SUSE: Security Advisory (SUSE-SU-2012:0221-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2012:0198-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-3670

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2020-3670

u'Potential out of bounds read while processing downlink NAS transport message due to improper length check of Information ElementIEI NAS message container' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in Agatt...

CVE-2019-3670 Remote Code Execution vulnerability

Remote Code Execution vulnerability in the web interface in McAfee Web Advisor WA 8.0.34745 and earlier allows remote unauthenticated attacker to execute arbitrary code via a cross site scripting attack...

CVE-2019-3670

The CVE-2019-3670 entry affects McAfee Web Advisor (WA) via its web interface, with vulnerable versions <= 8.0.34745. The root cause is a cross-site scripting flaw that enables remote, unauthenticated attackers to execute arbitrary code on affected systems. This yields a remote code execution ...

Huawei EulerOS: Security Advisory for php (EulerOS-SA-2019-1544)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-3670

TYPO3 prior to 4.3.4 and 4.4.x prior to 4.4.1 contains insecure randomness during the generation of a hash in the forgot‑password function, enabling potential predictability of hashes as described in multiple sources (GHSA/NVD/CNVD/etc.). The vulnerability affects the forgot-password hashing proc...

Intel Smart Sound Technology Vulnerabilities - US

Lenovo Security Advisory: LEN-26775 Potential Impact: Privilege escalation Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2018-3666, CVE-2018-3670, CVE-2018-3672 Summary Description: Intel has notified Lenovo of vulnerabilities affecting Intel Smart Sound Technologies that may...

Intel Smart Sound Technology Vulnerabilities - Lenovo Support US

No description provided...

Memory Corruption And Code Execution

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. A buffer overflow flaw was found in the Exif extension. A specially crafted JPEG or TIFF file could cause a PHP application using the exifthumbnail function to crash or, possibly, execute arbitrary code with the...

PHP 5.6.x < 5.6.2 Multiple Vulnerabilities

According to its banner, the version of PHP 5.6.x installed on the remote host is prior to 5.6.2. It is, therefore, affected by the following vulnerabilities : - A buffer overflow error exists in the function 'mkgmtime' that can allow application crashes or arbitrary code execution. CVE-2014-3668...

SUSE SLES12 Security Update : php5 (SUSE-SU-2014:1497-1)

php5 was updated to fix three security issues. The following security issues were fixed : - xmlrpc ISO8601 date format parsing out-of-bounds read in mkgmtime CVE-2014-3668. - integer overflow in unserialize CVE-2014-3669. - heap corruption issue in exifthumbnail CVE-2014-3670. Note that Tenable...

CVE-2018-3670

Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as administrator via a buffer overflow...

CVE-2018-3670

CVE-2018-3670 affects Intel Smart Sound Technology driver prior to version 9.21.00.3541. The flaw is a buffer overflow in the driver module that could allow a local attacker to execute arbitrary code as administrator (high severity, local access, no user interaction required per the documents). A...

Ubuntu 14.04 LTS / 16.04 LTS : elfutils vulnerabilities (USN-3670-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3670-1 advisory. Agostino Sarubbo discovered that elfutils incorrectly handled certain malformed ELF files. If a user or automated system were tricked into...

Ubuntu: Security Advisory (USN-3670-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-3670

...

Debian DSA-3670-1 : tomcat8 - security update

Dawid Golunski of LegalHackers discovered that the Tomcat init script performed unsafe file handling, which could result in local privilege escalation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

Debian: Security Advisory (DSA-3670-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...