Ubuntu: Security Advisory (USN-3360-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-38577

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage...

CVE-2020-3360

Cisco IP Phones Series 7800 and Series 8800 are affected by CVE-2020-3360 due to improper access controls in the Web Access management interface. An unauthenticated, remote attacker can send crafted requests to bypass restrictions and view sensitive information, including device call logs contain...

CVE-2017-3360

CVE-2017-3360 affects Oracle E-Business Suite — Oracle Customer Intelligence UI (versions 12.1.1/12.1.2/12.1.3). An unauthenticated attacker with network access via HTTP can compromise Oracle Customer Intelligence, with attacks requiring user interaction and potentially granting unauthorized acce...

CVE-2016-3360

CVE-2016-3360 affects multiple Microsoft Office components, notably PowerPoint and related Office apps. The vulnerability is a memory corruption issue in which a crafted document can cause remote code execution on the affected host. Affected products include PowerPoint 2007 SP3, 2010 SP2, 2013 SP...

CVE-2016-3360

Microsoft PowerPoint 2007 SP3, PowerPoint 2010 SP2, PowerPoint 2013 SP1, PowerPoint 2013 RT SP1, PowerPoint 2016 for Mac, Office Compatibility Pack SP3, PowerPoint Viewer, SharePoint Server 2013 SP1, Office Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1 allow remote attackers to execute...

MS16-107: Security Update for Microsoft Office (3185852)

The Microsoft Office application installed on the remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists in the the Click-to-Run C2R components due to improper handling of objects in memory. An...

Microsoft Office PowerPoint Viewer Remote Code Execution Vulnerability (3185852)

This host is missing a critical security update according to Microsoft Bulletin MS16-107. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Office Memory Corruption (MS16-107: CVE-2016-3360)

A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office improperly handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted...

Debian DSA-3360-1 : icu - security update

It was discovered that the International Components for Unicode ICU library mishandles converter names starting with x-, which allows remote attackers to cause a denial of service read of uninitialized memory or possibly have unspecified other impact via a crafted file. %NASLMINLEVEL 70300 C...

Debian Security Advisory DSA 3360-1 (icu - security update)

It was discovered that the International Components for Unicode ICU library mishandles converter names starting with x- , which allows remote attackers to cause a denial of service read of uninitialized memory or possibly have unspecified other impact via a crafted file. OpenVAS Vulnerability Tes...

CVE-2015-3360

Cross-site scripting XSS vulnerability in the Term Merge module before 7.x-1.2 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-3360

CVE-2015-3360 describes a Cross-Site Scripting (XSS) vulnerability in the Drupal contributed Term Merge module for 7.x-1.x prior to 7.x-1.2. The issue arises because user input is not sufficiently filtered under certain conditions, allowing remote authenticated users to inject arbitrary web scrip...

SA-CONTRIB-2015-015 - Term Merge - Cross Site Scripting (XSS)

This module enables you to merge synonymous taxonomy terms among themselves. The module doesn't sufficiently filter user input under certain conditions, thereby opening a Cross Site Scripting XSS vulnerability. This vulnerability is mitigated by the fact that an attacker must be able to create...

Adobe Shockwave Player <= 12.0.3.133 Memory Corruption Vulnerabilities (APSB13-23) (Mac OS X)

The remote Mac OS X host contains a version of Adobe Shockwave Player that is equal to or prior than 12.0.3.133. It is, therefore, affected by two memory corruption vulnerabilities. A remote attacker can exploit these issues by tricking a user into viewing a malicious Shockwave file, resulting in...

CVE-2014-3360

CVE-2014-3360 is a vulnerability in the SIP handling of Cisco IOS Software and Cisco IOS XE Software that could allow an unauthenticated, remote attacker to force a reload of an affected device by sending specially crafted SIP messages. Affected releases include Cisco IOS 12.4 and 15.0–15.4 and I...

Wireshark console.lua pre-loading vulnerability

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

openSUSE Security Update : wireshark (openSUSE-SU-2011:1142-1)

This update of wireshark fixes the following vulnerabilities : - CVE-2011-3266: Wireshark IKE dissector vulnerability - CVE-2011-3360: Wireshark Lua script execution vulnerability - CVE-2011-3483: Wireshark buffer exception handling vulnerability - CVE-2011-2597: Lucent/Ascend file parser...

openSUSE Security Update : wireshark (openSUSE-SU-2011:1142-1)

This update of wireshark fixes the following vulnerabilities : - CVE-2011-3266: Wireshark IKE dissector vulnerability - CVE-2011-3360: Wireshark Lua script execution vulnerability - CVE-2011-3483: Wireshark buffer exception handling vulnerability - CVE-2011-2597: Lucent/Ascend file parser...

Adobe Shockwave Player Multiple Vulnerabilities-01 (Sep 2013) - Mac OS X

Adobe Shockwave Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...