CVE-2019-3402

creationtimestamp| type| source ---|---|--- 2019-05-22 18:48:14+00:00| seen| https://t.me/cvemitreorg/138 2024-03-18 07:23:33+00:00| published-proof-of-concept| https://t.me/lostsec/164 2024-10-09 19:49:41+00:00| seen| https://t.me/CyberSecurityTechnologies/2581 2025-04-13 12:04:46+00:00| seen|...

CVE-2019-3402

The ConfigurePortalPages.jspa resource in Jira before version 7.13.3 and from version 8.0.0 before version 8.1.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the searchOwnerUserName parameter...

CVE-2019-3402

Summary: Jira before 7.13.3 and from 8.0.0 before 8.1.1 is affected by a cross-site scripting (XSS) vulnerability in the ConfigurePortalPages.jspa resource, exploitable via the searchOwnerUserName parameter. The issue allows an unauthenticated remote attacker to inject arbitrary HTML/JavaScript i...

XSS in the ConfigurePortalPages.jspa resource - CVE-2019-3402

The ConfigurePortalPages.jspa resource in Jira before version 7.13.3 and from version 8.0.0 before version 8.1.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the searchOwnerUserName parameter...

Ubuntu: Security Advisory (USN-3402-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-3402

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/post/windows/gather/forensics/duqucheck.rb 2020-10-09 16:54:04+00:00| seen| MISP/a55437f3-0cf7-44ca-9fdd-edefb18b7111 2025-02-06 03:13:40+00:00| seen|...

Oracle Linux 7 : postgresql (ELSA-2017-3402)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3402 advisory. 9.2.23-3 - setup: keep PGSETUP variables after switching to not-privileged user 9.2.23-2 - fix CVE-2017-12172 Tenable has extracted the preceding...

postgresql security update

CentOS Errata and Security Advisory CESA-2017:3402 An update for postgresql is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...

RedHat Update for postgresql RHSA-2017:3402-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 LTS : PySAML2 vulnerability (USN-3402-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3402-1 advisory. It was discovered that PySAML2 incorrectly handled certain SAML XML requests and responses. A remote attacker could use this issue to read arbitrary files. Tenabl...

CVE-2017-3402

CVE-2017-3402 : Vulnerability in Oracle E-Business Suite’s Oracle Advanced Outbound Telephony component (subcomponent: User Interface). Affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, and 12.2.6. An unauthenticated attacker with network access via HTTP can compromise Oracle Advanced ...

CVE-2016-3402

CVE-2016-3402 concerns Zimbra Collaboration Suite prior to 8.7.0. OpenVAS notes multiple vulnerabilities in Zimbra

Debian DSA-3402-1 : symfony - security update

Several vulnerabilities have been discovered in symfony, a framework to create websites and web applications. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2015-8124 The RedTeam Pentesting GmbH team discovered a session fixation vulnerability within th...

Debian: Security Advisory (DSA-3402-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2012-1181)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-3402

CVE-2014-3402 affects Cisco IPS/IDS web framework: authentication-manager mismanages user tokens, enabling an authenticated remote attacker to trigger a DoS (MainApp hang) via a crafted request to the management interface. Valid for IPS 7.0(8)E4 and earlier. Exploitation requires existing authent...

CVE-2013-3402

CVE-2013-3402 affects Cisco Unified Communications Manager (CUCM) 7.1.x through 9.1(2). The root cause is improper validation in an unspecified function that allows a remote, authenticated attacker to execute arbitrary commands via unknown vectors, effectively a command-injection bug (Bug ID CSCu...

Oracle Linux 5 : gimp (ELSA-2012-1181)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1181 advisory. - fix overflow in GIF loader CVE-2012-3481 - fix overflows in PSD plugin CVE-2009-3909, CVE-2012-3402 - fix heap corruption and overflow in GIF plug-in...

GLSA-201209-23 : GIMP: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201209-23 GIMP: Multiple vulnerabilities Multiple vulnerabilities have been discovered in GIMP. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly execute arbitrary code with...

CVE-2012-3402

Summary (from connected docs): CVE-2012-3402 affects the GIMP PSD plugin (psd-load.c) used by GIMP, where an integer overflow in reading PSD channel data can trigger a heap-based buffer overflow. This is a remote vulnerability that can cause a denial of service and may allow arbitrary code execut...