CVE-2022-3684 SDM600 endpoint vulnerability

A vulnerability exists in a SDM600 endpoint. An attacker could exploit this vulnerability by running multiple parallel requests, the SDM600 web services become busy rendering the application unresponsive. This issue affects: All SDM600 versions prior to version 1.2 FP3 HF4 Build Nr. 1.2.23000.291...

CVE-2021-3684

creationtimestamp| type| source ---|---|--- 2023-03-24 23:50:53+00:00| seen| https://t.me/cibsecurity/60710...

CVE-2021-3684

The CVE-2021-3684 entry concerns OpenShift Assisted Installer. During Discovery ISO generation, image pull secrets were leaked as plaintext in installation logs, enabling an authenticated user to reuse the secret to pull container images from the registry as that user. Documents substantiate the ...

CVE-2021-3684

A vulnerability was found in OpenShift Assisted Installer. During generation of the Discovery ISO, image pull secrets were leaked as plaintext in the installation logs. An authenticated user could exploit this by re-using the image pull secret to pull container images from the registry as the...

Mageia: Security Advisory (MGASA-2014-0408)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-3684

creationtimestamp| type| source ---|---|--- 2020-11-02 12:38:37+00:00| seen| https://t.me/cibsecurity/15763...

CVE-2020-3684

CVE-2020-3684 describes a local, privilege-relevant issue in Qualcomm Snapdragon platforms where QSEE reads the access permission policy for the SMEM TOC partition from the SMEM TOC contents populated by the XBL Loader and applies them without validation. This affects a wide range of Snapdragon p...

CVE-2013-3684

NextGEN Gallery plugin before 1.9.13 for WordPress: ngggallery.php file upload...

CVE-2013-3684

NextGEN Gallery plugin before 1.9.13 for WordPress: ngggallery.php file upload...

CVE-2013-3684

The CVE-2013-3684 entry concerns the NextGEN Gallery WordPress plugin (pre-1.9.13) and a vulnerability in ngggallery.php that allows arbitrary file upload. Multiple connected sources confirm affected version (1.9.12 and earlier) and that unauthenticated uploads were possible, potentially enabling...

CVE-2019-3684

SUSE Manager until version 4.0.7 and Uyuni until commit 1b426ad5ed0a7191a6fb46bb83e98ae4b99a5ade created world-readable swap files on systems that don't have a swap already configured and don't have btrfs as filesystem...

CVE-2019-3684

CVE-2019-3684 affects SUSE Manager up to 4.0.7 and Uyuni up to the commit 1b426ad5ed0a7191a6fb46bb83e98ae4b99a5ade. The underlying issue is creation of world-readable swap files on systems that do not already have swap configured and do not have a btrfs filesystem. This leads to potential disclos...

CVE-2018-3684

Unquoted service paths in Intel Quartus II in versions 11.0 - 15.0 allow a local attacker to potentially execute arbitrary code...

CVE-2018-3684

Intel Intel® Quartus family advisory INTEL-SA-00151 documents a local-priority privilege/escalation flaw in unquoted service paths affecting Quartus II v11.0–15.0 (CVE-2018-3683) and Quartus Prime v15.1–18.0 (CVE-2018-3684). The core issue is unquoted service paths that can allow a local attacker...

USN-3684-1: Perl vulnerability | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Description Affected Cloud Foundry Products and Versions Severity is medium unless otherwise noted. Cloud Foundry BOSH stemcells are vulnerable, including: 3586.x versions prior to 3586.24 3541.x versions prior to...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Perl vulnerability (USN-3684-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3684-1 advisory. It was discovered that Perl incorrectly handled certain archive files. An attacker could possibly use this to overwrite arbitrary files...

CVE-2009-3684

...

CVE-2009-3684

CVE-2009-3684 entry is rejected/not used; it does not represent an active vulnerability.

CVE-2016-3684

SAP Download Manager (versions up to 2.1.142) stores sensitive values in a configuration file encrypted with a hard-coded key. On Windows/Mac, the key combines the BIOS serial with a fixed key; on Linux/other platforms, the key is a fixed hard-coded value. This enables context-dependent attackers...

Debian DSA-3684-1 : libdbd-mysql-perl - security update

Pali Rohar discovered that libdbd-mysql-perl, the Perl DBI database driver for MySQL and MariaDB, constructed an error message in a fixed-length buffer, leading to a crash FORTIFYSOURCE failure and, potentially, to denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...