McAfee ePolicy Orchestrator Directory Traversal Vulnerability

McAfee ePolicy Orchestrator is prone to a directory traversal vulnerability which allows remote authenticated users to execute a command of their choice via an authenticated ePO session. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources,...

CVE-2017-3980

CVE-2017-3980 : A directory traversal vulnerability in the McAfee ePolicy Orchestrator (ePO) Extension affects 5.9.0, 5.3.2, 5.1.3 and earlier. An authenticated remote attacker could execute arbitrary commands via a crafted request within an authenticated ePO session. Remediation per connected so...

CVE-2017-3980

A directory traversal vulnerability in the ePO Extension in McAfee ePolicy Orchestrator ePO 5.9.0, 5.3.2, and 5.1.3 and earlier allows remote authenticated users to execute a command of their choice via an authenticated ePO session...

CVE-2016-3980

The Java Startup Framework aka jstart in SAP JAVA AS 7.2 through 7.4 allows remote attackers to cause a denial of service process crash via a crafted HTTP request, aka SAP Security Note 2259547...

CVE-2016-3980

CVE-2016-3980 : In SAP NetWeaver AS JAVA (7.2–7.4), the Java Startup Framework (jstart) is vulnerable to a remote denial-of-service via a crafted HTTP request. The issue originates from the startup framework component in SAP NetWeaver AS JAVA 7.4 (and likely 7.2–7.4 variants) and is documented as...

Oracle: Security Advisory (ELSA-2012-1211)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-3980

SQL injection vulnerability in the Business Rules Framework CRM-BF-BRF in SAP CRM allows attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Security Note 2097534...

CVE-2015-3980

The SAP CRM vulnerability CVE-2015-3980 affects the Business Rules Framework (CRM-BF-BRF) in SAP CRM. It is a SQL injection flaw that lets attackers remotely submit specially crafted SQL queries to the backend, enabling data manipulation or disclosure. Root cause appears to be unsafe SQL handling...

SAP JAVA AS jstart - DoS vulnerability

Application: SAP JAVA AS Versions Affected: SAP JAVA AS 7.2 – 7.4 Vendor URL: SAP Bugs: Denial of Service Reported: 04.12.2015 Vendor response: 05.12.2015 Date of Public Advisory: 14.03.2016 Reference: SAP Security Note 2259547 Author: Dmitry Yudin ERPScan @ret5et Vulnerability Information Class:...

Fedora Update for libfep FEDORA-2014-7126

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for libfep FEDORA-2014-7214

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 19 : libfep-0.1.0-1.fc19 (2014-7214)

new upstream release which includes a security fix of CVE-2014-3980. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 20 : libfep-0.1.0-1.fc20 (2014-7126)

new upstream release which includes a security fix of CVE-2014-3980. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

openSUSE Security Update : MozillaFirefox (openSUSE-SU-2012:1064-1)

Mozilla Firefox, Thunderbird, xulrunner, seamonkey 15.0 update bnc777588 - MFSA 2012-57/CVE-2012-1970 Miscellaneous memory safety hazards - MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-20 12-1975 CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/ CVE-2012-3959...

openSUSE Security Update : MozillaFirefox (openSUSE-SU-2012:1065-1)

Mozilla Firefox, Thunderbird, xulrunner, seamonkey 15.0 update bnc777588 - MFSA 2012-57/CVE-2012-1970 Miscellaneous memory safety hazards - MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-20 12-1975 CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/ CVE-2012-3959...

CVE-2014-3980

CVE-2014-3980 affects the libfep library, where version 0.0.5 before 0.1.0 mishandles UNIX domain sockets in the abstract namespace, enabling local users to gain privileges through unspecified vectors. Affected: libfep up to 0.1.0 (upstream fixed in 0.1.0). Impact: local privilege escalation; imp...

CVE-2013-3980

CVE-2013-3980 affects IBM Sametime Meeting Server (versions 8.x up to 8.5.2.1 and 9.x up to 9.0.0.1). The vulnerability allows remote attackers to cause a denial of service (room unusability) by having a large number of fictitious users enter a meeting room. The available documents do not provide...

Mambo Gallery Manager help.mgm.php mosConfig_absolute_path Parameter PHP Code Execution - Ver2 (CVE-2006-3980)

A code execution vulnerability has been reported in Mambo Gallery Manager. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Mozilla Thunderbird ESR Multiple Vulnerabilities - August12 (Mac OS X)

This host is installed with Mozilla Thunderbird ESR and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillathunderbirdesrmultvulnaug12macosx.nasl 6115 2017-05-12 09:03:25Z teissa $ Mozilla Thunderbird ESR Multiple Vulnerabilities - August12 Mac OS X Authors: Arun Kalla...

Mozilla Firefox ESR Multiple Vulnerabilities - August12 (Windows)

This host is installed with Mozilla Firefox ESR and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillafirefoxesrmultvulnaug12win.nasl 6079 2017-05-08 09:03:33Z teissa $ Mozilla Firefox ESR Multiple Vulnerabilities - August12 Windows Authors: Arun Kallavi Copyright:...