114 matches found
Ubuntu 18.04 LTS : libxkbcommon vulnerabilities (USN-3786-2)
The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3786-2 advisory. USN-3786-1 fixed several vulnerabilities in libxkbcommon. This update provides the corresponding update for Ubuntu 18.04 LTS. Tenable has extracted the...
Ubuntu 14.04 LTS / 16.04 LTS : libxkbcommon vulnerabilities (USN-3786-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3786-1 advisory. It was discovered that libxkbcommon incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service...
@taotieh/back_giscom (1.0.7), @taotieh/back_giscom__sample (>=0.1.2, <=0.1.7) +4 more potentially affected by CVE-2018-3786 via egg-scripts (2.6.0)
egg-scripts NPM version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on egg-scripts and may be impacted: - @taotieh/backgiscom 1.0.7 - @taotieh/backgiscomsample =0.1.2, =0.2.0, =0.1.2, =0.1.9 - @taotieh/backgiscomtiletransform 0.0.0 Source cves:...
CVE-2018-3786
A command injection vulnerability in egg-scripts v2.8.1 allows arbitrary shell command execution through a maliciously crafted command line argument...
CVE-2018-3786
A command injection vulnerability in egg-scripts v2.8.1 allows arbitrary shell command execution through a maliciously crafted command line argument...
CVE-2018-3786
CVE-2018-3786 affects egg-scripts prior to 2.8.1. A crafted command line argument enables command injection, allowing arbitrary shell command execution. Impact, per sources, is remote code execution in affected setups; exploitability is via untrusted input passed to egg-scripts. Remediation: upgr...
CVE-2016-3786
This CVE entry is rejected/not used and does not represent an active vulnerability entry.
Debian DSA-3786-1 : vim - security update
Editor spell files passed to the vim Vi IMproved editor may result in an integer overflow in memory allocation and a resulting buffer overflow which potentially could result in the execution of arbitrary code or denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descripti...
soaringteam.com XSS vulnerability
Vulnerable URL: http://www.soaringteam.com/member-services/infosite/mmxiv/index.php?Passcode=3786/shop/basketnew.php?pagefile=%22%3E%3Csvg/onload=alert%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability...
CVE-2015-3786
CVE-2015-3786 : In OS X Yosemite, the Bluetooth subsystem failed to properly restrict access to the Apple Notification Center Service, allowing a crafted app to read notifications from paired devices. Affected: OS X Yosemite prior to 10.10.5. Cause: inadequate access control in Notification Cente...
Oracle Solaris Critical Patch Update : july2013_SRU5_5
This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: SMF/File Locking Services. Supported versions that are affected are 8, 9, 10 and 11. Easily exploitable...
CVE-2014-3786
Pixie CMS 1.04’s contact module (admin/modules/contact.php) is affected by multiple POST XSS vulnerabilities via the uemail and subject fields in the contact form. A remote attacker could inject arbitrary web script/HTML, enabling script execution in the victim’s browser on the affected site. The...
Pixie CMS 1.04 Cross Site Scripting
Pixie CMS v1.04 Contact form POST XSS Vulnerabilities Vendor: Pixie CMS Product web page: http://www.getpixie.co.uk Affected version: 1.04 Severity: Medium CVE: CVE-2014-3786 Demo page: http://demo.getpixie.co.uk Discovered by: Filippos Mastrogiannis @filipposmastro & Simone Memoli @Simon90Italy...
CVE-2013-3786
CVE-2013-3786 is an unspecified local kernel vulnerability in Oracle Solaris 9, 10, and 11 that can affect confidentiality, integrity, and availability via unknown vectors. It is classified with CVSSv2 base score 6.0 (local, high complexity, single auth) and is associated with Kernel component is...
APPLE-SA-2011-10-12-6 Numbers for iOS v1.5
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2011-10-12-6 Numbers for iOS v1.5 Numbers for iOS v1.5 is now available and addresses the following: Numbers Available for: iOS Impact: Opening a maliciously crafted Excel file may lead to an unexpected application termination or arbitrary co...
CVE-2011-3786
PHProjekt 6.0.5 is affected by a remote information-disclosure vulnerability where an attacker can trigger a direct request to a PHP file (Setup/Controllers/IndexController.php) and cause an error message to reveal the installation path. The issue is documented across CVE-2011-3786 entries (NVD, ...
Apple iWork Numbers/Pages多个漏洞(CVE-2010-3786)
CVE ID: CVE-2010-3786 iWork 是以Mac 方式创建文档、电子表格和演示文稿的最轻松途径。 Apple iWork在实现上存在多个安全漏洞，远程攻击者可利用这些漏洞控制用户系统。 在处理Excel文件时，iWork Numbers中存在错误，可通过特制的文件造成内存破坏。 Apple iWork 9.x 厂商补丁： Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://support.apple.com/...
Slackware 13.1 / current : mozilla-thunderbird (SSA:2010-202-02)
New mozilla-thunderbird packages are available for Slackware 13.1 and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2010-202-02. The text itself is...