CVE-2020-3489

CVE-2020-3489 affects Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers. The issue arises in CAPWAP packet processing where insufficient validation can allow an unauthenticated, adjacent attacker to send malformed CAPWAP packets, potentially crashing and reloading the device and...

Fedora: Security Advisory for coturn (FEDORA-2020-f3fcb1608a)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for coturn (FEDORA-2020-305c173af8)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 32 Update: coturn-4.5.1.1-3.fc32

The Coturn TURN Server is a VoIP media traffic NAT traversal server and gat eway. It can be used as a general-purpose network traffic TURN server/gateway, to o. This implementation also includes some extra features. Supported RFCs: TURN specs: - RFC 5766 - base TURN specs - RFC 6062 - TCP relayin...

CVE-2013-3489

CVE-2013-3489 involves a buffer overflow in Media Player Classic - Home Cinema (MPC-HC) prior to 1.7.0. The vulnerability allows remote attackers to execute arbitrary code by supplying a crafted RealMedia .rm file. Impact described as arbitrary code execution with a likely combination of network ...

Synology Photo Station SQL Injection Vulnerability (CNVD-2017-27712)

Synology Photo Station is a solution for sharing pictures, videos and blogs over the Internet from Synology Inc. of Taiwan, China. A SQL injection vulnerability exists in the synophotocsPhotoDB.php file in Synology Photo Station versions prior to 6.8.11-3489 and prior to 6.3-2977. The vulnerabili...

Synology Photo Station Path Traversal Vulnerability

Synology Photo Station is a solution for sharing pictures, videos and blogs over the Internet from Synology Inc. of Taiwan, China. A path traversal vulnerability exists in SYNO.PhotoStation.File in Synology Photo Station versions prior to 6.8.11-3489 and prior to 6.3-2977. A remote attacker can...

CVE-2019-11822

Relative path traversal vulnerability in SYNO.PhotoStation.File in Synology Photo Station before 6.8.11-3489 and before 6.3-2977 allows remote attackers to upload arbitrary files via the uploadphoto parameter...

PT-2019-12509 · Synology · Synology Photo Station

Name of the Vulnerable Software and Affected Versions: Synology Photo Station versions prior to 6.8.11-3489 Synology Photo Station versions prior to 6.3-2977 Description: The issue allows remote attackers to upload arbitrary files via the uploadphoto parameter, due to a relative path traversal...

CVE-2019-3489

An unauthenticated file upload vulnerability has been identified in the Web Client component of Micro Focus Content Manager 9.1, 9.2, and 9.3 when configured to use the ADFS authentication method. The vulnerability could be exploited by an unauthenticated remote attacker to upload content to...

CVE-2019-3489

CVE-2019-3489 affects the Web Client component of Micro Focus Content Manager (versions 9.1–9.3) when configured for ADFS authentication. It is an unauthenticated file-upload vulnerability that could allow a remote attacker to upload content to arbitrary locations on the Content Manager server. T...

Rockwell RSLogix 5000 RNA Denial of Service (CVE-2011-3489)

A denial of service vulnerability exists in Rockwell RSLogix 5000. A remote attacker could exploit this vulnerability by sending a specially crafted request to the target system...

Ubuntu 14.04 LTS / 16.04 LTS : Berkeley DB vulnerability (USN-3489-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3489-1 advisory. It was discovered that Berkeley DB incorrectly handled certain configuration files. An attacker could possibly use this issue to read sensitive...

USN-3489-2: Berkeley DB vulnerability

USN-3489-1 fixed a vulnerability in Berkeley DB. This update provides the corresponding update for Ubuntu 12.04 ESM. Original advisory details: It was discovered that Berkeley DB incorrectly handled certain configuration files. An attacker could possibly use this issue to read sensitive informati...

CVE-2017-3489

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Security Management System. Supported versions that are affected are 12.0.1, 12.0.2, 12.0.3, 12.0.4, 12.1.0, 12.2.0 and 12.3.0. Easily "exploitable" vulnerability allows low...

CVE-2017-3489

CVE-2017-3489 affects Oracle FLEXCUBE Investor Servicing (Security Management System subcomponent) within Oracle Financial Services Applications. Affected versions include 12.0.1–12.3.0. The vulnerability allows a low-privileged, network-accessible attacker (HTTP) to perform unauthorized update/i...

Oracle Database Multiple Vulnerabilities (July 2016 CPU) (FREAK)

The remote Oracle Database Server is missing the July 2016 Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities : - A security feature bypass vulnerability, known as FREAK Factoring attack on RSA-EXPORT Keys, exists in the RDBMS HTTPS Listener package due to the suppo...

CVE-2016-3489

Unspecified vulnerability in the Data Pump Import component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2016-3489

CVE-2016-3489 refers to an unspecified vulnerability in the Data Pump Import component of Oracle Database Server versions 11.2.0.4, 12.1.0.1, and 12.1.0.2. The issue is described as affecting confidentiality, integrity, and availability via unknown vectors, exploitable by local users. The connect...

Debian: Security Advisory (DSA-3489-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...