CVE-2022-3486

CVE-2022-3486 describes an open redirect in GitLab EE/CE. Affected: GitLab with versions 9.3 up to, but not including, 15.3.5; 15.4 up to, but not including, 15.4.4; and 15.5 up to, but not including, 15.5.2. Root cause: improper handling of redirects allows an attacker to redirect users to an ar...

FreeBSD : Gitlab -- Multiple vulnerabilities (16f7ec68-5cce-11ed-9be7-454b1dd82c64)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 16f7ec68-5cce-11ed-9be7-454b1dd82c64 advisory. - Gitlab reports: DAST analyzer sends custom request headers with every request Stored-XSS wit...

openSUSE: Security Advisory for cosign (SUSE-SU-2022:3486-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Beckhoff TwinCAT Read Access Violation (CVE-2011-3486)

Beckhoff TwinCAT 2.11.0.2004 and earlier allows remote attackers to cause a denial of service via a crafted request to UDP port 48899, which triggers an out-of-bounds read. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

CVE-2021-3486

GLPi 9.5.4 does not sanitize the metadata. This way its possible to insert XSS into plugins to execute JavaScript code...

CVE-2021-3486

CVE-2021-3486 relates to GLPI 9.5.4 where metadata is not sanitized, enabling stored XSS in plugins and execution of JavaScript in the user’s browser. The root cause is lack of proper sanitation in the metadata handling. The description provides the affected software (GLPI 9.5.4) and the impact (...

Security fix for the ALT Linux 10 package glpi version 9.5.5-alt1

May 13, 2021 Pavel Zilke 9.5.5-alt1 - New version 9.5.5 - This is a security release, upgrading is recommended - Security fixes: + CVE-2021-3486 : Stored XSS in plugins information...

CVE-2020-3486

Cisco IOS XE Software for the Catalyst 9000 Family CAPWAP Denial of Service vulnerabilities (CVE-2020-3486 and related CVEs) affect the CAPWAP processing in Catalyst 9800 Series Wireless Controllers. Affected component: CAPWAP packet handling; root cause: insufficient validation of CAPWAP packets...

CVE-2020-3486 Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerabilities

Multiple vulnerabilities in the Control and Provisioning of Wireless Access Points CAPWAP protocol processing of Cisco IOS XE Software for Cisco Catalyst 9800 Series Wireless Controllers could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition of an affected...

CVE-2013-3486

The CVE-2013-3486 entry concerns IrfanView FlashPix Plugin. Affected component: FlashPix plugin (Fpx.dll) in IrfanView. Root cause: integer overflow in Summary Information Property Set handling, leading to a heap-based buffer overflow. Impact: potential denial of service or arbitrary code executi...

CVE-2019-3486

CVE-2019-3486 affects Micro Focus ArcSight Security Management Center (ArcMC). A stored cross-site scripting vulnerability stems from insufficient validation of client-side data in the WEB application, leading to potential client-side code execution in ArcMC versions prior to 2.9.1. The affected ...

CVE-2019-3486 ArcSight Security Management Center stored cross site script issue in version prior to 2.9.1

Mitigates a stored cross site scripting issue in ArcSight Security Management Center versions prior to 2.9.1...

Ubuntu: Security Advisory (USN-3486-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS / 16.04 LTS : Samba vulnerabilities (USN-3486-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3486-1 advisory. Yihan Lian and Zhibin Hu discovered that Samba incorrectly handled memory when processing certain SMB1 requests. A remote attacker could...

Mautic <= 1.4.1 Multiple CSRF Vulnerabilities

Mautic is prone to multiple cross-site request forgery CSRF vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2017-9527

The markcontextstack function in gc.c in mruby through 1.2.0 allows attackers to cause a denial of service heap-based use-after-free and application crash or possibly have unspecified other impact via a crafted .rb file...

CVE-2017-3486

CVE-2017-3486 affects Oracle Database Server’s SQLPlus component. Affected are 11.2.0.4 and 12.1.0.2. The vulnerability is difficult to exploit but can allow a high-privileged attacker with Local Logon privilege (and user interaction) to compromise SQL Plus, with potential impact on confidentiali...

CVE-2017-3486

Vulnerability in the SQLPlus component of Oracle Database Server. Supported versions that are affected are 11.2.0.4 and 12.1.0.2. Difficult to exploit vulnerability allows high privileged attacker having Local Logon privilege with logon to the infrastructure where SQLPlus executes to compromise...

openSUSE: Security Advisory for mysql-community-server (openSUSE-SU-2016:2788-1)

The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE: Security Advisory for mysql-community-server (openSUSE-SU-2016:2769-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...