Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : OpenSSL vulnerabilities (USN-3840-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3840-1 advisory. Samuel Weiser discovered that OpenSSL incorrectly handled DSA signing. An attacker could possibly use this issue to perform a...

CVE-2018-3840

The CVE-2018-3840 issue affects Pixar Renderman IT Display Service 21.6. It stems from improper validation during parsing of a network packet to the IT Display Service, specifically when handling the 0x67 command; data read from the socket may be dereferenced without validation, causing a null po...

CVE-2018-3840

A denial-of-service vulnerability exists in the Pixar Renderman IT Display Service 21.6 0x67. The vulnerability is present in the parsing of a network packet without proper validation of the packet. The data read by the application is not validated, and its use can lead to a null pointer...

Vulnerability Spotlight: TALOS-2018-0523-24 - Multiple Vulnerabilities in Pixars Renderman application

Vulnerabilities discovered by Tyler Bohan from Talos Overview Talos is disclosing two denial-of-service vulnerabilities in Pixar’s Renderman application. Renderman is a rendering application used in animation and film production. It is widely used for advanced rendering and shading in many...

CVE-2015-3840

CVE-2015-3840 affects Android 5.1.1 and earlier via the MessageStatusReceiver service in the AndroidManifest.xml. The vulnerability lets local users alter the sent/received status of SMS and MMS messages without requiring the WRITE_SMS permission. This is a local-privilege-impacting issue affecti...

Debian DSA-3840-1 : mysql-connector-java - security update

Thijs Alkemade discovered that unexpected automatic deserialisation of Java objects in the MySQL Connector/J JDBC driver may result in the execution of arbitary code. For additional details, please refer to the advisory at https://www.computest.nl/advisories/CT-2017-0425MySQL-Connector-J.txt...

Debian Security Advisory DSA 3840-1 (mysql-connector-java - security update)

Thijs Alkemade discovered that unexpected automatic deserialisation of Java objects in the MySQL Connector/J JDBC driver may result in the execution of arbitrary code. For additional details, please refer to the advisory at https://www.computest.nl/advisories/CT-2017-0425MySQL-Connector-J.txt...

Debian: Security Advisory (DSA-3840-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-3840

CVE-2017-3840 is a open redirect vulnerability in the web interface of Cisco Secure Access Control System (ACS). An unauthenticated remote attacker could cause a user to be redirected to a malicious URL due to improper input validation of HTTP parameters. The issue affects Cisco ACS and is docume...

CVE-2016-3840

CVE-2016-3840 affects Conscrypt in Android: versions 4.x up to 4.4.4, 5.0.x up to 5.0.2, 5.1.x up to 5.1.1, and 6.x up to 2016-08-05 fail to properly identify session reuse, enabling remote arbitrary code execution via unspecified vectors. The NVD entry mirrors this description with a high/critic...

Oracle: Security Advisory (ELSA-2010-0825)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : libmysqlclient-devel (openSUSE-SU-2011:1250-1)

This mysql update fixes the following security issues - CVE-2010-3833: CVSS v2 Base Score: 4.0 moderate AV:N/AC:L/Au:S/C:N/I:N/A:P: Resource Management Errors CWE-399 - CVE-2010-3834: CVSS v2 Base Score: 4.0 moderate AV:N/AC:L/Au:S/C:N/I:N/A:P: Insufficient Information CWE-noinfo - CVE-2010-3835:...

openSUSE Security Update : libmysqlclusterclient16 (openSUSE-SU-2011:0774-1)

This update fixes the following security issue : - 676974: mysql-cluster: security issues fixed in MySQL 5.1.51 This update also fixes the following non-security issue : - 635645: mysql init script fails to start when SELinux is enabled %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

openSUSE Security Update : libmysqlclusterclient16 (openSUSE-SU-2011:0799-1)

This update fixes the following security issue : - 676974: mysql-cluster: security issues fixed in MySQL 5.1.51 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libmysqlclusterclient16-4837. Th...

openSUSE Security Update : libmariadbclient16 (openSUSE-SU-2011:0743-1)

MariaDB was updated to version 5.1.55 to fix numerous bugs and security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libmariadbclient16-4830. The text description of this plugin is ...

openSUSE Security Update : libmysqlclient-devel (openSUSE-SU-2011:1250-1)

This mysql update fixes the following security issues - CVE-2010-3833: CVSS v2 Base Score: 4.0 moderate AV:N/AC:L/Au:S/C:N/I:N/A:P: Resource Management Errors CWE-399 - CVE-2010-3834: CVSS v2 Base Score: 4.0 moderate AV:N/AC:L/Au:S/C:N/I:N/A:P: Insufficient Information CWE-noinfo - CVE-2010-3835:...

openSUSE Security Update : libmariadbclient16 (openSUSE-SU-2011:0743-1)

MariaDB was updated to version 5.1.55 to fix numerous bugs and security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libmariadbclient16-4830. The text description of this plugin is ...

CVE-2014-3840

CVE-2014-3840 affects Mayan EDMS 0.13, with multiple stored XSS vulnerabilities in apps/common/templates/calculate_form_title.html. The issue allows remote authenticated users to inject arbitrary script/HTML via several vectors: (1) a tag, (2) the title of a source in a Staging folder, (3) the Na...

CVE-2014-3840

creationtimestamp| type| source ---|---|--- 2014-05-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33493...

CentOS 5 / 6 : java-1.6.0-openjdk (CESA-2013:1505)

Updated java-1.6.0-openjdk packages that fix various security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...