Ubuntu: Security Advisory (USN-3895-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-3895

An exploitable buffer overflow vulnerability exists in the /cameras/XXXX/clips handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 Firmware version 0.20.17. The strncpy call overflows the destination buffer, which has a size of 52 bytes. An attacker can send an arbitrarily...

CVE-2018-3895

An exploitable buffer overflow vulnerability exists in the /cameras/XXXX/clips handler of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 Firmware version 0.20.17. The strncpy call overflows the destination buffer, which has a size of 52 bytes. An attacker can send an arbitrarily...

CVE-2018-3895

The CVE-2018-3895 family concerns a stack buffer overflow in Samsung SmartThings Hub STH-ETH-250 (video-core HTTP server) firmware 0.20.17. The vulnerable code uses strncpy(stack_buffer, json_parameter, strlen(json_parameter)); where the destination buffer is 52 bytes, and the json_parameter come...

Debian DSA-3895-1 : flatpak - security update

It was discovered that Flatpak, an application deployment framework for desktop apps insufficiently restricted file permissinons in third-party repositories, which could result in privilege escalation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

CVE-2016-3895

Integer overflow in the Region::unflatten function in libs/ui/Region.cpp in mediaserver in Android 6.x before 2016-09-01 and 7.0 before 2016-09-01 allows attackers to obtain sensitive information via a crafted application, aka internal bug 29983260...

CVE-2016-3895

CVE-2016-3895 is an information-disclosure vulnerability in Android Mediaserver. The issue arises from an integer overflow in Region::unflatten (libs/ui/Region.cpp) which could allow a crafted file to cause memory corruption and expose sensitive data. Affected products are Android 6.x and 7.0 pri...

CVE-2014-3895

CVE-2014-3895 affects I-O DATA network cameras (TS-WLCAM 1.06 and earlier; TS-WLCAM/V 1.06 and earlier; TS-WPTCAM 1.08 and earlier; TS-PTCAM 1.08 and earlier; TS-PTCAM/POE 1.08 and earlier; TS-WLC2 1.02 and earlier) where an authentication bypass allows remote attackers to access configuration an...

CVE-2013-3895

CVE-2013-3895 affects Microsoft SharePoint Server 2007 SP3 and SharePoint 2010 SP1/SP2. Described as a parameter-injection vulnerability that enables remote attackers to perform clickjacking via a crafted web page. Connected sources reference MS13-084 as the security update addressing these issue...

Microsoft SharePoint Foundation Remote Code Execution vulnerability (2885089)

This host is missing an important security update according to Microsoft Bulletin MS13-084. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

Microsoft Office Web Apps Remote Code Execution vulnerability (2885089)

This host is missing an important security update according to Microsoft Bulletin MS13-084. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

MS13-084: Vulnerabilities in Microsoft SharePoint Server Could Allow Remote Code Execution (2885089)

The versions of Office SharePoint Server, SharePoint Server, Windows SharePoint Services, SharePoint Foundation, or Office Web Apps installed on the remote host are affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the way that Microsoft Office Services and...

Microsoft Office Services Remote Code Execution vulnerability (2885089)

This host is missing an important security update according to Microsoft Bulletin MS13-084. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

Microsoft SharePoint Server Parameter Injection (MS13-084; CVE-2013-3895)

An elevation of privilege vulnerability exists in Microsoft SharePoint Server...

CVE-2012-3895

Cisco IOS 15.0 through 15.3 allows remote authenticated users to cause a denial of service device crash via an MVPNv6 update, aka Bug ID CSCty89224...

Mandriva Linux Security Advisory : ffmpeg (MDVSA-2012:075)

Multiple vulnerabilities has been found and corrected in ffmpeg : The Matroska format decoder in FFmpeg does not properly allocate memory, which allows remote attackers to execute arbitrary code via a crafted file CVE-2011-3362, CVE-2011-3504. cavsdec.c in libavcodec in FFmpeg allows remote...

Gentoo Security Advisory GLSA 201111-05 (chromium v8)

The remote host is missing updates announced in advisory GLSA 201111-05. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Google Chrome Multiple Vulnerabilities - November11 (Mac OS X)

The host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnnov11macosx.nasl 7044 2017-09-01 11:50:59Z teissa $ Google Chrome Multiple Vulnerabilities - November11 Mac OS X Authors: Rachana Shetty Copyright: Copyright c...

CVE-2011-3895

Heap-based buffer overflow in the Vorbis decoder in Google Chrome before 15.0.874.120 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted stream...

CVE-2011-3895

Heap-based buffer overflow in the Vorbis decoder in Google Chrome before 15.0.874.120 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted stream...