97 matches found
CVE-2019-1990
CVE-2019-1990 affects Android’s Media framework, specifically the ihevcd_fmt_conv_420sp_to_420p path in ihevcd_fmt_conv.c. The issue is an out-of-bounds write caused by a missing bounds check, enabling remote code execution with user interaction required. Affected Android versions: 7.0–9.0. The v...
CVE-2018-1990
CVE-2018-1990 affects IBM Cloud App Management V2018.2.0, V2018.4.0, and V2018.4.1. A specially crafted HTTP request could allow an attacker to obtain sensitive configuration information. The IBM advisory (F2097F23A…) documents a CVSS v3 base score of 5.3 (MEDIUM) and confirms the affected versio...
Security Bulletin: A vulnerability in IBM Cloud App Management V2018 could allow an attacker to obtain sensitive configuration information
Summary There is a vulnerability in IBM® Cloud App Management V2018. IBM Cloud App Management V2018 could allow an attacker to obtain sensitive configuration information using a specially crafted HTTP request. IBM® Cloud App Management has addressed the applicable CVE in a later version...
CVE-2015-1990
CVE-2015-1990 affects Webmin. The Mageia advisory notes that a malicious website could craft links or JavaScript referencing the xmlrpc.cgi script, triggered when a user logs into Webmin, leading to potential exploitation. The OpenVAS/MGASA entries corroborate a vulnerability in the Webmin compon...
CVE-2017-1990
CVE-2017-1990 entry is rejected/not used and does not represent an active vulnerability.
Tenda/Dlink/Tplink TD-W8961ND - 'DHCP' Cross-Site Scripting
Document Title: =============== Tenda, Dlink & Tplink TD-W8961ND - DHCP XSS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1990 Release Date: ============= 2016-11-28 Vulnerability Laboratory ID VL-ID: ====================================...
Tank 1990 HD ( Free ) - Dynamic Code Loading, External URLs, Native code usage vulnerabilities
HackApp vulnerability scanner discovered that application Tank 1990 HD Free published at the 'play' market has multiple vulnerabilities...
HP ArcSight ESM < 5.6 / 6.0 / 6.5c SP1 P2 / 6.8c Multiple Vulnerabilities
According to its self-reported version number, the version of HP ArcSight Enterprise Security Manager ESM installed on the remote host is prior to 5.6, 6.0, 6.5.1.1845.0 6.5c SP1 P2, or 6.8.0.1896 6.8c. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw exists that...
CVE-2016-1990
HP ArcSight ESM and ArcSight ESM Express are affected by CVE-2016-1990: local privilege escalation allowing a local user to gain privileges for command execution on specific versions. Affected products include HP ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, 6.8c before P1, and...
Mageia: Security Advisory (MGASA-2015-0344)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MGASA-2015-0344 Updated webmin packages fix CVE-2015-1990
Updated webmin package fixes security vulnerability: A malicious website could create links or Javascript referencing the xmlrpc.cgi script, triggered when a user logged into Webmin visits the attacking site CVE-2015-1990...
Amazon Linux AMI : libX11 / libXcursor,libXfixes,libXi,libXrandr,libXrender,libXres,libXt,libXv,libXvMC,libXxf86dga,libXxf86vm,libdmx,xorg-x11-proto-devel (ALAS-2014-452)
Multiple integer overflow flaws, leading to heap-based buffer overflows, were found in the way various X11 client libraries handled certain protocol data. An attacker able to submit invalid protocol data to an X11 server via a malicious X11 client could use either of these flaws to potentially...
CentOS 6 : libX11 / libXcursor / libXext / libXfixes / libXi / libXinerama / libXp / libXrandr / etc (CESA-2014:1436)
Updated X11 client libraries packages that fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base...
openSUSE Security Update : libXvMC (openSUSE-SU-2013:1025-1)
This update of libXvMC fixes several integer overflow issues. - U0001-integer-overflow-in-XvMCListSurfaceTypes-CVE-2013 -19.patch, U0002-integer-overflow-in-XvMCListSubpictureTypes-CVE-2 013.patch - integer overflow in XvMCListSurfaceTypes, XvMCListSubpictureTypes CVE-2013-1990 bnc821663, bnc8154...
Ubuntu: Security Advisory (USN-1990-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for libXvMC FEDORA-2013-12593
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for libXvMC FEDORA-2013-12593
Check for the Version of libXvMC OpenVAS Vulnerability Test Fedora Update for libXvMC FEDORA-2013-12593 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
SuSE 11.3 Security Update : xorg-x11-libs (SAT Patch Number 7944)
This update of xorg-x11-libs fixes several integer and buffer overflow issues. Bug 815451/821663 CVE-2013-1984 / CVE-2013-1985 / CVE-2013-1986 / CVE-2013-1988 / CVE-2013-1990 / CVE-2013-1991 / CVE-2013-1992 / CVE-2013-1995 / CVE-2013-1996 / CVE-2013-1998 / CVE-2013-1999 / CVE-2013-2000 /...