CVE-2018-3907

CVE-2018-3907 (and related CVEs 3908/3909) affects Samsung SmartThings Hub video-core HTTP server on STH-ETH-250 firmware 0.20.17. The REST parser mishandles pipelined HTTP requests, causing successive requests to overwrite the previously parsed URL/method/body via the on_url, on_body, and on_mes...

Samsung SmartThings Hub video-core REST Request Parser HTTP Pipelining Injection Vulnerabilities(CVE-2018-3907 - CVE-2018-3909)

Summary Multiple exploitable vulnerabilities exist in the REST parser of video-core's HTTP server of the Samsung SmartThings Hub. The video-core process incorrectly handles pipelined HTTP requests, which allows successive requests to overwrite the previously parsed HTTP method, URL and body. An...

CVE-2017-3907

CVE-2017-3907 affects McAfee Threat Intelligence Exchange (TIE) Server, specifically the ePolicy Orchestrator (ePO) extension, in version 2.1.0 and earlier. The issue is a code injection vulnerability that lets a remote attacker cause arbitrary HTML to be reflected in the response page via an uns...

Debian DSA-3907-1 : spice - security update

Frediano Ziglio discovered a buffer overflow in spice, a SPICE protocol client and server library which may result in memory disclosure, denial of service and potentially the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks ...

trenitalia.com XSS vulnerability

Vulnerable URL: http://www.trenitalia.com/cms/v/index.jsp?vgnextoid=de08db09a3287410VgnVCM1000008916f90aRCRD="-alertXSSPOSED-" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3907 V...

CVE-2016-3907

CVE-2016-3907 is an information-disclosure vulnerability in Qualcomm components (GPU driver, power driver, SMSM Point-to-Point driver, and sound driver) used in Android. A local malicious app could access data outside its permission levels after compromising a privileged process. The issue is doc...

CVE-2014-3907

Cross-site request forgery CSRF vulnerability in the MailPoet Newsletters wysija-newsletters plugin before 2.6.11 for WordPress allows remote attackers to hijack the authentication of arbitrary users...

CVE-2014-3907

CVE-2014-3907 concerns a cross-site request forgery (CSRF) vulnerability in the WordPress plugin MailPoet Newsletters (wysija-newsletters) up to version 2.6.10. The root cause is CSRF that enables an attacker to hijack the authentication of arbitrary users when they view a malicious page while lo...

openSUSE Security Update : v8 / chromium (openSUSE-2011-93)

Chromium update to to 18.0.972 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2011-93. The text description of this plugin is C SUSE LLC. include'deprecatednasllevel.inc';...

MS13-101: Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (2880430)

The remote Windows host has the following vulnerabilities : - Multiple errors exist in the Windows kernel-mode drivers that could allow privilege escalation and arbitrary code execution. CVE-2013-3899, CVE-2013-3902, CVE-2013-5058 - An error exists in the way the Windows kernel-mode driver parses...

CVE-2013-3907

CVE-2013-3907 affects portcls.sys, the audio port-class driver in Windows kernel-mode, across multiple Windows versions (Vista SP2, 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, Windows RT). The issue is a local privilege-escalation vulnerability described as the Port-Class Driv...

Microsoft Windows Kernel 'portcls.sys' CVE-2013-3907 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the audio port-class driver. A local attacker can exploit this issue to execute arbitrary code with elevated privileges and gain access to kernel memory. Technologies Affected Avaya Aura Conferenci...

FreeBSD Ports: chromium

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Gentoo Security Advisory GLSA 201201-03 (chromium v8)

The remote host is missing updates announced in advisory GLSA 201201-03. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Google Chrome Multiple Vulnerabilities - December11 (Linux)

The host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodgooglechromemultvulndec11lin.nasl 7029 2017-08-31 11:51:40Z teissa $ Google Chrome Multiple Vulnerabilities - December11 Linux Authors: Rachana Shetty Copyright: Copyright c 20...

Google Chrome Multiple Vulnerabilities - December11 (Windows)

The host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodgooglechromemultvulndec11win.nasl 7052 2017-09-04 11:50:51Z teissa $ Google Chrome Multiple Vulnerabilities - December11 Windows Authors: Rachana Shetty Copyright: Copyright c...

Google Chrome < 16.0.912.63 Multiple Vulnerabilities

Binary data 6108.pasl...

CVE-2011-3907

Chromium and V8 are affected by multiple vulnerabilities including CVE-2011-3907 (URL bar spoofing) as part of the Chromium/Chromium-based web engine family. Public entries in Gentoo GLSA-201201-03 describe that a number of issues could allow a context‑dependent attacker to lure a user to a craft...

VLC Media Player < 1.1.6 Multiple Vulnerabilities

The version of VLC media player installed on the remote host is earlier than 1.1.6. Such versions are reportedly affected by the following vulnerabilities : - An integer overflow vulnerability exists due a failure to properly parse the header of a Real Media, which could then trigger a heap-based...

VLC Media Player Real Demuxer File Handling Array Indexing Vulnerabilities (Windows)

This host is installed with VLC media player and is prone to array indexing vulnerabilities. OpenVAS Vulnerability Test $Id: gbvlcmediaplayermultbofvulnwin.nasl 8174 2017-12-19 12:23:25Z cfischer $ VLC Media Player Real Demuxer File Handling Array Indexing Vulnerabilities Windows Authors: Antu...