71 matches found
CVE-2021-3678
showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator PRNG...
CVE-2021-3678 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in star7th/showdoc
showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator PRNG...
CVE-2021-3678
CVE-2021-3678 affects the showdoc project (star7th/showdoc) with a cryptographically weak PRNG. Connected sources (GHSA, Red Hat, OSV, CVE lists) consistently describe usage of insecure randomness (e.g., MD5-based/low-entropy paths, time/rand reliance) as the root cause. Impact details in the ref...
CVE-2020-3678
CVE-2020-3678 describes a buffer overflow that could occur when the API is used improperly because UIE initialization does not include a buffer size parameter. Connected records attribute this to Qualcomm Snapdragon platforms (Snapdragon Consumer IOT, Industrial IOT, Mobile, Wired Infrastructure/...
visitmariposa.net Cross Site Scripting vulnerability
Security Researcher g0bl1nsec Helped patch 3678 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting visitmariposa.net website and its users. Following...
Ubuntu: Security Advisory (USN-3678-4)
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 18.04 LTS : Linux kernel (Raspberry Pi 2) vulnerabilities (USN-3678-4)
The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3678-4 advisory. Wen Xu discovered that the ext4 filesystem implementation in the Linux kernel did not properly handle corrupted meta data in some situations. An attacker...
Ubuntu 18.04 LTS : Linux kernel (Azure) vulnerabilities (USN-3678-3)
The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3678-3 advisory. Wen Xu discovered that the ext4 filesystem implementation in the Linux kernel did not properly handle corrupted meta data in some situations. An attacker...
Ubuntu: Security Advisory (USN-3678-3)
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-3678-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 16.04 LTS : Linux kernel (Azure) vulnerabilities (USN-3678-2)
The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3678-2 advisory. Wen Xu discovered that the ext4 filesystem implementation in the Linux kernel did not properly handle corrupted meta data in some situations. An attacker...
Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-3678-1)
The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3678-1 advisory. Wen Xu discovered that the ext4 filesystem implementation in the Linux kernel did not properly handle corrupted meta data in some situations. An attacker...
Debian DSA-3678-1 : python-django - security update
Sergey Bobrov discovered that cookie parsing in Django and Google Analytics interacted such a way that an attacker could set arbitrary cookies. This allows other malicious websites to bypass the Cross-Site Request Forgery CSRF protections built into Django. %NASLMINLEVEL 70300 C Tenable Network...
Debian: Security Advisory (DSA-3678-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2016-3678
The CVE-2016-3678 vulnerability affects Huawei Quidway S9700, S5700, S5300, S9300, and S7700 switches with software prior to V200R003SPH012. A remote attacker can cause a denial of service (switch restart) by sending crafted traffic. This is documented in NVD/CNVD entries and Huawei’s PSIRT advis...
CVE-2015-3678
AppleThunderboltEDMService in Apple OS X before 10.10.4 allows local users to gain privileges or cause a denial of service memory corruption via unspecified Thunderbolt commands...
CVE-2015-3678
CVE-2015-3678 affects Apple Thunderbolt EDM Service in OS X prior to 10.10.4. The vulnerability allows local users to gain privileges or cause a denial of service via memory corruption when handling certain Thunderbolt commands. Apple addressed this with OS X 10.10.4 (Security Update 2015-005).
[ESNC-2039348] Multiple Critical Security Vulnerabilities in SAP Governance, Risk and Compliance (SAP GRC)
ESNC-2039348 Multiple Critical Security Vulnerabilities in SAP Governance, Risk and Compliance SAP GRC Please refer to http://www.esnc.de for the original security advisory, updates and additional information. ------------------------------------------------------------------------ 1. Business...
CVE-2013-3678
CVE-2013-3678 affects SAP Governance, Risk, and Compliance (SAP GRC) – Access Control . The vulnerability class includes SoD bypass, privilege escalation, and remote arbitrary program execution . The exposed function referenced in public material is /GRCPI/GRIA_USR_GET_AUTH , with exploitation po...