Lucene search
+L

134 matches found

OSV
OSV
added 2019/02/06 12:00 a.m.7 views

UBUNTU-CVE-2019-3820

It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical access to a locked workstation could invoke certain keyboard shortcuts, and potentially other actions...

4.8CVSS6.1AI score0.00498EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
added 2019/02/06 12:00 a.m.31 views

CVE-2019-3820

It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physical access to a locked workstation could invoke certain keyboard shortcuts, and potentially other actions...

4.8CVSS6.3AI score0.00498EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2018/11/15 12:00 a.m.51 views

Ubuntu 14.04 LTS : Linux kernel (Azure) vulnerabilities (USN-3820-3)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3820-3 advisory. Felix Wilhelm discovered that the Xen netback driver in the Linux kernel did not properly perform input validation in some situations. An attacker could...

8.4CVSS7.4AI score0.00552EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2018/11/15 12:00 a.m.65 views

Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-3820-1)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3820-1 advisory. Felix Wilhelm discovered that the Xen netback driver in the Linux kernel did not properly perform input validation in some situations. An attacker could...

8.4CVSS7.3AI score0.00552EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2018/11/15 12:00 a.m.54 views

Ubuntu 16.04 LTS : Linux kernel (HWE) vulnerabilities (USN-3820-2)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3820-2 advisory. USN-3820-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.04 LTS. This update provides the corresponding updates for the Linux Hardware Enableme...

8.4CVSS7.4AI score0.00552EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2018/11/15 12:00 a.m.36 views

Ubuntu: Security Advisory (USN-3820-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.4CVSS7.6AI score0.00552EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2018/11/15 12:00 a.m.51 views

Ubuntu: Security Advisory (USN-3820-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.4CVSS7.6AI score0.00552EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2018/11/15 12:00 a.m.38 views

Ubuntu: Security Advisory (USN-3820-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.4CVSS7.6AI score0.00552EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2018/02/06 12:00 a.m.33 views

Elastic Kibana 'CVE-2018-3820' Cross-Site Scripting (XSS) Vulnerability - Linux

Elastic Kibana versions have a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

6.1CVSS6.1AI score0.00842EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2018/02/06 12:00 a.m.29 views

Elastic Kibana 'CVE-2018-3820' Cross-Site Scripting (XSS) Vulnerability - Windows

Elastic Kibana versions have a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

6.1CVSS6.1AI score0.00842EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2017/03/28 12:00 a.m.28 views

Debian DSA-3820-1 : gst-plugins-good1.0 - security update

Hanno Boeck discovered multiple vulnerabilities in the GStreamer media framework and its codecs and demuxers, which may result in denial of service or the execution of arbitrary code if a malformed media file is opened. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

7.5CVSS7.1AI score0.04717EPSS
SaveExploits0References7
OpenVAS
OpenVAS
added 2017/03/27 12:00 a.m.28 views

Debian Security Advisory DSA 3820-1 (gst-plugins-good1.0 - security update)

Hanno Boeck discovered multiple vulnerabilities in the GStreamer media framework and its codecs and demuxers, which may result in denial of service or the execution of arbitrary code if a malformed media file is opened. OpenVAS Vulnerability Test $Id: deb3820.nasl 6607 2017-07-07 12:04:25Z cfisch...

5CVSS0.3AI score0.04717EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2017/03/26 12:00 a.m.31 views

Debian: Security Advisory (DSA-3820-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.7AI score0.04717EPSS
SaveExploits0References3
CVE
CVE
added 2017/02/03 7:24 a.m.70 views

CVE-2017-3820

CVE-2017-3820 affects Cisco ASR 1000 Series Aggregation Services Routers running Cisco IOS XE (releases 3.13.6S, 3.16.2S, or 3.17.1S). The vulnerability arises from an incorrect initialized variable in SNMP handling, allowing an authenticated, remote attacker to trigger high CPU usage and DoS via...

6.8CVSS6.4AI score0.02804EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2016/08/05 8:59 p.m.27 views

CVE-2016-3820

The ih264d decoder in mediaserver in Android 6.x before 2016-08-01 mishandles slice numbers, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 28673410...

9.8CVSS9.5AI score0.01339EPSS
SaveExploits0References3
OSV
OSV
added 2016/08/05 8:59 p.m.7 views

UBUNTU-CVE-2016-3820

The ih264d decoder in mediaserver in Android 6.x before 2016-08-01 mishandles slice numbers, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 28673410...

9.8CVSS7.7AI score0.01339EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2016/08/05 8:59 p.m.38 views

CVE-2016-3820

The ih264d decoder in mediaserver in Android 6.x before 2016-08-01 mishandles slice numbers, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 28673410...

9.8CVSS7.3AI score0.01339EPSS
SaveExploits0References3
CVE
CVE
added 2016/08/05 8:00 p.m.61 views

CVE-2016-3820

The CVE-2016-3820 issue affects the ih264d decoder in Mediaserver (Android 6.x). The root cause is the decoder mishandling slice numbers, enabling a remote attacker to craft a media file that could trigger arbitrary code execution or memory corruption within Mediaserver. Public details confirm im...

9.8CVSS8.8AI score0.01339EPSS
SaveExploits0References3Affected Software1
android
android
added 2016/08/01 12:00 a.m.32 views

CVE-2016-3820

The ih264d decoder in mediaserver in Android 6.x before 2016-08-01 mishandles slice numbers, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 28673410...

7.5CVSS8.7AI score0.01339EPSS
SaveExploits0References3Affected Software1
OpenVAS
OpenVAS
added 2015/10/08 12:00 a.m.27 views

Oracle: Security Advisory (ELSA-2007-0905)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS6.7AI score0.02562EPSS
SaveExploits0References2
Rows per page
Query Builder