148 matches found
CVE-2022-3880
CVE-2022-3880 affects the WordPress Anti Hacker plugin prior to version 4.20. Root cause: lack of proper authorization and CSRF protection in an AJAX action (antihacker_install_plugin), enabling any authenticated user (e.g., a subscriber) to install and activate arbitrary plugins from wordpress.o...
CVE-2022-3880 AntiHacker < 4.20 - Subscriber+ Arbitrary Plugin Installation
The Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan WordPress plugin before 4.20 does not have proper authorisation and CSRF in an AJAX action, allowing any authenticated users, such as subscriber to call it and install and activate arbitrary plugins fro...
CVE-2022-3880 AntiHacker < 4.20 - Subscriber+ Arbitrary Plugin Installation
The Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan WordPress plugin before 4.20 does not have proper authorisation and CSRF in an AJAX action, allowing any authenticated users, such as subscriber to call it and install and activate arbitrary plugins fro...
Ubuntu: Security Advisory (USN-3880-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security Bulletin: Vulnerability CVE-2019-3880 in Samba affects IBM i
Summary Samba is supported on IBM i. IBM i has addressed the applicable CVE. This security bulletin has been updated, on June 21, 2019, as an additional IBM i PTF is available for IBM i 7.4. Vulnerability Details CVEID: CVE-2019-3880 DESCRIPTION: Samba could allow a remote authenticated attacker ...
CVE-2021-3880
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2021. Notes: none...
CVE-2021-3880
CVE-2021-3880 is rejected/not used and does not represent an active vulnerability entry.
SUSE: Security Advisory (SUSE-SU-2019:1040-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2019:1194-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-3880
An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 6.1.2, iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, macOS Catalina 10.15.3, Security Update 2020-001 Mojave, Security Update 2020-001 High Sierra. Processing a maliciously crafted image may lead to...
CVE-2020-3880
The CVE-2020-3880 entry concerns an out-of-bounds read in image processing that Apple fixed via improved input validation. Affected platforms include watchOS 6.1.2; iOS 13.3.1 and iPadOS 13.3.1; tvOS 13.3.1; macOS Catalina 10.15.3; Security Update 2020-001 Mojave; Security Update 2020-001 High Si...
Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2019-2018)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2019-1689)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
NewStart CGSL CORE 5.05 / MAIN 5.05 : samba Vulnerability (NS-SA-2019-0244)
The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has samba packages installed that are affected by a vulnerability: - A flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry service API. An unprivileged attacker could use this flaw to crea...
Amazon Linux AMI : samba (ALAS-2019-1329)
A flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry service API. An unprivileged attacker could use this flaw to create a new registry hive file anywhere they have unix permissions which could lead to creation of a new file in the Samba share. CVE-2019-388...
Medium: samba
Issue Overview: A flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry service API. An unprivileged attacker could use this flaw to create a new registry hive file anywhere they have unix permissions which could lead to creation of a new file in the Samba...
samba security, bug fix, and enhancement update
4.10.4-1 - resolves: 1712378 - Fix smbspool CUPS backend - resolves: 1696612 - Fix 'net ads join -U admin@parentdomain' 4.10.4-0 - related: 1638001 - Rebase to Samba version 4.10.4 - resolves: 1597298 - Build Samba with python3 - resolves: 1658558 - Add 'net ads leave --keep-account' option -...
Amazon Linux 2 : samba (ALAS-2019-1351)
A flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry service API. An unprivileged attacker could use this flaw to create a new registry hive file anywhere they have unix permissions which could lead to creation of a new file in the Samba share.CVE-2019-3880...
RHEL 8 : samba (RHSA-2019:3582)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3582 advisory. Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol, which allo...