107 matches found
USN-3924-1: mod_auth_mellon vulnerabilities
It was discovered that modauthmellon incorrectly handled certain requests. An attacker could possibly use this issue to redirect a user to a malicious URL. CVE-2019-3877 It was discovered that modauthmellon incorrectly handled certain requests. An attacker could possibly use this issue to access...
CVE-2019-3878
The CVE-2019-3878 issue affects mod_auth_mellon for Apache before v0.14.2. When Apache runs as a reverse proxy and mod_auth_mellon is set to require valid-user, an attacker can bypass authentication by sending specific HTTP headers used in SAML ECP (non-browser) flows. The connected advisories in...
[SECURITY] [DSA 4414-1] libapache2-mod-auth-mellon security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4414-1 [email protected] https://www.debian.org/security/ Thijs Kinkhorst March 23, 2019 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4414-1] libapache2-mod-auth-mellon security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4414-1 [email protected] https://www.debian.org/security/ Thijs Kinkhorst March 23, 2019 https://www.debian.org/security/faq -...
Debian: Security Advisory (DSA-4414-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2018-3878
Multiple exploitable buffer overflow vulnerabilities exist in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17. The video-core process incorrectly extracts fields from a user-controlled JSON payload, leading to a buff...
CVE-2018-3878
Multiple exploitable buffer overflow vulnerabilities exist in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17. The video-core process incorrectly extracts fields from a user-controlled JSON payload, leading to a buff...
CVE-2018-3878
Samsung SmartThings Hub STH-ETH-250 with firmware 0.20.17 contains multiple buffer overflow vulnerabilities in the video-core HTTP server credentials handler. Specifically, CVE-2018-3873 through CVE-2018-3878 arise from user-controlled JSON, where a strncpy copies a string without length checks, ...
Samsung SmartThings Hub video-core credentials Code Execution Vulnerability(CVE-2018-3873 - CVE-2018-3878)
Summary Multiple exploitable buffer overflow vulnerabilities exist in the credentials handler of video-core's HTTP server of Samsung SmartThings Hub. The video-core process incorrectly extracts fields from a user-controlled JSON payload, leading to a buffer overflow on the stack. An attacker can...
CVE-2012-3878
This CVE entry is rejected/not used and does not represent an active vulnerability entry.
Debian DSA-3878-1 : zziplib - security update
Agostino Sarubbo discovered multiple vulnerabilities in zziplib, a library to access Zip archives, which could result in denial of service and potentially the execution of arbitrary code if a malformed archive is processed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...
Cisco NX-OS Telnet Packet Header Handling Remote DoS (cisco-sa-20170315-nss)
According to its version and configuration, the Cisco NX-OS software running on the remote device is affected by a denial of service vulnerability in the Telnet remote login functionality due to improper validation of Telnet packet headers. An unauthenticated, remote attacker can exploit this, vi...
CVE-2017-3878
Cisco NX-OS Telnet login on Cisco Nexus 9000 Series Switches is affected by a Denial of Service in the Telnet remote login path. The root cause cited by Cisco is incomplete input validation of Telnet packet headers, which can cause the Telnet login process to restart or terminate, with no impact ...
Cisco Nexus 9000 Series Switches Telnet Login Denial of Service Vulnerability (cisco-sa-20170315-nss)
A vulnerability in the Telnet remote login functionality of Cisco NX-OS Software running on Cisco Nexus 9000 Series Switches could allow an unauthenticated, remote attacker to cause a Telnet process used for login to terminate unexpectedly and the login attempt to fail. There is no impact to user...
CVE-2016-3878
decoder/ih264dapi.c in mediaserver in Android 6.x before 2016-09-01 mishandles the case of decoding zero MBs, which allows remote attackers to cause a denial of service device hang or reboot via a crafted media file, aka internal bug 29493002...
CVE-2016-3878
Summary: CVE-2016-3878 affects Android 6.x Mediaserver, specifically decoder/ih264d_api.c in mediaserver, where decoding zero MBs is mishandled. This can allow a remote attacker to trigger a denial of service (device hang or reboot) via a crafted media file. Root cause (as stated): mishandling of...
CVE-2016-3878
decoder/ih264dapi.c in mediaserver in Android 6.x before 2016-09-01 mishandles the case of decoding zero MBs, which allows remote attackers to cause a denial of service device hang or reboot via a crafted media file, aka internal bug 29493002...
Android 5.0 screen recording Vulnerability, CVE-2 0 1 5-3 8 7 8 threat early warning-vulnerability warning-the black bar safety net
The first Chapter exploits the principles of One, Android 5.0 new features Android 5.0 added screen recording interface, no special permissions, using the following system APIS to realize screen recording function: ! To initiate a recording request, the system POPs up the following message box...
CVE-2015-3878
The CVE-2015-3878 issue affects the Media Projection component in Android 5.x (before 5.1.1 LMY48T) and Android 6.0 (before the 2015-10-01 patch). A vulnerability arises when an application uses an excessively long name, which can bypass the screen-recording warning and allow a local attacker to ...