233 matches found
Google Chrome Security Update (stable-channel-update-for-desktop_11-2022-10) - Linux
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...
FreeBSD : chromium -- mulitple vulnerabilities (7cb12ee0-4a13-11ed-8ad9-3065ec8fd3ec)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 7cb12ee0-4a13-11ed-8ad9-3065ec8fd3ec advisory. - Use after free in Skia. CVE-2022-3445 - Heap buffer overflow in WebSQL. CVE-2022-3446 -...
KLA20007 Multiple vulnerabilities in Google Chrome
Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Heap buffer overflow vulnerability in WebSQL can be exploited to cause denial of service. 2...
SUSE: Security Advisory (SUSE-SU-2021:3446-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
RHEL 8 : kernel (RHSA-2021:3446)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:3446 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: out-of-bounds write due to a...
CVE-2010-3446
CVE-2010-3446 is rejected and not a security issue; not an active vulnerability entry.
CVE-2021-3446
CVE-2021-3446 affects libtpms prior to 0.8.2, where the OpenSSL integration erroneously returns the initial IV instead of the last IV for certain symmetric ciphers, weakening confidentiality. Affected packages have been addressed in downstream advisories (e.g., Mageia MGASA-2021-0590; OSV entries...
CVE-2020-3446
CVE-2020-3446 affects Cisco vWAAS on ENCS 5400-W and CSP 5000-W with NFVIS-bundled images. An unauthenticated attacker can log into the NFVIS CLI using default, static passwords, potentially gaining administrator privileges. Exploitation requires access to the NFVIS CLI (or CIMC) on the affected ...
Oracle Business Intelligence Publisher Multiple Vulnerabilities (Jul 2016 CPU)
The version of Oracle Business Intelligence Publisher running on the remote host is 11.1.1.7.x prior to 11.1.1.7.160719, 11.1.1.9.x prior to 11.1.1.9.160719, or 12.2.1.0.x prior to 12.2.1.0.160719. It is, therefore, affected by multiple vulnerabilities as noted in the July 2016 Critical Patch...
CVE-2017-3446
CVE-2017-3446 affects Oracle E-Business Suite Trade Management (User Interface). Concretely, vulnerable are Oracle E-Business Suite versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6; reported CVSSv3 base 8.2 (Network, User Interaction Required, Confidentiality/Integrity impacts)....
Ubuntu 14.04 LTS : OpenStack Glance vulnerabilities (USN-3446-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3446-1 advisory. Hemanth Makkapati discovered that OpenStack Glance incorrectly handled access restrictions. A remote authenticated user could use this issue to change th...
CVE-2006-3446
This CVE entry is rejected/not used and does not represent an active vulnerability entry.
CVE-2016-3446
Technical summary (supported): CVE-2016-3446 affects Oracle BI Enterprise Edition within Oracle Fusion Middleware 11.1.1.7.0 and 11.1.1.9.0, via Analytics Web Administration, allowing remote attackers to impact confidentiality, integrity, and availability. The connected Nessus entry for Oracle BI...
Debian: Security Advisory (DSA-3446-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-3446
Affected software/component: AlienVault Unified Security Management (USM) — Framework Daemon. Vulnerability: remote attackers can execute arbitrary Python code by sending a crafted plugin configuration file (.cfg). Root cause/impact: the flaw allows code execution with root privileges and does no...
CVE-2014-3446
CVE-2014-3446 describes an unauthenticated SQL injection in BSS Continuity CMS 4.2.22640.0, specifically in wcm/system/pages/admin/getnode.aspx via the nodeid parameter. The vulnerability arises from lack of input sanitization when constructing an SQL query to retrieve node information, allowing ...
BSS Continuity CMS 4.2.22640.0 SQL Injection
Vulnerability title: Unauthenticated Blind SQL Injection in BSS Continuity CMS CVE: CVE-2014-3446 Vendor: BSS Product: Continuity CMS Affected version: 4.2.22640.0 Fixed version: N/A Reported by: Jerzy Kramarz Details: he following URL and parameters have been confirmed to suffer from Blind SQL...
Fedora Update for ReviewBoard FEDORA-2014-3446
Check for the Version of ReviewBoard OpenVAS Vulnerability Test Fedora Update for ReviewBoard FEDORA-2014-3446 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...