82 matches found
SUSE: Security Advisory (SUSE-SU-2020:3473-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security Bulletin: Vulnerability identified in XCC affects IBM Cloud Pak System (CVE-2021-3473)
Summary Vulnerability identified in Lenovo XCC component bundled with IBM Cloud Pak System. Information about vulnerability has been published in a security advisiory. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions...
CVE-2021-3473
CVE-2021-3473 affects Lenovo XClarity Controller (XCC). An internal security audit found that during LXCA-assisted backup/restore, the XCC configuration backup/restore password may be written to an internal log buffer and briefly persist (typically
Lenovo XClarity Controller (XCC) Information Disclosure Vulnerability - Lenovo Support US
No description provided...
CVE-2020-3473
CVE-2020-3473 describes a privilege-escalation vulnerability in Cisco IOS XR Software where an authenticated, local CLI shell user can elevate privileges due to an incorrect mapping of a CLI command to task groups. The attacker would authenticate to the local CLI shell and use the affected comman...
Cross-site Scripting (XSS)
OpenStack Dashboard horizon provides administrators and users with a graphical interface to access, provision, and automate cloud-based resources. A cross-site scripting XSS flaw was found in the way orchestration templates were handled. An owner of such a template could use this flaw to perform...
Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / 14.2 / current : libwmf (SSA:2018-120-01)
New libwmf packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix security issues. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2018-120-01. The text itself is copyrig...
Ubuntu: Security Advisory (USN-3473-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2017-3473
Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Miscellaneous. Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0.1 and 12.0.1. Easily "exploitable" vulnerability allows low privileged attacker with network access vi...
CVE-2017-3473
Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Miscellaneous. Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0.1 and 12.0.1. Easily "exploitable" vulnerability allows low privileged attacker with network access vi...
CVE-2017-3473
The CVE-2017-3473 vulnerability affects Oracle FLEXCUBE Private Banking (subcomponent: Miscellaneous) in versions 2.0.0, 2.0.1, 2.2.0.1 and 12.0.1. The issue arises from a vulnerability in the Oracle FLEXCUBE Private Banking implementation that allows a low-privileged, network-accessible attacker...
Oracle BI Publisher XML External Entity Injection Vulnerability (cpuoct2016)
Oracle BI Publisher is prone to a XML external entity XXE injection vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2016-3473
CVE-2016-3473 affects Oracle BI Publisher (XML Publisher) within Oracle Fusion Middleware and is tied to versions 11.1.1.7.x, 11.1.1.9.x, and 12.2.1.0.x. The vulnerability is described as an unspecified vulnerability in the BI Publisher component that allows remote authenticated users to affect c...
Oracle BI Publisher 11.1.1.6.0/11.1.1.7.0/11.1.1.9.0/12.2.1.0.0 - XML External Entity Injection
Exploit Title: Oracle BI Publisher formerly XML Publisher - XML External Entity Injection w/o authentication Date: 20\10\2016 Exploit Author: Jakub Palaczynski CVE : CVE-2016-3473 Vendor Homepage: https://www.oracle.com/ Version: 11.1.1.6.0, 11.1.1.7.0, 11.1.1.9.0, 12.2.1.0.0 Info: Previous...
Debian Security Advisory DSA 3473-1 (nginx - security update)
Several vulnerabilities were discovered in the resolver in nginx, a small, powerful, scalable web/proxy server, leading to denial of service or, potentially, to arbitrary code execution. These only affect nginx if the resolver directive is used in a configuration file. OpenVAS Vulnerability Test...
Amazon Linux AMI : libwmf (ALAS-2015-604)
It was discovered that libwmf did not correctly process certain WMF Windows Metafiles with embedded BMP images. By tricking a victim into opening a specially crafted WMF file in an application using libwmf, a remote attacker could possibly use this flaw to execute arbitrary code with the privileg...
Oracle: Security Advisory (ELSA-2008-0146)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Sql injection
SQL injection vulnerability in pimcore before build 3473 allows remote attackers to execute arbitrary SQL commands via the filter parameter to admin/asset/grid-proxy...
CVE-2015-4426
Pimcore CMS is affected by CVE-2015-4426: SQL injection via the filter parameter in admin/asset/grid-proxy. The issue exists in builds prior to 3473, with a fixed version at build 3473. Root cause is inadequate input filtering for the filter parameter, allowing arbitrary SQL execution. The vulner...