE-2016-3359

CVE-2016-3359 affects Microsoft Office components (Excel 2007 SP3, Excel 2010 SP2, Office Compatibility Pack SP3, Excel Viewer). The issue is a memory corruption vulnerability in Office that allows remote code execution via a crafted document. The CVE entry’s linked sources (NVD/NVD-variant and r...

Microsoft Windows Excel Viewer Remote Code Execution Vulnerabilities (3185852)

This host is missing a critical security update according to Microsoft Bulletin MS16-107. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS16-107: Security Update for Microsoft Office (3185852)

The Microsoft Office application installed on the remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists in the the Click-to-Run C2R components due to improper handling of objects in memory. An...

Microsoft Office Memory Corruption (MS16-107: CVE-2016-3359)

A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted...

SRC-2016-0040 : Microsoft Office Excel Binary Worksheet Use-After-Free Remote Code Execution Vulnerability

Vulnerability Details: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

Debian DSA-3359-1 : virtualbox - security update

This update fixes an unspecified security issue in VirtualBox related to guests using bridged networking via WiFi. Oracle no longer provides information on specific security vulnerabilities in VirtualBox. To still support users of the already released Debian releases we've decided to update these...

CVE-2015-3359

Summary: CVE-2015-3359 concerns multiple XSS vulnerabilities in the Drupal Room Reservations module (7.x-1.x) prior to 7.x-1.1. Affected component: Room Reservations module for Drupal 7.x. Root cause: module fails to sufficiently sanitize input in the node title of Room Reservations Category and ...

CVE-2015-3359

Multiple cross-site scripting XSS vulnerabilities in the Room Reservations module before 7.x-1.1 for Drupal allow remote authenticated users with the "Administer the room reservations system" permission to inject arbitrary web script or HTML via the 1 node title of a "Room Reservations Category" ...

SA-CONTRIB-2015-017 - Room Reservations - Cross Site Scripting (XSS)

Room Reservations module enables you to manage a room reservation system. The module doesn't sufficiently sanitize the node title of "Room Reservations Category" nodes and the body of "Room Reservations Room" nodes, thereby leading to a Cross Site Scripting XSS vulnerability. This vulnerability i...

Adobe Shockwave Player <= 12.0.3.133 Memory Corruption Vulnerabilities (APSB13-23) (Mac OS X)

The remote Mac OS X host contains a version of Adobe Shockwave Player that is equal to or prior than 12.0.3.133. It is, therefore, affected by two memory corruption vulnerabilities. A remote attacker can exploit these issues by tricking a user into viewing a malicious Shockwave file, resulting in...

CVE-2014-3359

CVE-2014-3359 describes a memory leak in Cisco IOS/IOS XE DHCPv6 server when handling malformed DHCPv6 packets, leading to denial of service (memory consumption or device reload). Affected Cisco IOS versions include 15.1–15.4 and IOS XE 3.4.xS, 3.5.xS, 3.6.xS, 3.7.xS before 3.7.6S; 3.8.xS, 3.9.xS...

RHEL 6 : kernel-rt (RHSA-2012:0010)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0010 advisory. The kernel-rt packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: A...

Design/Logic Flaw

Luci in Red Hat Conga does not properly enforce the user session timeout, which might allow attackers to gain access to the session by reading the ac session cookie. NOTE: this issue has been SPLIT due to different vulnerability types. Use CVE-2012-3359 for the base64-encoded storage of the user...

CVE-2012-3359

CVE-2012-3359 concerns Luci in Red Hat Conga storing the user’s username and password in a Base64-encoded string in the __ac session cookie. This encoding is not secure, and access to the cookie can allow an attacker to gain privileges. The issue is explicitly split from CVE-2013-7347, which cove...