145 matches found
OESA-2022-1778 openvswitch security update
Open vSwitch is a production quality, multilayer virtual switch licensed under the open source Apache 2.0 license. Security Fixes: A memory leak was found in Open vSwitch OVS during userspace IP fragmentation processing. An attacker could use this flaw to potentially exhaust available memory by...
Ubuntu 21.10 : Open vSwitch vulnerability (USN-5242-1)
The remote Ubuntu 21.10 host has packages installed that are affected by a vulnerability as referenced in the USN-5242-1 advisory. It was discovered that Open vSwitch incorrectly handled certain fragmented packets. A remote attacker could possibly use this issue to cause Open vSwitch to consume...
PT-2021-3905 · Microsoft · Windows Media Mpeg-4 Video Decoder +1
Name of the Vulnerable Software and Affected Versions: Windows Media MPEG-4 Video Decoder affected versions not specified Description: The issue is related to incorrect code generation management in the Windows Media MPEG-4 Video Decoder. It allows remote attackers to execute arbitrary code by...
Server side request forgery (ssrf)
A Server-side request forgery SSRF vulnerability in the ProductConfig servlet in Zoho ManageEngine ADSelfService Plus through 6013 allows a remote unauthenticated attacker to perform blind HTTP requests or perform a Cross-site scripting XSS attack against the administrative interface via an HTTP...
CVE-2021-27214
CVE-2021-27214 concerns Zoho ManageEngine ADSelfService Plus, where the ProductConfig servlet (through build 6013) is vulnerable to server-side request forgery (SSRF). An unauthenticated remote attacker can trigger blind HTTP requests or, per description, perform a cross-site scripting (XSS) atta...
CVE-2020-3905
CVE-2020-3905 is a memory corruption vulnerability in Apple macOS Catalina’s Bluetooth component. The issue could allow a malicious local application to execute arbitrary code with kernel privileges. It is fixed in macOS Catalina 10.15.4 (Security Update 2020-002 Mojave/High Sierra also lists rel...
CVE-2020-3905
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.4. A malicious application may be able to execute arbitrary code with kernel privileges...
macOS 10.15.x < 10.15.4 / 10.14.x < 10.14.6 Security Update 2020-002 / 10.13.x < 10.13.6 Security Update 2020-002
The remote host is running a version of macOS / Mac OS X that is 10.13.x prior to 10.13.6 Security Update 2020-002, 10.14.x prior to 10.14.6 Security Update 2020-002, or 10.15.x prior to 10.15.4. It is, therefore, affected by multiple vulnerabilities : - Insufficient control flow in certain data...
RHEL 7 : OpenShift Container Platform 3.11 atomic-openshift (RHSA-2019:3905)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:3905 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or privat...
CVE-2019-3905
Zoho ManageEngine ADSelfService Plus 5.x before build 5703 has SSRF...
CVE-2019-3905
CVE-2019-3905 affects Zoho ManageEngine ADSelfService Plus 5.x prior to build 5703. The vulnerability is an SSRF issue in the product, enabling an attacker to trigger server-side requests via crafted input. Public references in the connected documents confirm the issue was fixed by Build 5703 (re...
CVE-2018-3905
CVE-2018-3905 applies to Samsung SmartThings Hub STH-ETH-250 (firmware 0.20.17). The video-core HTTP server’s camera-create path mishandles the JSON field state, copying it into a stack buffer without size checks, causing a stack-based buffer overflow that can enable code execution when a crafted...
Debian: Security Advisory (DSA-3905-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2016-3905
CVE-2016-3905 affects the Qualcomm Wi‑Fi driver (CORE/HDD/wlan_hdd_main.c) in Android, before the 2016-10-05 patch, on Nexus 5X. A crafted application sending SENDACTIONFRAME can elevate privileges locally. The issue is documented with a High impact (CVE-2016-3905) and a CVSS3 base score of 7.8, ...
Cisco Unified SIP Phone 3905 Series Phones Remote Denial of Service Vulnerability
The Cisco Unified SIP Phone 3905 is a SIP phone device. A security vulnerability exists in the Cisco Unified SIP Phone 3905 that allows a remote user to submit a specially crafted mass communication to the target device to cause the device to stop responding...
CVE-2015-6391
Cisco Unified SIP 3905 phones allow remote attackers to cause a denial of service resource consumption and functionality loss via a large amount of network traffic, aka Bug ID CSCuh51331...
Code injection
Cisco Unified SIP 3905 phones allow remote attackers to cause a denial of service resource consumption and functionality loss via a large amount of network traffic, aka Bug ID CSCuh51331...
CVE-2015-6391
Cisco CVE-2015-6391 affects the Cisco Unified SIP Phone 3905. A remote attacker can cause a denial of service by sending a large amount of traffic, exploiting a device resource limitation (Bug CSCuh51331). The Cisco advisory states no software updates address this vulnerability and there are no w...