49 matches found
Oracle Linux 9 : python3.11-pip (ELSA-2023-6324)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-6324 advisory. - Use tarfile.datafilter for extracting CVE-2007-4559, PEP-721, PEP-706 Resolves: RHBZ2218247 Tenable has extracted the preceding description block directly fro...
Ubuntu: Security Advisory (USN-6324-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 20.04 LTS : Linux kernel (GKE) vulnerabilities (USN-6324-1)
The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6324-1 advisory. Daniel Moghimi discovered that some IntelR Processors did not properly clear microarchitectural state after speculative execution of various instructions...
CVE-2016-6324
CVE-2016-6324 is rejected and not used as an active vulnerability entry.
CVE-2020-6324
SAP Netweaver AS ABAPBSP Test Application sbspexttable, version-700,701,720,730,731,740,750,751,752,753,754,755, allows an unauthenticated attacker to send polluted URL to the victim, when the victim clicks on this URL, the attacker can read, modify the information available in the victim�s brows...
CVE-2020-6324
The CVE-2020-6324 entry affects SAP NetWeaver AS ABAP (BSP Test Application sbspext_table) across SAP NetWeaver ABAP versions 700–755. The vulnerability is a Reflected Cross-Site Scripting issue triggered by an unauthenticated user sending a polluted URL; when the victim clicks, the attacker can ...
CVE-2019-6324
HP Color LaserJet Pro M280-M281 Multifunction Printer series before v. 20190419, HP LaserJet Pro MFP M28-M31 Printer series before v. 20190426 may have an embedded web server potentially vulnerable to stored XSS in wireless configuration page...
CVE-2018-6324
The CVE-2018-6324 issue affects F-Secure Radar (on-premises) prior to 2018-02-15, with an unvalidated Redirect via the ReturnUrl parameter that occurs after login. Impact described as an open redirect; user is redirected to a user-controlled destination, potentially leading to phishing or credent...
CVE-2017-6324
Summary of CVE-2017-6324 (Symantec Messaging Gateway) : A security feature bypass vulnerability exists in SMG when handling a specific Word attachment with macros, allowing bypass of the administrator-enabled disarm functionality. This is documented by multiple sources (NVD entry and vendor/Nessu...
Symantec Messaging Gateway <= 10.6.3 Multiple Vulnerabilities
Symantec Messaging Gateway is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2015-6324
The DHCPv6 relay implementation in Cisco Adaptive Security Appliance ASA software 9.0 before 9.04.37, 9.1 before 9.16.6, 9.2 before 9.24, 9.3 before 9.33.5, and 9.4 before 9.42 allows remote attackers to cause a denial of service device reload via crafted DHCPv6 packets, aka Bug IDs CSCus56252 an...
CVE-2015-6324
The CVE-2015-6324 issue affects Cisco ASA (Adaptive Security Appliance) DHCPv6 relay. A remote, unauthenticated attacker can exploit improper validation of DHCPv6 packets to cause a denial-of-service and device reload. Affected software versions are ASA 9.0 up to 9.0(4.37), 9.1 up to 9.1(6.6), 9....
Vulnerability early warning: system privilege escalation Vulnerability, CVE-2 0 1 4-6 3 2 4 affects all versions of Windows Server-the vulnerabilities and early warning-the black bar safety net
Microsoft today released an emergency patch that fixes an affect all versions of Windows Server a serious vulnerability. Today released the MS14-0 6 8 vulnerability patch used to address the Microsoft Windows Kerberos KDC vulnerability that allows hackers to enhance any ordinary user rights becom...
Microsoft Windows Kerberos Checksum Remote Privilege Escalation Vulnerability (3011780)
This host is missing an important security update according to Microsoft Bulletin MS14-068. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2014-6324
Summary: CVE-2014-6324 affects the Microsoft Windows Kerberos Key Distribution Center (KDC) used by the Domain, affecting Windows Server 2003 SP2, Vista SP2, Server 2008 SP2/R2 SP1, Windows 7, 8, 8.1, and Server 2012 Gold/R2. The vulnerability stems from improper validation of cryptographic signa...
Additional information about CVE-2014-6324
Today Microsoft released update MS14-068 to address CVE-2014-6324, a Windows Kerberos implementation elevation of privilege vulnerability that is being exploited in-the-wild in limited, targeted attacks. The goal of this blog post is to provide additional information about the vulnerability, upda...
CVE-2014-6324
creationtimestamp| type| source ---|---|--- 2014-11-18 07:00:00+00:00| seen| https://msrc.microsoft.com/blog/2014/11/additional-information-about-cve-2014-6324/ 2014-12-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35474 2018-05-29 15:50:33+00:00| seen|...
MS14-068: Vulnerability in Kerberos Could Allow Elevation of Privilege (3011780) (ESKIMOROLL)
The remote Windows host is affected by a privilege escalation vulnerability due to the Kerberos Key Distribution Center KDC implementation not properly validating signatures. A remote attacker can exploit this vulnerability to elevate an unprivileged domain user account to a domain administrator...
