CVE-2020-3556

creationtimestamp| type| source ---|---|--- 2020-11-05 12:29:22+00:00| published-proof-of-concept| https://t.me/informationsecuritychannel/41467 2020-11-06 22:51:34+00:00| seen| https://t.me/cibsecurity/16014 2024-11-14 06:07:10+00:00| seen| MISP/dd7cd495-cd76-48fb-9aee-acfbf13a78cb...

nginx Information Disclosure Vulnerability (CVE-2014-3556)

nginx is prone to an information disclosure vulnerability in the SMTP proxy. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

Oracle Linux 7 : firefox (ELSA-2020-3556)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-3556 advisory. 68.12.0-1.0.3 - Build with rust-toolset 1.43 68.12.0-1.0.1 - Remove upstream references Orabug: 30143292 - Update distribution for Oracle Linux Orabug:...

CentOS: Security Advisory for firefox (CESA-2020:3556)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CentOS 7 : firefox (RHSA-2020:3556)

The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:3556 advisory. - By holding a reference to the eval function from an about:blank window, a malicious webpage could have gained access to the InstallTrigger object whi...

IBM ServeRAID Manager exposes unauthenticated Java Remote Method Invocation (RMI) service

Overview IBM ServeRAID Manager version 9.30-17006 and prior exposes a Java RMI that allows a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description IBM ServeRAID Manager includes an embedded instance of Java version 1.4.2. Both ServeRAID Manager and Java...

SUSE SLED12 / SLES12 Security Update : Test-update for SLE-12-SP4 (security) (SUSE-SU-2018:3556-1)

This is a security test-update for SLE-12-SP4. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable...

Ubuntu: Security Advisory (USN-3556-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS / 16.04 LTS : Dovecot vulnerability (USN-3556-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3556-1 advisory. It was discovered that Dovecot incorrectly handled certain authentications. An attacker could possibly use this to cause a denial of service. Tenable...

CVE-2017-3556

The CVE-2017-3556 entry concerns Oracle E-Business Suite’s Oracle Application Object Library (AOL) File Management vulnerability. Public sources in the connected documents confirm affected software: Oracle E-Business Suite, versions 12.2.3 through 12.2.6 (also 12.1.3 is listed, but details focus ...

Oracle E-Business Multiple Vulnerabilities (April 2017 CPU)

The version of Oracle E-Business installed on the remote host is missing the April 2017 Oracle Critical Patch Update CPU. It is, therefore, affected by the following vulnerabilities : - An unspecified flaw exists in the Oracle Marketing component within the User Interface subcomponent that allows...

AUTH BYPASS For File Downloading - Oracle E-Business Suite

Application: Oracle E-Business Suite Versions Affected:Oracle E-Business Suite 12.2.3 Vendor: Oracle Bugs: AUTH BYPASS Reported: 23.12.2016 Vendor response: 24.12.2016 Date of Public Advisory: 18.04.2017 Reference: Oracle CPU April 2017 Authors: Alexey Tyurin ERPScan, Ivan Chalykin ERPScan...

CVE-2016-3556

CVE-2016-3556 affects Oracle Agile PLM within Oracle Supply Chain Products Suite versions 9.3.4 and 9.3.5. The vulnerability is described as unspecified, enabling remote attackers to impact confidentiality, integrity, and availability via EM Integration vectors. The NVD CVSSv3 base score is 9.8 (...

Debian: Security Advisory (DSA-3556-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle: Security Advisory (ELSA-2011-1380)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux: Security Advisory (ALAS-2011-10)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for patch FEDORA-2015-3556

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-3556

The STARTTLS implementation in mail/ngxmailsmtphandler.c in the SMTP proxy in nginx 1.5.x and 1.6.x before 1.6.1 and 1.7.x before 1.7.4 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending a cleartext command...

CVE-2014-3556

The STARTTLS implementation in mail/ngxmailsmtphandler.c in the SMTP proxy in nginx 1.5.x and 1.6.x before 1.6.1 and 1.7.x before 1.7.4 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending a cleartext command...

CVE-2014-3556

The CVE-2014-3556 entry affects nginx 1.5.x and 1.6.x before 1.6.1 and 1.7.x before 1.7.4. The STARTTLS implementation in mail/ngx_mail_smtp_handler.c allows an MITM to inject commands into encrypted SMTP sessions by sending a cleartext command after TLS is established, due to insufficient I/O bu...