Amazon Linux: Security Advisory (ALAS-2016-737)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important: mysql56

Issue Overview: Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier allows remote administrators to affect availability via vectors related to Server: RBR. CVE-2016-5440 Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier allows remote administrators to affect availability via...

Ubuntu: Security Advisory (USN-3040-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-3486

Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote authenticated users to affect availability via vectors related to Server: FTS...

CVE-2016-3486

CVE-2016-3486 affects Oracle MySQL: remote authenticated users could affect availability via Server: FTS in MySQL 5.6.30 and earlier and 5.7.12 and earlier. Public advisories (openSUSE/SUSE) indicate fixes with MySQL 5.6.34 (or newer) released to address this and related CVEs; MiracleLinux refere...

Oracle MySQL Server 5.6 <= 5.6.30 / 5.7 <= 5.7.12 Security Update (cpujul2016) - Linux

Oracle MySQL Server is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle MySQL Server 5.6 <= 5.6.30 / 5.7 <= 5.7.12 Security Update (cpujul2016) - Windows

Oracle MySQL Server is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-3486

The CVE-2014-3486 entry affects Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2. A local attacker could exploit a symlink attack on a temporary file with a predictable name via two components: the shell_exec function in lib/util/MiqSshUtilV1.rb and the temp_cmd_file function in lib...

Beckhoff TwinCAT Out-Of-Bounds Read Denial of Service (CVE-2011-3486)

A denial of service vulnerability has been reported in Beckhoff TwinCAT. The vulnerability is due to an out-of-bounds read. A remote attacker can exploit this issue by sending a specially crafted packet to the target. Successful exploitation will cause Beckhoff TwinCAT to crash, resulting in a...

CVE-2012-3486

CVE-2012-3486 affects Tunnelblick (3.3beta20 and earlier). Local users can gain privileges through an OpenVPN config that triggers execution of a script on an OpenVPN event. Root cause is the configuration allowing script execution by event, enabling local privilege escalation. The provided docum...

CVE-2011-3486

Beckhoff TwinCAT 2.11.0.2004 and earlier are affected by CVE-2011-3486. A remote attacker can trigger a denial-of-service by sending a crafted UDP packet to port 48899 (TCATSysSrv.exe), causing an out-of-bounds read. Public exploitation is evidenced by Metasploit modules and Nessus/CVE references...

CVE-2011-3486

creationtimestamp| type| source ---|---|--- 2011-09-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17835 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/scada/beckhofftwincat.rb 2025-02-06 03:13:40+00:00| seen|...

SmarterMail 7.x Cross Site Scripting / Shell Upload / Traversal

To: Vuln.Lists Re: Coordinated Disclosure, SmarterMail 7.x Versions Private Note - Rewrite as you wish, vendor has acknowledged these bugs and more and issued a fix. ------------------------------ Author: Hoyt LLC Research | http://xss.cx | http://cloudscan.me Identified: October 28, 2010 Vendor:...

SmarterMail 7.x LDAP Injection

Vendor: smartertools.com SmarterMail 7.x 7.2.3925 Date: 2010-10-01 Author : David Hoyt sqlhacker – Hoyt LLC Contact : [email protected] Home : http://cloudscan.me Dork : insite: SmarterMail Enterprise 7.2 Bug : LDAP Injection + Cross Site Scripting STORED Tested on : SmarterMail 7.x 7.2.3925 //...

CVE-2010-3486

CVE-2010-3486 is a directory traversal vulnerability in SmarterMail 7.x (notably in FileStorageUpload.ashx) that allows remote attackers to read arbitrary files via crafted name parameters (e.g., ../, encoded backslashes). Exploitation details appear in contemporaneous disclosures and exploit rep...

CVE-2010-3486

creationtimestamp| type| source ---|---|--- 2010-09-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15048 2010-10-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15189 2011-03-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16955...

CVE-2009-3486

CVE-2009-3486 concerns multiple XSS vulnerabilities in the J-Web interface of Juniper JUNOS 8.5R1.14. Remote authenticated users can inject arbitrary script/HTML via host-related parameters across diagnose, configuration, and local-cert actions (examples: pinghost, traceroute, probe-limit, firewa...

CVE-2009-3486

creationtimestamp| type| source ---|---|--- 2009-09-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33258 2009-09-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33259...

CVE-2008-3486

CVE-2008-3486 : In Coppermine Photo Gallery (CPG) 1.4.18 and earlier, when the charset is utf-8, the _data cookie’s serialized data can be crafted to alter the lang parameter, allowing remote attackers to trigger a directory traversal via .. in include/functions.inc.php/upon the lang data being p...

CVE-2008-3486

creationtimestamp| type| source ---|---|--- 2008-07-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6178...