Malicious code in wlwz-2312-3700 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0de89212b0070e9d7bce7a21b956b3cd57df20d698d2de9c4ef73ddf421e3da9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-3700

A Time of Check Time of Use TOCTOU vulnerability was reported in the Lenovo Vantage SystemUpdate Plugin version 2.0.0.212 and earlier that could allow a local attacker to delete arbitrary files...

CVE-2022-3700

CVE-2022-3700 describes a TOCTOU race condition in Lenovo Vantage SystemUpdate Plugin (versions

Oracle Linux 8 : openssl (ELSA-2019-3700)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-3700 advisory. 1.1.1c-2 - do not try to use EC groups disallowed in FIPS mode in TLS - fix Valgrind regression with constant-time code 1.1.1c-1 - update to the 1.1.1c...

BELL-CVE-2021-3700 CVE-2021-3700 does not affect BellSoft software

Bulletin has no description...

CVE-2023-3700

creationtimestamp| type| source ---|---|--- 2023-07-17 12:35:01+00:00| seen| https://t.me/cibsecurity/66802...

CVE-2023-3700

Authorization Bypass Through User-Controlled Key in GitHub repository alextselegidis/easyappointments prior to 1.5.0...

CVE-2023-3700 Authorization Bypass Through User-Controlled Key in alextselegidis/easyappointments

Authorization Bypass Through User-Controlled Key in GitHub repository alextselegidis/easyappointments prior to 1.5.0...

CVE-2023-3700

CVE-2023-3700 affects Easy!Appointments prior to 1.5.0 (GitHub: alextselegidis/easyappointments). The root cause is improper access control enabling authorization bypass via a user-controlled key, allowing access to restricted functions. The issue is addressed by upgrading to version 1.5.0 or lat...

CVE-2023-3700 Authorization Bypass Through User-Controlled Key in alextselegidis/easyappointments

Authorization Bypass Through User-Controlled Key in GitHub repository alextselegidis/easyappointments prior to 1.5.0...

Huawei EulerOS: Security Advisory for usbredir (EulerOS-SA-2023-1301)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.2.2 : usbredir (EulerOS-SA-2023-1301)

According to the versions of the usbredir package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A use-after-free vulnerability was found in usbredir in versions prior to 0.11.0 in the usbredirparserserialize in...

Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : usbredir vulnerability (USN-5784-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5784-1 advisory. It was discovered that usbredir incorrectly handled memory when serializing large amounts of data in the case of a slow or blocked...

CVE-2016-3700

...

CVE-2016-3700

CVE-2016-3700 entry is rejected/not used per description; this CVE ID does not represent an active vulnerability.

CVE-2022-29953

The Bently Nevada 3700 series of condition monitoring equipment through 2022-04-29 has a maintenance interface on port 4001/TCP with undocumented, hardcoded credentials. An attacker capable of connecting to this interface can thus trivially take over its functionality...

CVE-2022-29953

The Bently Nevada 3700 series of condition monitoring equipment through 2022-04-29 has a maintenance interface on port 4001/TCP with undocumented, hardcoded credentials. An attacker capable of connecting to this interface can thus trivially take over its functionality...

Hardcoded credentials

The Bently Nevada 3700 series of condition monitoring equipment through 2022-04-29 has a maintenance interface on port 4001/TCP with undocumented, hardcoded credentials. An attacker capable of connecting to this interface can thus trivially take over its functionality...

CVE-2022-29953

The CVE-2022-29953 entry concerns the Bently Nevada 3700 series condition monitoring equipment. A maintenance interface on port 4001/TCP uses undocumented, hardcoded credentials, allowing an attacker who can reach the interface to take over its functionality. Affected products include Bently Neva...

CVE-2021-3700 affecting package usbredir for versions less than 0.12.0-1

CVE-2021-3700 affecting package usbredir for versions less than 0.12.0-1. An upgraded version of the package is available that resolves this issue...