Oracle Linux 8 : numpy (ELSA-2019-3704)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-3704 advisory. - Fix CVE-2019-6446 resolves: 1668466 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus h...

CVE-2023-3704

CVE-2023-3704 affects CP-Plus DVR; vulnerability stems from improper input validation in the web-based management interface. An unauthenticated remote attacker can trigger the issue by sending specially crafted HTTP requests to the affected device, potentially allowing the attacker to change the ...

CVE-2023-3704 Timestamp Modification Vulnerability in CP-Plus Digital Video Recorder

The vulnerability exists in CP-Plus DVR due to an improper input validation within the web-based management interface of the affected products. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable device. Successful...

CVE-2023-3704 Timestamp Modification Vulnerability in CP-Plus Digital Video Recorder

The vulnerability exists in CP-Plus DVR due to an improper input validation within the web-based management interface of the affected products. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable device. Successful...

SUSE CVE-2010-3704

The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code v...

CVE-2022-3704

A self cross-site scripting vulnerability was found in Ruby on Rails. This issue occurs when requesting a page that does not have a matching routing, allowing a user to create a script injection within the routing error page...

CVE-2022-3704

creationtimestamp| type| source ---|---|--- 2022-10-27 01:14:35+00:00| seen| https://t.me/cibsecurity/52118...

CVE-2022-3704 Ruby on Rails _table.html.erb cross site scripting

A vulnerability classified as problematic has been found in Ruby on Rails. This affects an unknown part of the file actionpack/lib/actiondispatch/middleware/templates/routes/table.html.erb. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The real...

CVE-2022-3704

The CVE-2022-3704 entry refers to a Ruby on Rails issue affecting an unknown part of actionpack/lib/action_dispatch/middleware/templates/routes/_table.html.erb, with cross-site scripting alleged as the outcome and remote initiation possible. The patch be177e4566747b73ff63fd5f529fab564e475ed4 is n...

Mageia: Security Advisory (MGASA-2014-0423)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-3704

creationtimestamp| type| source ---|---|--- 2021-11-01 17:21:18+00:00| seen| https://t.me/cibsecurity/31552...

CVE-2021-3704

Potential security vulnerabilities have been discovered on a certain HP LaserJet Pro printer that may allow a Denial of Service on the device...

CVE-2021-3704

CVE-2021-3704 concerns HP LaserJet Pro printers. The connected sources describe a vulnerability that may allow a Denial of Service on the device. The exact root cause, affected models/firmware versions, and exploit details are not explicitly provided in the documents, but the vulnerability is ass...

VulnCheck KEV: CVE-2014-3704

The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct prepared statements, which allows remote attackers to conduct SQL injection attacks via an array containing crafted keys...

CVE-2020-3704

CVE-2020-3704 describes a vulnerability in Bluetooth Low Energy where processing an invalid connection request PDU (nonstandard interval/timeout of 0) from a central device may cause the peripheral to enter a deadlock state. The entry notes this CVE is equivalent to CVE-2019-19193 from the Sweynt...

RHEL 8 : numpy (RHSA-2019:3704)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3704 advisory. The numpy packages provide NumPY. NumPY is an extension to the Python programming language, which adds support for large, multi-dimensional arrays an...

CVE-2019-3704

VNX Control Station in Dell EMC VNX2 OE for File versions prior to 8.1.9.236 contains OS command injection vulnerability. Due to inadequate restriction configured in sudores, a local authenticated malicious user could potentially execute arbitrary OS commands as root by exploiting this...

CVE-2019-3704

The CVE-2019-3704 entry describes an OS command injection vulnerability in Dell EMC VNX2 OE for File, affecting the VNX Control Station prior to 8.1.9.236. The issue arises from inadequate restriction in sudores, allowing a local authenticated attacker to execute arbitrary OS commands as root. Th...

CVE-2018-3704

Improper directory permissions in the installer for the Intel Parallel Studio before 2019 Gold may allow authenticated users to potentially enable an escalation of privilege via local access...

CVE-2018-3704

CVE-2018-3704: Intel Parallel Studio XE for Windows* has an elevation of privilege via the installer due to improper directory permissions. The issue affects Intel Parallel Studio XE for Windows* before 2019 Gold, enabling an authenticated local attacker to potentially escalate privileges. Intel’...