Cisco Webex Meetings Arbitrary Code Execution Vulnerabilities (cisco-sa-webex-nbr-NOS6FQ24) (deprecated)

This plugin has been deprecated as it's a duplicate of cisco-sa-webex-nbr-NOS6FQ24.nasl plugin ID 142880 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2021/03/19. Deprecated by cisco-sa-webex-nbr-NOS6FQ24.nasl include'compat.inc'; if description scriptid142879; scriptversion"1.7";...

CVE-2020-3604

Cisco Webex Network Recording Player for Windows and Cisco Webex Player for Windows are affected by ARF/WRF parsing vulnerabilities (CVE-2020-3604). The issue stems from insufficient validation of Webex recording elements, enabling an attacker to execute arbitrary code when a user opens a malicio...

CVE-2019-3604

CVE-2019-3604 is a Cross-Site Request Forgery vulnerability in McAfee ePO (legacy) Cloud. The connected documents describe that unauthenticated users could perform unintended ePO actions by leveraging an authenticated user’s session, via unspecified vectors. The exact vulnerable component/version...

Trend Micro Control Manager sCloudService GetPassword SQL Injection (CVE-2018-3604)

An SQL injection vulnerability exists in the Trend Micro Control Manager. The vulnerability is due to improper validation of user-supplied input on SOAP sCloudService requests invoking the GetPassword method. Successful exploitation of the vulnerability could allow the attacker to execute arbitra...

USN-3604-1: libvorbis vulnerability | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Description Affected Cloud Foundry Products and Versions Severity is medium unless otherwise noted. All versions of Cloud Foundry cflinuxfs2 prior to 1.194.0 Mitigation OSS users are strongly encouraged to follow one...

Ubuntu 14.04 LTS / 16.04 LTS : libvorbis vulnerability (USN-3604-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3604-1 advisory. Richard Zhu discovered that libvorbis incorrectly handled certain sound files. An attacker could use this to cause libvorbis to crash, resulting in a...

CVE-2018-3604

GetXXX method SQL injection remote code execution RCE vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations...

CVE-2018-3604

GetXXX method SQL injection remote code execution RCE vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations...

Sql injection

ZeeBuddy 2x allows SQL Injection via the admin/editadgroup.php groupid parameter, a different vulnerability than CVE-2008-3604...

CVE-2016-3604

...

CVE-2016-3604

CVE-2016-3604 entry is rejected and not used per description.

CVE-2017-3604

Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks...

CVE-2017-3604

CVE-2017-3604 affects the Oracle Berkeley DB Data Store component. Affected products/versions are prior to 6.2.32 in the Data Store, with a vulnerability that can be triggered by an attacker with local access and requires user interaction. Successful exploitation can lead to takeover of the Data ...

Debian: Security Advisory (DSA-3604-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important: Red Hat Security Advisory: Red Hat JBoss SOA Platform 5.3.1 security update

An update for Red Hat JBoss SOA Platform 5.3.1 which fixes multiple security issues is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

Mandriva Linux Security Advisory : not-yet-commons-ssl (MDVSA-2015:141)

Updated not-yet-commons-ssl packages fixes security vulnerability : It was discovered that the implementation used by the Not Yet Commons SSL project to check that the server hostname matches the domain name in the subject's CN field was flawed. This can be exploited by a Man-in-the-middle MITM...

MGASA-2014-0551 Updated not-yet-commons-ssl packages fix CVE-2014-3604

Updated not-yet-commons-ssl packages fixes security vulnerability: It was discovered that the implementation used by the Not Yet Commons SSL project to check that the server hostname matches the domain name in the subject's CN field was flawed. This can be exploited by a Man-in-the-middle MITM...

Updated not-yet-commons-ssl packages fix CVE-2014-3604

Updated not-yet-commons-ssl packages fixes security vulnerability: It was discovered that the implementation used by the Not Yet Commons SSL project to check that the server hostname matches the domain name in the subject's CN field was flawed. This can be exploited by a Man-in-the-middle MITM...

CVE-2014-3604

Not-Yet-Commons-SSL (Not-Yet-Commons-SSL) CVE-2014-3604 contains a hostname verification flaw in Certificates.java: the client fails to properly verify that the server certificate CN matches the domain name. This enables MITM-style spoofing of SSL servers using arbitrary valid certificates. Affec...

cloud.genesys:web-messaging-sdk (>=3.0.0, <=5.0.0), cn.dceast.platform:platform-security-starter (2.2.3) +301 more potentially affected by CVE-2014-3604 via ca.juliusdavies:not-yet-commons-ssl (>=0.3.9, <=0.3.11)

ca.juliusdavies:not-yet-commons-ssl MAVEN version =0.3.9, =3.0.0, =1.2, =1.1, =0.9.0, =0.9.0, =12.1.0, =12.1.1, =12.1.2, =12.1.0, =12.1.4, =1.0.83-rc1, =1.0.88-rc1, =1.0.83-rc1, =1.0.83-rc1, =1.0.112-release and more Source cves: CVE-2014-3604 Source advisory: MEND:CVE-2014-3604...