125 matches found
Fedora 32 : apt (2020-f03cfe3df5)
New upstream release with CVE fixed https://security-tracker.debian.org/tracker/CVE-2020-3810 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...
USN-4359-1: APT vulnerability | Cloud Foundry
Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Description It was discovered that APT incorrectly handled certain filenames during package installation. If an attacker could provide a specially crafted package to be installed by the system...
CVE-2020-3810
Missing input validation in the ar/tar implementations of APT before version 2.1.2 could result in denial of service when processing specially crafted deb files...
CVE-2020-3810
CVE-2020-3810 : Missing input validation in the ar/tar implementations of apt could cause a denial of service when processing specially crafted deb files. Affected: apt before 2.1.2. Remediation: upgrade to apt 2.1.2 or newer (per Debian/ Fedora advisories referencing the fix).
[SECURITY] [DLA 2210-1] apt security update
Package : apt Version : 1.0.9.8.6 CVE ID : CVE-2020-3810 When normalizing ar member names by removing trailing whitespace and slashes, an out-out-bound read can be caused if the ar member name consists only of such characters, because the code did not stop at 0, but would wrap around and continue...
[SECURITY] [DSA 4685-1] apt security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4685-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 14, 2020 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4685-1] apt security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4685-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 14, 2020 https://www.debian.org/security/faq -...
Debian DSA-4685-1 : apt - security update
Shuaibing Lu discovered that missing input validation in the ar/tar implementations of APT, the high level package manager, could result in denial of service when processing specially crafted deb files. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
UBUNTU-CVE-2020-3810
Missing input validation in the ar/tar implementations of APT before version 2.1.2 could result in denial of service when processing specially crafted deb files...
CVE-2012-3810
creationtimestamp| type| source ---|---|--- 2020-01-10 00:32:35+00:00| seen| https://t.me/cibsecurity/9088...
CVE-2012-3810
CVE-2012-3810 pertains to Samsung Kies before 2.5.0.12094_27_11, with multiple vulnerabilities arising from the CmdAgentLib and related ActiveX components. The attached documents describe: (1) CVE-2012-3810 — Arbitrary Registry Modification via CmdAgentLib, enabling manipulation of registry keys/...
Moodle CMS 3.6.x < 3.6.2, 3.5.x < 3.5.4, 3.4.x < 3.4.7 and < 3.1.15 Multiple Vulnerabilities
Moodle CMS is prone to multiple vulnerabilities. Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundatio...
CVE-2019-3810
CVE-2019-3810 affects Moodle up to versions 3.6.1, 3.5.x, 3.4.x, and 3.1.x (and older unsupported), where the /userpix/ page did not escape users’ full names, enabling cross-site scripting text-based payloads on hover. The issue is documented as an XSS vulnerability with PoC activity and has been...
Fedora 28 : moodle (2019-077cd6f168)
Multiple CVE fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security, In...
Fedora 29 : moodle (2019-d8ec88b21e)
Multiple CVE fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security, In...
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : ppp vulnerability (USN-3810-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3810-1 advisory. Ivan Gotovchits discovered that ppp incorrectly handled the EAP-TLS protocol. A remote attacker could use this issue to cause ppp to crash...
WordPress Plugin Smart Google Code Inserter 3.5 - Authentication Bypass SQL Injection
WordPress Plugin Smart Google Code Inserter 3.5 - Authentication Bypass SQL Injection Exploit Title: Smart Google Code Inserter 3.5 - Auth Bypass/SQLi Google Dork: inurl:wp-content/plugins/smart-google-code-inserter/ Date: 26-Nov-17 Exploit Author: Benjamin Lim Vendor Homepage: http://oturia.com/...
CVE-2018-3810
creationtimestamp| type| source ---|---|--- 2018-01-03 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43420 2021-07-30 10:09:34+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/207 2024-06-22 09:33:24+00:00| published-proof-of-concept|...
WordPress Smart Google Code Inserter SQL Injection
Exploit Title: Smart Google Code Inserter 3.5 - Auth Bypass/SQLi Google Dork: inurl:wp-content/plugins/smart-google-code-inserter/ Date: 26-Nov-17 Exploit Author: Benjamin Lim Vendor Homepage: http://oturia.com/ Software Link: https://wordpress.org/plugins/smart-google-code-inserter/ Version: 3.4...
WordPress Plugin Smart Google Code Inserter < 3.5 - Authentication Bypass / SQL Injection
Exploit Title: Smart Google Code Inserter 3.5 - Auth Bypass/SQLi Google Dork: inurl:wp-content/plugins/smart-google-code-inserter/ Date: 26-Nov-17 Exploit Author: Benjamin Lim Vendor Homepage: http://oturia.com/ Software Link: https://wordpress.org/plugins/smart-google-code-inserter/ Version: 3.4...