CVE-2018-3867

CVE-2018-3867 describes a stack-based buffer overflow in Samsung SmartThings Hub (STH-ETH-250) video-core HTTP server. The vulnerability exists in the samsungWifiScan callback handling during camera discovery, where the hub constructs a POST to a callback URL using an unconstrained camera respons...

Samsung SmartThings Hub video-core samsungWifiScan Callback Code Execution Vulnerability(CVE-2018-3867)

Summary An exploitable stack-based buffer overflow vulnerability exists in the samsungWifiScan callback notification of video-core's HTTP server of Samsung SmartThings Hub. The video-core process incorrectly handles the answer received from a smart camera, leading to a buffer overflow on the stac...

marinetraffic.com XSS vulnerability

Vulnerable URL: http://www.marinetraffic.com/en/ais/details%22%27%2D%2D%21 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3867 VIP website status:| Yes Coordinated Disclosure Timeline: Description| Value ---|---...

Debian DSA-3867-1 : sudo - security update

The Qualys Security team discovered that sudo, a program designed to provide limited super user privileges to specific users, does not properly parse '/proc/pid/stat' to read the device number of the tty from field 7 ttynr. A sudoers user can take advantage of this flaw on an SELinux-enabled syst...

Debian Security Advisory DSA 3867-1 (sudo - security update)

The Qualys Security team discovered that sudo, a program designed to provide limited super user privileges to specific users, does not properly parse OpenVAS Vulnerability Test $Id: deb3867.nasl 6607 2017-07-07 12:04:25Z cfischer $ Auto-generated from advisory DSA 3867-1 using nvtgen 1.0 Script...

CVE-2013-3867

...

CVE-2013-3867

CVE-2013-3867 entry rejected/not used; does not represent an active vulnerability.

CVE-2017-3867

A vulnerability in the Border Gateway Protocol BGP Bidirectional Forwarding Detection BFD implementation of Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to bypass the access control list ACL for specific TCP and UDP traffic. More Information:...

CVE-2017-3867

CVE-2017-3867 affects Cisco Adaptive Security Appliance (ASA) Software. The vulnerability lies in the BGP/BFD implementation, where unauthenticated remote attackers could bypass ACLs for specific TCP/UDP traffic by sending packets with targeted destination ports. Impact described in the records i...

CVE-2016-3867

CVE-2016-3867 describes an elevation-of-privilege flaw in the Qualcomm IPA driver used by Android on Nexus 5X and 6P, prior to 2016-09-05. A crafted application could gain privileges, per CNVD-2016-07559 and the CVE entry. The root cause and exact exploitation details are not provided in the docu...

CVE-2015-3867

CVE-2015-3867 is a vulnerability in Android’s libstagefright prior to 5.1.1 LMY48T where processing a specially crafted media file can cause memory corruption and remote code execution in the mediaserver service. The root cause is tied to libstagefright’s handling of media data, enabling an attac...

CVE-2015-3867

libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 23213430...

Nexus Security Bulletin - October 2015Stay organized with collectionsSave and categorize content based on your preferences.

We have released a security update to Nexus devices through an over-the-air OTA update as part of our Android Security Bulletin Monthly Release process. The Nexus firmware images have also been released to the Google Developer site. Builds LMY48T or later such as LMY48W and Android M with Securit...

CVE-2015-3867

libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 23213430...

Sun Java JRE getSoundbank file:// URI Buffer Overflow

No description provided by source. $Id: javagetsoundbankbof.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and term...

openSUSE Security Update : puppet (openSUSE-SU-2012:0891-1)

puppet was updated to fix various security issues: CVEs fixed : - bnc770828 - CVE-2012-3864: puppet: authenticated clients can read arbitrary files via a flaw in puppet master - bnc770829 - CVE-2012-3865: puppet: arbitrary file delete / Denial of Service on Puppet Master by authenticated clients ...

CVE-2014-3867

The CVE-2014-3867 entry concerns IBM Sametime Meeting Server versions 8.x up to 8.5.2.1 and 9.x up to 9.0.0.1 that do not set the HTTPOnly flag for an unspecified cookie in an HTTPS session. This omission can allow remote attackers to access potentially sensitive data via script access to the coo...

Fedora Update for puppet FEDORA-2013-4187

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for puppet FEDORA-2013-4187

Check for the Version of puppet OpenVAS Vulnerability Test Fedora Update for puppet FEDORA-2013-4187 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Low: puppet

Issue Overview: Directory traversal vulnerability in lib/puppet/reports/store.rb in Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, when Delete is enabled in auth.conf, allows remote authenticated users to delete arbitrary files on the puppet master server via a...