64 matches found
CVE-2022-3394
Summary: CVE-2022-3394 affects the WP All Export Pro WordPress plugin. The vulnerability exists in versions before 1.7.9 and stems from insufficient access control during exports, where non-admin users with export privileges can trigger arbitrary code execution on the site. The issue is triggered...
openSUSE: Security Advisory for permissions (SUSE-SU-2022:3394-1)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
SUSE: Security Advisory (SUSE-SU-2019:3394-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-3394
CVE-2021-3394 affects Millennium Millewin (Cartella clinica) versions 13.39.028, 13.39.28.3342 and 13.39.146.1. The issue is caused by insecure folder permissions, enabling a local attacker to escalate privileges, with the related risk class corroborated by unquoted service path conditions noted ...
CVE-2021-3394
creationtimestamp| type| source ---|---|--- 2021-02-08 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/49530 2021-02-09 18:40:35+00:00| seen| https://t.me/cibsecurity/23303...
Millewin 13.39.146.1 - Local Privilege Escalation
Exploit Title: Millewin 13.39.146.1 - Local Privilege Escalation Date: 2021-02-07 Author: Andrea Intilangelo Vendor Homepage: https://www.millewin.it Software Homepage: https://www.millewin.it/index.php/prodotti/millewin Software Link:...
Mail.ru: Path traversal lead to LFR via [CVE-2019-3394]
Path traversal lead to Local File Read via CVE-2019-3403 in confluence.plazius.ru...
Cisco Nexus 3000 and 9000 Series Switches Privilege Escalation (cisco-sa-n3n9k-priv-escal-3QhXJBC)
According to its self-reported version, Cisco NX-OS Software is affected by a vulnerability in the Enable Secret feature due to a logic error in the implementation of the enable command. An authenticated, local attacker can exploit this, by logging in to the device and issuing the enable command,...
CVE-2020-3394
CVE-2020-3394 affects Cisco Nexus 3000/9000 Series NX-OS in standalone NX-OS mode. A logic error in the Enable Secret/enable command allows an authenticated, local attacker with valid credentials to gain full administrative privileges by issuing the enable command, bypassing the password. The vul...
Confluence Server Local File Disclosure
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 This email refers to the advisory found at https://confluence.atlassian.com/x/uAsvOg . CVE ID: CVE-2019-3394. Product: Confluence Server. Affected Confluence Server product versions: 6.1.0 = 6.1.0 but less than 6.6.16 or who have downloaded and...
CVE-2019-3394
There was a local file disclosure vulnerability in Confluence Server and Confluence Data Center via page exporting. An attacker with permission to editing a page is able to exploit this issue to read arbitrary file on the server under /confluence/WEB-INF directory, which may contain configuration...
CVE-2019-3394
CVE-2019-3394 affects Atlassian Confluence Server/Data Center: a local file disclosure in the page export feature allows an authenticated attacker with page-edit permission to read arbitrary files under the Confluence install directory (notably /confluence/WEB-INF). Impact could include leakage o...
Local File Disclosure via Word Export in Confluence Server - CVE-2019-3394
Confluence Server and Data Center had a local file disclosure vulnerability in the page export function. A remote attacker who has Add Page space permission would be able to read arbitrary files in the /confluence/WEB-INF/ directory and it's subdirectories, which may contain configuration files...
Local File Disclosure via Word Export in Confluence Server - CVE-2019-3394
Confluence Server and Data Center had a local file disclosure vulnerability in the page export function. A remote attacker who has Add Page space permission would be able to read arbitrary files in the /confluence/WEB-INF/ directory and it's subdirectories, which may contain configuration files...
Ubuntu 16.04 LTS : libmspack vulnerabilities (USN-3394-1)
The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3394-1 advisory. It was discovered that libmspack incorrectly handled certain malformed CHM files. A remote attacker could use this issue to cause libmspack to crash,...
CVE-2016-3394
CVE-2016-3394 is rejected/not used and does not represent an active vulnerability entry.
CVE-2009-3394
CVE-2009-3394 is rejected/not used and does not represent an active vulnerability entry.
CVE-2017-3394
CVE-2017-3394 concerns Oracle E-Business Suite’s Oracle Advanced Outbound Telephony (subcomponent: User Interface). Affected supported versions are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. The vulnerability is exploitable by an unauthenticated attacker with network access via HT...