152 matches found
CVE-2017-18746
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects EX3700 before 1.0.0.64, EX3800 before 1.0.0.64, EX6000 before 1.0.0.24, EX6130 before 1.0.0.16, EX6400 before 1.0.1.60, EX7000 before 1.0.0.50, EX7300 before 1.0.1.60, and WN2500RPv2 before 1.0.1.46...
CVE-2019-3700
yast2-security didn't use secure defaults to protect passwords. This became a problem on 2019-10-07 when configuration files that set secure settings were moved to a different location. As of the 20191022 snapshot the insecure default settings were used until yast2-security switched to stronger...
CVE-2019-3700
The CVE-2019-3700 entry relates to yast2-security not using secure defaults for passwords. Technical details across connected records show insecure defaults used prior to version 4.2.6, with password hashes potentially protected poorly due to DES encryption. The fix stated is that yast2-security ...
CVE-2014-3700
eDeploy through at least 2014-10-14 has remote code execution due to eval of untrusted data...
CVE-2014-3700
CVE-2014-3700 relates to the eDeploy component, where remote code execution is possible due to the use of eval() on untrusted data. The available records describe this as a high/severity issue with RCE risk (NVD CVSS v2: 7.5 Partial Integrity/Partial Availability; v3.1: 9.8 Critical), indicating ...
RHEL 8 : openssl (RHSA-2019:3700)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:3700 advisory. OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength...
CVE-2019-3025
Vulnerability in the Oracle Hospitality RES 3700 component of Oracle Food and Beverage Applications. The supported version that is affected is 5.7. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality RES 3700. While the...
CVE-2019-3025
Vulnerability in the Oracle Hospitality RES 3700 component of Oracle Food and Beverage Applications. The supported version that is affected is 5.7. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality RES 3700. While the...
Buffer overflow
Vulnerability in the Oracle Hospitality RES 3700 component of Oracle Food and Beverage Applications. The supported version that is affected is 5.7. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality RES 3700. While the...
CVE-2019-3025
Vulnerability in the Oracle Hospitality RES 3700 component of Oracle Food and Beverage Applications. The supported version that is affected is 5.7. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality RES 3700. While the...
CVE-2019-3025
CVE-2019-3025 affects Oracle Hospitality RES 3700, specifically version 5.7. The flaw allows an unauthenticated attacker over HTTP to take over Oracle Hospitality RES 3700, with CVSS v3.1 base score 9.0 (Network, HIGH impact on Confidentiality, Integrity, Availability). Exploit code and public wr...
CVE-2019-3025
Vulnerability in the Oracle Hospitality RES 3700 component of Oracle Food and Beverage Applications. The supported version that is affected is 5.7. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality RES 3700. While the...
PT-2019-3598 · Oracle · Oracle Hospitality Res 3700
Name of the Vulnerable Software and Affected Versions: Oracle Hospitality RES 3700 version 5.7 Description: The issue is related to insufficient access controls in the Oracle Hospitality RES 3700 component of Oracle Food and Beverage Applications. It allows a remote attacker to gain full control...
Oracle Hospitality RES 3700 CVE-2019-3025 Remote Security Vulnerability
Description Oracle Hospitality RES 3700 is prone to a remote security vulnerability. The vulnerability can be exploited over the 'HTTP' protocol. The 'Interface' package is affected. This vulnerability affects the following supported versions: 5.7 Technologies Affected Oracle Hospitality RES 3700...
Intel USB 3.0 eXtensible Host Controller Driver Vulnerability - Lenovo Support US
Lenovo Security Advisory: LEN-26562 Potential Impact: Privilege escalation Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2018-3700 Summary Description: A potential security vulnerability in the Intel USB 3.0 eXtensible Host Controller Driver may allow escalation of privilege...
CVE-2018-3700
Code injection vulnerability in the installer for IntelR USB 3.0 eXtensible Host Controller Driver for Microsoft Windows 7 before version 5.0.4.43v2 may allow a user to potentially enable escalation of privilege via local access...
CVE-2018-3700
Summary : CVE-2018-3700 is a code-injection vulnerability in the installer of Intel USB 3.0 eXtensible Host Controller Driver for Windows 7, prior to version 5.0.4.43v2, that may allow local privilege escalation. Affected software : Intel USB 3.0 eXtensible Host Controller Driver for Windows 7 (b...
Intel® USB 3.0 eXtensible Host Controller Driver Advisory
Summary: A potential security vulnerability in the Intel® USB 3.0 eXtensible Host Controller Driver may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2018-3700 Description: Code injection vulnerabilit...
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Exiv2 vulnerabilities (USN-3700-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3700-1 advisory. It was discovered that Exiv2 incorrectly handled certain files. An attacker could possibly use this to cause a denial of service...
Solaris 10 (sparc) : 119465-17
Sun JavaTM System Access Manager 6 2005Q1. Date this patch was last updated by Sun : Jun/29/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...