CVE-2019-3902

Mercurial before version 4.9 is affected by CVE-2019-3902. The issue arises from a flaw in path-checking logic that can be bypassed by using symlinks and subrepositories, allowing write access to files outside the repository. Affected product: Mercurial; root cause: bypass of path-checking when d...

CVE-2019-3902

A flaw was found in Mercurial before 4.9. It was possible to use symlinks and subrepositories to defeat Mercurial's path-checking logic and write files outside a repository...

CVE-2018-3902

CVE-2018-3902 affects Samsung SmartThings Hub STH-ETH-250 (firmware 0.20.17) with a buffer overflow in the video-core HTTP server’s camera Replace feature. The code copies the user-controlled JSON field url using memcpy without length checks, overflowing a stack buffer and enabling potential co...

Debian DSA-3902-1 : jabberd2 - security update

It was discovered that jabberd2, a Jabber instant messenger server, allowed anonymous SASL connections, even if disabled in the configuration. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...

Debian: Security Advisory (DSA-3902-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-3902

Cross-site scripting XSS vulnerability in the Web user interface UI in Intel Security ePO 5.1.3, 5.1.2, 5.1.1, and 5.1.0 allows authenticated users to inject malicious Java scripts via bypassing input validation...

CVE-2017-3902

CVE-2017-3902 affects Intel Security ePO 5.1.x (prior to 5.1.3 HF1110787). The OpenVAS/Nessus entries describe a reflected XSS in the Web UI of ePO’s computer management services that is exploitable by an authenticated user who is lured into a crafted URL. The vulnerability stems from improper va...

CVE-2016-3902

drivers/platform/msm/ipa/ipaqmiservice.c in the Qualcomm IPA driver in Android before 2016-10-05 on Nexus 5X and 6P devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 29953313 and Qualcomm internal bug CR 1044072...

CVE-2016-3902

CVE-2016-3902 affects Android’s Qualcomm IPA driver, specifically the ipa_qmi_service.c component, on Nexus 5X and 6P. The vulnerability, described as an information disclosure, could allow a crafted application to obtain sensitive information due to issues in the Qualcomm IPA driver prior to the...

[SECURITY] [DSA 3382-1] phpmyadmin security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3382-1 [email protected] https://www.debian.org/security/ Thijs Kinkhorst October 28, 2015 https://www.debian.org/security/faq -...

phpMyAdmin Multiple Vulnerabilities -01 (Jun 2015)

phpMyAdmin is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phpmyadmin:phpmyadmin";...

CVE-2015-3902

Multiple cross-site request forgery CSRF vulnerabilities in the setup process in phpMyAdmin 4.0.x before 4.0.10.10, 4.2.x before 4.2.13.3, 4.3.x before 4.3.13.1, and 4.4.x before 4.4.6.1 allow remote attackers to hijack the authentication of administrators for requests that modify the configurati...

CVE-2015-3902

Multiple cross-site request forgery CSRF vulnerabilities in the setup process in phpMyAdmin 4.0.x before 4.0.10.10, 4.2.x before 4.2.13.3, 4.3.x before 4.3.13.1, and 4.4.x before 4.4.6.1 allow remote attackers to hijack the authentication of administrators for requests that modify the configurati...

CVE-2015-3902

CVE-2015-3902 is a CSRF/XSRF vulnerability in the phpMyAdmin setup process. The issue affects PHPMyAdmin releases up to 4.0.x < 4.0.10.10, 4.2.x < 4.2.13.3, 4.3.x < 4.3.13.1, and 4.4.x

Updated phpmyadmin packages fix security vulnerabilities

Updated phpmyadmin package fixes security vulnerabilities: In phpMyAdmin before 4.2.13.3, by deceiving a user to click on a crafted URL, it is possible to alter the configuration file being generated with phpMyAdmin setup CVE-2015-3902. In phpMyAdmin before 4.2.13.3, a vulnerability in the API ca...

XSRF/CSRF vulnerability in phpMyAdmin setup.

PMASA-2015-2 Announcement-ID: PMASA-2015-2 Date: 2015-05-13 Summary XSRF/CSRF vulnerability in phpMyAdmin setup. Description By deceiving a user to click on a crafted URL, it is possible to alter the configuration file being generated with phpMyAdmin setup. Severity We consider this vulnerability...

Fedora Update for php-ZendFramework2 FEDORA-2015-3902

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-3902

The CVE-2014-3902 entry concerns Ameba for Android (CyberAgent) versions 3.x and 4.x prior to 4.5.0, where the app does not verify X.509 certificates from SSL servers. This permits MITM attackers to spoof servers and potentially exfiltrate sensitive data via crafted certificates. Affected version...

CVE-2013-3902

This CVE (CVE-2013-3902) affects Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 on 64-bit, via a use-after-free in the kernel-mode driver win32k.sys. The underlying issue is a vulnerability in win32k.sys that can be triggered locally to gain privileges. Impact is local privilege escalatio...

MS13-101: Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (2880430)

The remote Windows host has the following vulnerabilities : - Multiple errors exist in the Windows kernel-mode drivers that could allow privilege escalation and arbitrary code execution. CVE-2013-3899, CVE-2013-3902, CVE-2013-5058 - An error exists in the way the Windows kernel-mode driver parses...