CVE-2023-3368

CVE-2023-3368 corresponds to an unauthenticated command injection in Chamilo LMS, exploited via the endpoint /main/webservices/additional_webservices.php. The public details state that Chamilo LMS

CVE-2023-3368 Chamilo LMS Unauthenticated Command Injection

Command injection in /main/webservices/additionalwebservices.php in Chamilo LMS = v1.11.20 allows unauthenticated attackers to obtain remote code execution via improper neutralisation of special characters. This is a bypass of CVE-2023-34960...

Debian: Security Advisory (DLA-3368-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE CVE-2010-3368

unknown...

Exploit for Incorrect Default Permissions in Avira Avira_Security

CVE-2022-3368 PoC for arbitrary file move vulnerability in So...

CVE-2022-3368

creationtimestamp| type| source ---|---|--- 2022-10-18 00:13:25+00:00| seen| https://t.me/cibsecurity/51633 2022-10-18 12:33:54+00:00| seen| https://t.me/proxybar/1078 2022-10-19 11:03:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/7007 2022-10-25 13:16:05+00:00|...

CVE-2022-3368

A vulnerability within the Software Updater functionality of Avira Security for Windows allowed an attacker with write access to the filesystem, to escalate his privileges in certain scenarios. The issue was fixed with Avira Security version 1.1.72.30556...

CVE-2022-3368 Software Updater of Avira Security for Windows vulnerable to Privilege Escalation

A vulnerability within the Software Updater functionality of Avira Security for Windows allowed an attacker with write access to the filesystem, to escalate his privileges in certain scenarios. The issue was fixed with Avira Security version 1.1.72.30556...

CVE-2022-3368

CVE-2022-3368 affects Avira Security for Windows, specifically the Software Updater component. A write-access path issue allows an attacker to escalate privileges in certain scenarios by abusing how downloaded files are stored during updates. The vulnerability was fixed in Avira Security version ...

SUSE SLES15 Security Update : kernel (Live Patch 14 for SLE 15 SP3) (SUSE-SU-2022:3368-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3368-1 advisory. This update for the Linux Kernel 5.3.18-1503005949 fixes several issues. The following security issues were fixed: - CVE-2022-39188: Fixed a ra...

Mageia: Security Advisory (MGASA-2017-0325)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2013:0830-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2013:0469-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2021-3368 · Microsoft · Paint 3D

Name of the Vulnerable Software and Affected Versions: Paint 3D affected versions not specified Description: The issue is related to an out-of-bounds buffer operation in memory when parsing GLB and STL files, which can be exploited by an attacker to execute arbitrary code using a specially crafte...

CVE-2020-3368

The CVE affects Cisco AsyncOS on the Cisco Email Security Appliance (ESA), where an input-validation weakness allows an unauthenticated, remote attacker to bypass URL reputation filters by crafting a URL. The root cause is insufficient URL input validation. Impact is bypass of URL filtering, enab...

GE EP-3368 RSTi-EP Analog Input Detection

Binary data 755528.prm...

RHEL 7 : qemu-kvm (RHSA-2017:3368)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:3368 advisory. Kernel-based Virtual Machine KVM is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm package provides th...

Oracle Linux 7 : qemu-kvm (ELSA-2017-3368)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3368 advisory. - Resolves: bz1501120 CVE-2017-14167 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image rhel-7.4.z Tenable has extracted the precedi...

CVE-2017-3368

CVE-2017-3368 affects Oracle E-Business Suite’s Oracle iStore (Address Book) across 12.1.1–12.2.6. An unauthenticated attacker with network access via HTTP can compromise iStore; successful exploits require user interaction. The vulnerability grants access to critical Oracle iStore data and may a...

U.S. Dept Of Defense: Out-of-date Version (Apache)

URL https://████████/ Identified Version 2.2.15 contains 4 important and 10 other vulnerabilities Latest Version 2.2.31 Vulnerability Database Result is based on 27.10.2016 vulnerability database content. Vulnerability Details Link identified you are using an out-of-date version of Apache. Impact...