119 matches found
CVE-2019-3840
A NULL pointer dereference flaw was discovered in libvirt before version 5.0.0 in the way it gets interface information through the QEMU agent. An attacker in a guest VM can use this flaw to crash libvirtd and cause a denial of service...
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : OpenSSL vulnerabilities (USN-3840-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3840-1 advisory. Samuel Weiser discovered that OpenSSL incorrectly handled DSA signing. An attacker could possibly use this issue to perform a...
CVE-2018-3840
A denial-of-service vulnerability exists in the Pixar Renderman IT Display Service 21.6 0x67. The vulnerability is present in the parsing of a network packet without proper validation of the packet. The data read by the application is not validated, and its use can lead to a null pointer...
CVE-2018-3840
The CVE-2018-3840 issue affects Pixar Renderman IT Display Service 21.6. It stems from improper validation during parsing of a network packet to the IT Display Service, specifically when handling the 0x67 command; data read from the socket may be dereferenced without validation, causing a null po...
Vulnerability Spotlight: TALOS-2018-0523-24 - Multiple Vulnerabilities in Pixars Renderman application
Vulnerabilities discovered by Tyler Bohan from Talos Overview Talos is disclosing two denial-of-service vulnerabilities in Pixar’s Renderman application. Renderman is a rendering application used in animation and film production. It is widely used for advanced rendering and shading in many...
CVE-2015-3840
CVE-2015-3840 affects Android 5.1.1 and earlier via the MessageStatusReceiver service in the AndroidManifest.xml. The vulnerability lets local users alter the sent/received status of SMS and MMS messages without requiring the WRITE_SMS permission. This is a local-privilege-impacting issue affecti...
Debian DSA-3840-1 : mysql-connector-java - security update
Thijs Alkemade discovered that unexpected automatic deserialisation of Java objects in the MySQL Connector/J JDBC driver may result in the execution of arbitary code. For additional details, please refer to the advisory at https://www.computest.nl/advisories/CT-2017-0425MySQL-Connector-J.txt...
Debian Security Advisory DSA 3840-1 (mysql-connector-java - security update)
Thijs Alkemade discovered that unexpected automatic deserialisation of Java objects in the MySQL Connector/J JDBC driver may result in the execution of arbitrary code. For additional details, please refer to the advisory at https://www.computest.nl/advisories/CT-2017-0425MySQL-Connector-J.txt...
Debian: Security Advisory (DSA-3840-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2017-3840
CVE-2017-3840 is a open redirect vulnerability in the web interface of Cisco Secure Access Control System (ACS). An unauthenticated remote attacker could cause a user to be redirected to a malicious URL due to improper input validation of HTTP parameters. The issue affects Cisco ACS and is docume...
CVE-2016-3840
CVE-2016-3840 affects Conscrypt in Android: versions 4.x up to 4.4.4, 5.0.x up to 5.0.2, 5.1.x up to 5.1.1, and 6.x up to 2016-08-05 fail to properly identify session reuse, enabling remote arbitrary code execution via unspecified vectors. The NVD entry mirrors this description with a high/critic...
Oracle: Security Advisory (ELSA-2010-0825)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Update : libmariadbclient16 (openSUSE-SU-2011:0743-1)
MariaDB was updated to version 5.1.55 to fix numerous bugs and security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libmariadbclient16-4830. The text description of this plugin is ...
openSUSE Security Update : libmysqlclusterclient16 (openSUSE-SU-2011:0799-1)
This update fixes the following security issue : - 676974: mysql-cluster: security issues fixed in MySQL 5.1.51 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libmysqlclusterclient16-4837. Th...
openSUSE Security Update : libmysqlclient-devel (openSUSE-SU-2011:1250-1)
This mysql update fixes the following security issues - CVE-2010-3833: CVSS v2 Base Score: 4.0 moderate AV:N/AC:L/Au:S/C:N/I:N/A:P: Resource Management Errors CWE-399 - CVE-2010-3834: CVSS v2 Base Score: 4.0 moderate AV:N/AC:L/Au:S/C:N/I:N/A:P: Insufficient Information CWE-noinfo - CVE-2010-3835:...
openSUSE Security Update : libmariadbclient16 (openSUSE-SU-2011:0743-1)
MariaDB was updated to version 5.1.55 to fix numerous bugs and security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libmariadbclient16-4830. The text description of this plugin is ...
openSUSE Security Update : libmysqlclient-devel (openSUSE-SU-2011:1250-1)
This mysql update fixes the following security issues - CVE-2010-3833: CVSS v2 Base Score: 4.0 moderate AV:N/AC:L/Au:S/C:N/I:N/A:P: Resource Management Errors CWE-399 - CVE-2010-3834: CVSS v2 Base Score: 4.0 moderate AV:N/AC:L/Au:S/C:N/I:N/A:P: Insufficient Information CWE-noinfo - CVE-2010-3835:...
openSUSE Security Update : libmysqlclusterclient16 (openSUSE-SU-2011:0774-1)
This update fixes the following security issue : - 676974: mysql-cluster: security issues fixed in MySQL 5.1.51 This update also fixes the following non-security issue : - 635645: mysql init script fails to start when SELinux is enabled %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
CVE-2014-3840
CVE-2014-3840 affects Mayan EDMS 0.13, with multiple stored XSS vulnerabilities in apps/common/templates/calculate_form_title.html. The issue allows remote authenticated users to inject arbitrary script/HTML via several vectors: (1) a tag, (2) the title of a source in a Staging folder, (3) the Na...
