Ubuntu: Security Advisory (USN-5009-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5009-1: libslirp vulnerabilities

Qiuhao Li discovered that libslirp incorrectly handled certain header data lengths. An attacker inside a guest could possibly use this issue to leak sensitive information from the host. This issue only affected Ubuntu 20.04 LTS and Ubuntu 20.10. CVE-2020-29129, CVE-2020-29130 It was discovered th...

Cisco SD-WAN Software Privilege Escalation (cisco-sa-vepegr-4xynYLUj)

According to its self-reported version, Cisco SD-WAN Software is affected by a privilege escalation vulnerability due to incorrect permissions being set when the affected command is executed. An authenticated, local attacker can exploit this in order to gain root privileges. Note that Nessus has...

[ASA-202106-49] libslirp: information disclosure

Arch Linux Security Advisory ASA-202106-49 ========================================== Severity: Medium Date : 2021-06-22 CVE-ID : CVE-2021-3592 CVE-2021-3593 CVE-2021-3594 CVE-2021-3595 Package : libslirp Type : information disclosure Remote : No Link : https://security.archlinux.org/AVG-2073...

CVE-2021-3595

An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the tftpinput function and could occur while processing a udp packet that is smaller than the size of the 'tftpt' structure. This issue may lead to out-of-bounds read access or...

CVE-2021-3595

CVE-2021-3595 describes an invalid pointer initialization in the SLiRP networking code of QEMU (tftp_input()), which can trigger when processing UDP packets smaller than the tftp_t structure. The vulnerability may cause an out-of-bounds read or indirect host memory disclosure to the guest, compro...

CVE-2021-3595

An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The flaw exists in the tftpinput function and could occur while processing a udp packet that is smaller than the size of the 'tftpt' structure. This issue may lead to out-of-bounds read access or...

CVE-2020-3595

creationtimestamp| type| source ---|---|--- 2020-11-06 22:51:19+00:00| seen| https://t.me/cibsecurity/16001...

CVE-2020-3595 Cisco SD-WAN Software Privilege Escalation Vulnerability

A vulnerability in Cisco SD-WAN Software could allow an authenticated, local attacker to elevate privileges to root group on the underlying operating system. The vulnerability is due to incorrect permissions being set when the affected command is executed. An attacker could exploit this...

CVE-2020-3595

Cisco SD-WAN Software is affected by a local privilege-escalation vulnerability (CVE-2020-3595). The issue arises from incorrect permissions being set when executing the affected command, allowing an authenticated, local attacker to elevate to root on the underlying OS. Cisco’s advisory confirms ...

CVE-2020-3595 Cisco SD-WAN Software Privilege Escalation Vulnerability

A vulnerability in Cisco SD-WAN Software could allow an authenticated, local attacker to elevate privileges to root group on the underlying operating system. The vulnerability is due to incorrect permissions being set when the affected command is executed. An attacker could exploit this...

CVE-2011-3595

creationtimestamp| type| source ---|---|--- 2020-01-22 18:44:06+00:00| seen| https://t.me/cibsecurity/9350 2020-01-23 01:37:39+00:00| seen| https://t.me/cveNotify/371...

CVE-2011-3595

CVE-2011-3595 involves multiple Cross-site Scripting (XSS) vulnerabilities in Joomla! up to version 1.7.0. The issue resides in index.php, within the search word, extension, asset, and author parameters, enabling XSS in affected requests. The provided documents confirm the affected software versi...

CVE-2019-3595

Improper Neutralization of Special Elements used in a Command 'Command Injection' in ePO extension in McAfee Data Loss Prevention DLP 11.x prior to 11.3.0 allows Authenticated Adminstrator to execute arbitrary code with their local machine privileges via a specially crafted DLP policy, which is...

CVE-2019-3595

CVE-2019-3595 affects McAfee Data Loss Prevention (DLP) Endpoint, specifically the ePO extension in DLP 11.x before 11.3.0. The root cause is improper neutralization of special elements during command construction when a DLP policy is exported and opened on the local machine. An authenticated adm...

CVE-2019-3595 DLP Endpoint ePO extension not sanitizing CSV exports

Improper Neutralization of Special Elements used in a Command 'Command Injection' in ePO extension in McAfee Data Loss Prevention DLP 11.x prior to 11.3.0 allows Authenticated Adminstrator to execute arbitrary code with their local machine privileges via a specially crafted DLP policy, which is...

CVE-2018-3595

Anti-rollback can be bypassed in replay scenario during app loading due to improper error handling of RPMB writes in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 7...

CVE-2018-3595

CVE-2018-3595 affects Qualcomm Snapdragon platforms (automobile/mobile/wear) across multiple SoCs (e.g., MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/212/205, 425, 430, 450, 625, 650/52, 712/710/670, 820/820A, 835/845/850, 660, SDX24, SXR1130). The vulnerability arises from improper error handlin...

CVE-2018-3595

Anti-rollback can be bypassed in replay scenario during app loading due to improper error handling of RPMB writes in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 7...

Ubuntu: Security Advisory (USN-3595-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...