356 matches found
CVE-2021-3910
OctoRPKI crashes when encountering a repository that returns an invalid ROA just an encoded NUL \0 character...
CVE-2021-3910 NUL character in ROA causes OctoRPKI to crash
OctoRPKI crashes when encountering a repository that returns an invalid ROA just an encoded NUL \0 character...
CVE-2017-3910
CVE-2017-3910 is rejected/not used per the Initial Description.
Apple iCloud 10.x < 10.9.3 Multiple Vulnerabilities
According to its version, the iCloud application installed on the remote Windows host is 10.x prior to 10.9.3. It is, therefore, affected by multiple vulnerabilities: - A logic issue was addressed with improved restrictions. A file URL may be incorrectly processed. CVE-2020-3885 - A logic issue w...
Apple iCloud 7.x < 7.18 Multiple Vulnerabilities
According to its version, the iCloud application installed on the remote Windows host is 7.x prior to 7.18. It is, therefore, affected by multiple vulnerabilities: - A logic issue was addressed with improved restrictions. A file URL may be incorrectly processed. CVE-2020-3885 - A logic issue was...
About the security content of iCloud for Windows 7.18 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...
About the security content of iCloud for Windows 10.9.3 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...
CVE-2020-3910
CVE-2020-3910 is a libxml2 related buffer overflow (root cause: insufficient size validation) that Apple documents as fixed in multiple platforms. Affected products include macOS Catalina 10.15.3/10.15.4, iOS 13.x, iPadOS 13.x, tvOS 13.x, watchOS 6.x, and Apple Windows components (iTunes 12.10.5,...
Apple iTunes < 12.10.5 Multiple Vulnerabilities (uncredentialed check) (HT211105)
The version of Apple iTunes installed on the remote Windows host is prior to 12.10.5. It is, therefore, affected by multiple vulnerabilities as referenced in the HT211105 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported versio...
Apple iTunes < 12.10.5 Multiple Vulnerabilities (credentialed check) (HT211105)
The version of Apple iTunes installed on the remote Windows host is prior to 12.10.5. It is, therefore, affected by multiple vulnerabilities as referenced in the HT211105 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported versio...
About the security content of iCloud for Windows 7.18
About the security content of iCloud for Windows 7.18 This document describes the security content of iCloud for Windows 7.18. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...
Ubuntu 14.04 LTS : Linux kernel (Xenial HWE) vulnerabilities (USN-3910-2)
The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3910-2 advisory. USN-3910-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enableme...
Ubuntu: Security Advisory (USN-3910-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-3910-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-3910
Crestron AM-100 before firmware version 1.6.0.2 contains an authentication bypass in the web interface's return.cgi script. Unauthenticated remote users can use the bypass to access some administrator functionality such as configuring update sources and rebooting the device...
CVE-2019-3910
The CVE-2019-3910 issue affects Crestron AM-100 devices running firmware before 1.6.0.2. Affected component is the web interface’s return.cgi script, enabling an authentication bypass that allows unauthenticated remote access to administrator-level functions (e.g., configuring update sources and ...
SUSE SLED12 / SLES12 Security Update : openssh (SUSE-SU-2018:3910-1)
This update for openssh fixes the following issues : Following security issues have been fixed : CVE-2018-15473: OpenSSH was prone to a user existance oracle vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully...
Yi Technology Home Camera cloudAPI SSID Code Execution (CVE-2018-3910)
A remote code execution vulnerability exists in Yi Home Camera. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
CVE-2018-3910
Yi Home Camera 27US 1.8.7.0D is affected by CVE-2018-3910 in the cloud OTA setup. Cisco Talos reports an exploitable remote code execution via a crafted SSID that triggers a command injection in the cloudAPI flow, which can be executed on the device after the camera connects to the attacker’s SSI...