AZL-37151 CVE-2019-3816 affecting package openwsman for versions less than 2.6.8-13

Openwsman, versions up to and including 2.6.9, are vulnerable to arbitrary file disclosure because the working directory of openwsmand daemon was set to root directory. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted HTTP request to openwsman serve...

CVE-2019-3816

CVE-2019-3816 affects Openwsman up to 2.6.9, where the daemon’s working directory was incorrectly set to the root, enabling a remote, unauthenticated attacker to disclose arbitrary files via a crafted HTTP request to the Openwsman server. Several connected advisories confirm affected packages and...

Ubuntu 16.04 LTS : systemd regression (USN-3816-3)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3816-3 advisory. USN-3816-1 fixed vulnerabilities in systemd. The fix for CVE-2018-6954 caused a regression in systemd- tmpfiles when running Ubuntu inside a container on some old...

Ubuntu: Security Advisory (USN-3816-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-3816-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 LTS / 18.04 LTS : systemd vulnerability (USN-3816-2)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3816-2 advisory. USN-3816-1 fixed several vulnerabilities in systemd. However, the fix for CVE-2018-6954 was not sufficient. This update provides the remaining fixes. ...

Ubuntu: Security Advisory (USN-3816-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 LTS / 18.04 LTS : systemd vulnerabilities (USN-3816-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3816-1 advisory. Jann Horn discovered that unitdeserialize incorrectly handled status messages above a certain length. A local attacker could potentially...

[SECURITY] [DSA 3816-2] samba regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-3816-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 02, 2017 https://www.debian.org/security/faq -...

CVE-2016-3816

The MediaTek display driver in Android before 2016-07-05 on Android One devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28402240...

CVE-2016-3816

The MediaTek display driver in Android before 2016-07-05 on Android One devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28402240...

CVE-2016-3816

CVE-2016-3816 : Information disclosure in the MediaTek display driver on Android One devices, prior to 2016-07-05. A crafted application can access sensitive data via Mediaserver/display driver interaction. No exploitation details are provided beyond the Android bug reference. Mitigation: apply t...

Oracle Policy Automation (Oracle Web Determinations) Unspecified Remote Security Vulnerability (July 2013 CPU)

The version of Oracle Policy Automation installed on the remote host is 10.2.x prior to 10.2.0.124, 10.3.x prior to 10.3.1.61, or 10.4.x prior to 10.4.3. It is, therefore, affected by an unspecified remote vulnerability that can be exploited by remote authenticated users to disclose sensitive...

Juniper Junos CLI Privilege Escalation (JSA10634)

According to its self-reported version number, the remote Junos device is affected by a privilege escalation vulnerability. Certain combinations of Junos OS CLI commands and arguments have been found to be exploitable in a way that can allow root access to the operating system by a local user tha...

CVE-2014-3816

Juniper Junos 11.4 before 11.4R12, 12.1 before 12.1R11, 12.1X44 before 12.1X44-D35, 12.1X45 before 12.1X45-D30, 12.1X46 before 12.1X46-D20, 12.1X47 before 12.1X47-D10, 12.2 before 12.2R8-S2, 12.3 before 12.3R7, 13.1 before 13.1R4-S2, 13.2 before 13.2R5, 13.3 before 13.3R2-S2, and 14.1 before 14.1...

CVE-2014-3816

CVE-2014-3816 covers Juniper Junos OS privilege-escalation where remote authenticated users can gain privileges via unspecified CLI command/argument combinations. Affected releases include multiple branches across 11.4, 12.x, 13.x, and 14.x, with versions listed in the initial description. The co...

CVE-2013-3816

Oracle Policy Automation (Oracle Web Determinations) in Oracle Industry Applications is affected by CVE-2013-3816. Affected versions are Oracle Industry Applications 10.2.x prior to 10.2.0.124, 10.3.x prior to 10.3.1.61, and 10.4.x prior to 10.4.3. The vulnerability is described as unspecified an...

CVE-2012-3816

WinRadius Server 2009 allows remote attackers to cause a denial of service crash via a long password in an Access-Request packet...

CVE-2012-3816

CVE-2012-3816 affects WinRadius Server (notably the 2009 release). The issue is a denial-of-service caused by parsing a long password in an Access-Request packet, leading to a crash. Public sources (OpenVAS NASL, NVD) describe a DoS via Access-Request parsing, with CVSS v2 base score 7.8 (high) a...

CVE-2011-3816

CVE-2011-3816 affects WEBinsta mailing list manager 1.3e. A direct request to certain PHP files (e.g., install/install3.php) can disclose the installation path via an error message, constituting an information disclosure vulnerability. Documented impact is limited to exposure of installation path...