107 matches found
CVE-2019-3682 Insecure API port exposed to all Master Node guest containers
The docker-kubic package in SUSE CaaS Platform 3.0 before 17.09.1ce-7.6.1 provided access to an insecure API locally on the Kubernetes master node...
CVE-2019-3682
The CVE-2019-3682 entry affects the docker-kubic package in SUSE CaaS Platform 3.0, specifically before 17.09.1_ce-7.6.1. The issue allows access to an insecure API locally on the Kubernetes master node, exposing the system to high-impact confidentiality, integrity, and availability risks (CVSSv3...
CVE-2018-3682
BMC Firmware in Intel server boards, compute modules, and systems potentially allow an attacker with administrative privileges to make unauthorized read\writes to the SMBUS...
CVE-2018-3682
CVE-2018-3682 affects Intel server BMC firmware on server boards, compute modules, and server systems. The vulnerability allows an attacker with administrative privileges to perform unauthorized read/write operations on the SMBUS, exposing confidentiality, integrity, and availability impacts. CVS...
Ubuntu: Security Advisory (USN-3682-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Firefox vulnerability (USN-3682-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3682-1 advisory. A heap buffer overflow was discovered in Skia. If a user were tricked in to opening a specially crafted website, an attacker could...
CVE-2009-3682
This CVE ID is rejected/not used and does not represent an active vulnerability entry.
CVE-2016-3682
This CVE entry is rejected/not used and does not represent an active vulnerability.
Debian DSA-3682-1 : c-ares - security update
Gzob Qq discovered that the query-building functions in c-ares, an asynchronous DNS request library would not correctly process crafted query names, resulting in a heap buffer overflow and potentially leading to arbitrary code execution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
PT-2016-3682 · Pivotal +1 · Rabbitmq +1
Name of the Vulnerable Software and Affected Versions: tripleo-heat-templates versions 7.0 Description: The issue is related to the improper use of configured RabbitMQ credentials in the TripleO Heat templates, making it easier for remote attackers to obtain access to services in deployed...
Oracle: Security Advisory (ELSA-2010-0825)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-3682
Apple Type Services ATS in Apple OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file, a different vulnerability than CVE-2015-3679, CVE-2015-3680, and CVE-2015-3681...
CVE-2015-3682
CVE-2015-3682 is an Apple macOS ATS (Apple Type Services) font parsing vulnerability in OS X before 10.10.4. A crafted font file can cause memory corruption, enabling remote code execution or a denial of service. The issue is part of the set of ATS font vulnerabilities (CVE-2015-3679…3682) addres...
CVE-2014-3682
XML external entity XXE vulnerability in the JBPMBpmn2ResourceImpl function in designer/bpmn2/resource/JBPMBpmn2ResourceImpl.java in jbpm-designer 6.0.x and 6.2.x allows remote attackers to read arbitrary files and possibly have other unspecified impact by importing a crafted BPMN2 file...
CVE-2014-3682
CVE-2014-3682 affects jbpm-designer 6.0.x and 6.2.x, due to an XML External Entity (XXE) vulnerability in JBPMBpmn2ResourceImpl.java that allows reading arbitrary files via a crafted BPMN2 import. Public documents confirm the root cause and impact; Red Hat advisories RHSA-2015:0234/0235 indicate ...
Oracle Linux 6 : mysql (ELSA-2011-0164)
The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0164 advisory. 5.1.52-1.1 - Update to MySQL 5.1.52, for various fixes described at http://dev.mysql.com/doc/refman/5.1/en/news-5-1-52.html including numerous small...
Oracle Linux 5 : mysql (ELSA-2010-0825)
The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0825 advisory. - Add fixes for CVE-2010-3677, CVE-2010-3680, CVE-2010-3681, CVE-2010-3682, CVE-2010-3833, CVE-2010-3835, CVE-2010-3836, CVE-2010-3837, CVE-2010-3838,...
Scientific Linux Security Update : mysql on SL6.x i386/x86_64
The MySQL PolyFromWKB function did not sanity check Well-Known Binary WKB data, which could allow a remote, authenticated attacker to crash mysqld. CVE-2010-3840 A flaw in the way MySQL processed certain JOIN queries could allow a remote, authenticated attacker to cause excessive CPU use up to...