CVE-2020-3433

creationtimestamp| type| source ---|---|--- 2020-09-29 18:51:17+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/anyconnectlpe.rb 2023-06-14 21:10:04+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-04 02:22:59+00:00| seen|...

RHEL 7 : bind (RHSA-2020:3433)

"The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3433 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named C...

RHEL 8 : go-toolset:rhel8 (RHSA-2019:3433)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3433 advisory. Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fixes: golang: malformed hosts in...

Oracle Business Intelligence Publisher Multiple Vulnerabilities (Jul 2016 CPU)

The version of Oracle Business Intelligence Publisher running on the remote host is 11.1.1.7.x prior to 11.1.1.7.160719, 11.1.1.9.x prior to 11.1.1.9.160719, or 12.2.1.0.x prior to 12.2.1.0.160719. It is, therefore, affected by multiple vulnerabilities as noted in the July 2016 Critical Patch...

Synology Photo Station Multiple Vulnerabilities (SA_17_35)

Synology Photo Station is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Ubuntu 14.04 LTS / 16.04 LTS : poppler vulnerabilities (USN-3433-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3433-1 advisory. It was discovered that Poppler incorrectly handled certain files. If a user or automated system were tricked into opening a crafted PDF file,...

Synology Photo Station SQL Injection Vulnerability

Synology Photo Station is a Synology solution for sharing pictures, videos and blogs over the Internet. A SQL injection vulnerability exists in Synology Photo Station versions prior to 6.7.4-3433 and prior to 6.3-2968. A remote attacker can execute arbitrary SQL commands by sending the 'articleid...

Synology Photo Station Directory Traversal Vulnerability (CNVD-2017-27711)

Synology Photo Station is a Synology solution for sharing pictures, videos and blogs over the Internet. A directory traversal vulnerability exists in Synology Photo Station versions prior to 6.7.4-3433 and synphotoio versions prior to 6.3-2968. A remote attacker can exploit the vulnerability to...

CVE-2006-3433

...

CVE-2006-3433

CVE-2006-3433 is rejected/not used; this candidate does not represent an active vulnerability entry.

CVE-2017-3433

CVE-2017-3433 concerns the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Affected are multiple releases: 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, and 12.2.6. The vulnerability allows an unauthenticated attacker with network access via HT...

CVE-2016-3433

CVE-2016-3433 affects Oracle Fusion Middleware’s Oracle Business Intelligence Enterprise Edition component, specifically versions 11.1.1.7.0 and 11.1.1.9.0. The vulnerability is described as unspecified and enables remote authenticated users to impact confidentiality and integrity via Analytics W...

Debian: Security Advisory (DSA-3433-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OracleVM 3.2 : xen (OVMSA-2015-0068) (POODLE) (Venom)

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2015-0068 for details. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory...

CVE-2014-3433

Cross-site scripting XSS vulnerability in the management console in Symantec Data Insight 3.x and 4.x before 4.5 allows remote attackers to inject arbitrary web script or HTML via an unspecified form field, related to an "HTML script injection" issue...

CVE-2014-3433

CVE-2014-3433 affects the Symantec Data Insight management console (3.x and 4.x up to 4.5). The vulnerability is a cross-site scripting (XSS) flaw caused by insufficient sanitization of user-supplied input in the management GUI, allowing an attacker to inject arbitrary script or HTML via an unspe...

Symantec Data Insight Management Console HTML Injection and Cross-Site Scripting

SUMMARY The management console for Symantec Data Insight does not sufficiently validate/sanitize arbitrary input in two separate fields within the management GUI. This could potentially allow unauthorized command execution or potential malicious redirection. AFFECTED PRODUCTS Product | Version |...

openSUSE Security Update : Xen (openSUSE-SU-2012:1172-1)

Security Update for Xen Following bug and security fixes were applied : - bnc776995 - attaching scsi control luns with pvscsi - xend/pvscsi: fix passing of SCSI control LUNs xen-bug776995-pvscsi-no-devname.patch - xend/pvscsi: fix usage of persistant device names for SCSI devices...

openSUSE Security Update : postgresql (openSUSE-SU-2010:0903-1)

PostgreSQL functions implemented in Perl or TCL shared a global state even across different user user ids. A user could therefore influence functions of other users in an unexpected or even malicious way CVE-2010-3433. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Oracle Linux 5 / 6 : postgresql (ELSA-2011-0197)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0197 advisory. - Update to PostgreSQL 8.4.7, for various fixes described at http://www.postgresql.org/docs/8.4/static/release-8-4-7.html...