52 matches found
RHEL 7 : kernel (RHSA-2021:3399)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:3399 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Use after free via PI futex...
Important: Red Hat Security Advisory: kernel security and bug fix update
An update for kernel is now available for Red Hat Enterprise Linux 7.2 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
CVE-2020-3399
CVE-2020-3399 describes a DoS in Cisco IOS XE CAPWAP processing for Catalyst 9800 wireless controllers due to insufficient input validation during CAPWAP packet handling, causing a buffer over-read that can crash and reload the device. The vulnerable component is CAPWAP packet processing in Cisco...
Atlassian JIRA Multiple Vulnerabilities (JRASERVER-69245) (JRASERVER-69246)
According to its self-reported version number, the instance of Atlassian JIRA hosted on the remote web server is prior to 7.13.2 or 8.0.x prior to 8.0.2. It is, therefore, affected by multiple vulnerabilities: - An information disclosure vulnerability exists in Jira's BrowserProjects.jspa...
CVE-2019-3399
Summary of CVE-2019-3399 (Jira information disclosure) : The vulnerability exists in Atlassian Jira’s BrowseProjects.jspa component. Affected versions are Jira before 7.13.2 and 8.0.0 before 8.0.2. The issue allows remote attackers to view information for archived projects due to a missing author...
CVE-2019-3399
The BrowseProjects.jspa resource in Jira before version 7.13.2, and from version 8.0.0 before version 8.0.2 allows remote attackers to see information for archived projects through a missing authorisation check...
Information disclosure in the BrowseProjects.jspa resource - CVE-2019-3399
The BrowseProjects.jspa resource in Jira before version 7.13.2, and from version 8.0.0 before version 8.0.2 allows remote attackers to see information for archived projects through a missing authorisation check...
Information disclosure in the BrowseProjects.jspa resource - CVE-2019-3399
The BrowseProjects.jspa resource in Jira before version 7.13.2, and from version 8.0.0 before version 8.0.2 allows remote attackers to see information for archived projects through a missing authorisation check...
Ubuntu: Security Advisory (USN-3399-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 14.04 LTS / 16.04 LTS : cvs vulnerability (USN-3399-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-3399-1 advisory. Hank Leininger discovered that cvs did not properly handle SSH for remote repositories. A remote attacker could use this to construct a cvs repository...
CVE-2011-3399
CVE-2011-3399 entry is rejected/not used and does not represent an active vulnerability entry.
CVE-2017-3399
CVE-2017-3399 affects Oracle E-Business Suite’s Oracle Advanced Outbound Telephony (UIs) across versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6. The vulnerability allows an unauthenticated, network-accessible attacker to compromise the component via HTTP; successful attacks requir...
Debian DSA-3399-1 : libpng - security update
Several vulnerabilities have been discovered in the libpng PNG library. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2015-7981 Qixue Xiao discovered an out-of-bounds read vulnerability in the pngconverttorfc1123 function. A remote attacker can...
Debian Security Advisory DSA 3399-1 (libpng - security update)
Several vulnerabilities have been discovered in the libpng PNG library. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2015-7981 Qixue Xiao discovered an out-of-bounds read vulnerability in the pngconverttorfc1123 function. A remote attacker can potentiall...
Debian: Security Advisory (DSA-3399-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2014-3399
Cisco ASA Software SSL VPN contains CVE-2014-3399: improper validation of session information during SharePoint handler creation allows an authenticated, remote attacker to overwrite RAMFS cache files or inject Lua scripts, causing a DoS (portal outage or system reload). Affected releases include...
CVE-2013-3399
Buffer overflow in an unspecified Android API on the Cisco Desktop Collaboration Experience DX650 allows attackers to execute arbitrary code via vectors that leverage incorrect memory allocation, aka Bug IDs CSCuf93957, CSCug22352, and CSCug22462...
CVE-2013-3399
CVE-2013-3399 affects Cisco Desktop Collaboration Experience DX600/DX650 endpoints via a buffer overflow in an underlying Android API. The flaw arises from insufficient validation of values used to allocate a buffer, enabling an authenticated, local attacker to overflow memory and execute arbitra...