118 matches found
CVE-2021-3869
corenlp is vulnerable to Improper Restriction of XML External Entity Reference...
CVE-2021-3869
The CVE-2021-3869 entry concerns Stanford CoreNLP (corenlp) and is caused by improper restriction of XML External Entity (XXE) references. Public sources in the connected documents confirm this XXE vulnerability affecting CoreNLP, with references indicating potential exposure/read access issues v...
CentOS 7 : pcp (RHSA-2020:3869)
The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3869 advisory. - A Improper Control of Generation of Code vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Lin...
Oracle Linux 7 : pcp (ELSA-2020-3869)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-3869 advisory. 4.3.2-12 - Fix pcp-atop dynamic memory initialization issues BZ 1818710 4.3.2-8 - Fix rpm %post privilege escalation CVEs BZs 1815249, 1815528 - Resolv...
RHEL 7 : pcp (RHSA-2020:3869)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3869 advisory. Performance Co-Pilot PCP is a suite of tools, services, and libraries for acquisition, archiving, and analysis of system-level performance...
CVE-2020-3869
CVE-2020-3869 describes an issue in the handling of the local user’s self-view in FaceTime on Apple devices. The root cause is a logic flaw that could cause the local user’s camera self-view to show an incorrect camera when a remote FaceTime user is involved. Impact stated by sources: a remote Fa...
CVE-2018-3869
CVE-2018-3869 is rejected/not used and does not represent an active vulnerability entry.
CVE-2019-3869
When running Tower before 3.4.3 on OpenShift or Kubernetes, application credentials are exposed to playbook job runs via environment variables. A malicious user with the ability to write playbooks could use this to gain administrative privileges...
CVE-2019-3869
When running Tower before 3.4.3 on OpenShift or Kubernetes, application credentials are exposed to playbook job runs via environment variables. A malicious user with the ability to write playbooks could use this to gain administrative privileges...
CVE-2019-3869
CVE-2019-3869 affects Ansible Tower 3.x prior to 3.3.5 (and 3.4.x prior to 3.4.3) when running in OpenShift/Kubernetes, where Tower's credentials are exposed to playbook job runs via environment variables. This exposure could allow a user who can write playbooks to escalate to administrative priv...
CVE-2019-3869
When running Tower on OpenShift or Kubernetes, application credentials are exposed to playbook job runs via environment variables. A malicious user with the ability to write playbooks could use this to gain administrative privileges...
Debian: Security Advisory (DSA-3869-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2017-3869
CVE-2017-3869 affects Cisco Prime Infrastructure APIs. The issue arises from insufficient RBAC, allowing an authenticated, low-privilege user to access APIs that should be restricted to higher-privilege users, potentially viewing or modifying system configuration. Affected releases are noted as 3...
CVE-2017-3869
An API Credentials Management vulnerability in the APIs for Cisco Prime Infrastructure could allow an authenticated, remote attacker to access an API that should be restricted to a privileged user. The attacker needs to have valid credentials. More Information: CSCuy36192. Known Affected Releases...
CVE-2016-3869
CVE-2016-3869 pertains to the Broadcom Wi‑Fi driver in Android prior to 2016-09-05 on Nexus devices (Nexus 5/6/6P/9/Nexus Player/Pixel C). The vulnerability enables elevation of privilege via a crafted application, exploiting Android internal bug 29009982 and Broadcom internal bug RB#96070. Impac...
Oracle: Security Advisory (ELSA-2009-1584)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-3869
libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 23036083...
CVE-2015-3869
libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 23036083...
CVE-2015-3869
Affected software/impacted component: Android’s media processing stack, specifically libstagefright in versions prior to 5.1.1 LMY48T. Vulnerability: A crafted media file can trigger memory corruption in mediaserver, enabling remote code execution or a denial of service. Root cause as stated: mem...