CVE-2020-3915

CVE-2020-3915 is a local path-handling vulnerability in Apple macOS Printing that could allow a malicious, locally running app to overwrite arbitrary files. The issue is caused by improper path handling in the Printing component and is addressed by macOS Catalina 10.15.4 (Security Update 2020-002...

libssh2 security update

CentOS Errata and Security Advisory CESA-2020:3915 An update for libssh2 is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

CVE-2007-3915

creationtimestamp| type| source ---|---|--- 2019-11-08 00:28:09+00:00| seen| https://t.me/cibsecurity/7986 2024-02-05 13:17:22+00:00| seen| https://t.me/ctinow/179179...

CVE-2007-3915

CVE-2007-3915 affects Mondo 2.24, with an insecure handling of temporary files identified as the underlying issue. The connected documents corroborate this vulnerability description across multiple sources (NVD, Red Hat, Ubuntu, Debian, etc.). The available details do not specify affected file pa...

CVE-2019-3915

Authentication Bypass by Capture-replay vulnerability in Verizon Fios Quantum Gateway G1100 firmware version 02.01.00.05 allows an unauthenticated attacker with adjacent network access to intercept and replay login requests to gain access to the administrative web interface...

CVE-2019-3915

CVE-2019-3915 applies to Verizon Fios Quantum Gateway (G1100) firmware 02.01.00.05. The vulnerability is an authentication bypass via capture‑replay: because the web admin interface relies on HTTP (not HTTPS), an adjacent‑network attacker can intercept login requests and replay them to gain admin...

CVE-2019-3915

Authentication Bypass by Capture-replay vulnerability in Verizon Fios Quantum Gateway G1100 firmware version 02.01.00.05 allows an unauthenticated attacker with adjacent network access to intercept and replay login requests to gain access to the administrative web interface...

CVE-2019-3915

creationtimestamp| type| source ---|---|--- 2019-04-09 15:03:26+00:00| published-proof-of-concept| https://t.me/thehackernews/256...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Ghostscript vulnerabilities (USN-3915-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3915-1 advisory. It was discovered that Ghostscript incorrectly handled certain PostScript files. If a user or automated system were tricked into...

CVE-2018-3915

An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core HTTP server of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The strcpy call overflows the destination buffer, which has a size of 64 bytes. An attacker can...

CVE-2018-3915

The CVE-2018-3915 family affects Samsung SmartThings Hub STH-ETH-250 running firmware 0.20.17, where the video-core HTTP server uses string copy operations to retrieve shard table fields (secretKey, accessKey, sessionToken, bucket, directory, region). Each field is fetched via SELECT and copied w...

Debian DSA-3915-1 : ruby-mixlib-archive - security update

It was discovered that ruby-mixlib-archive, a Chef Software's library used to handle various archive formats, was vulnerable to a directory traversal attack. This allowed attackers to overwrite arbitrary files by using a malicious tar archive containing '..' in its entries. %NASLMINLEVEL 70300 C...

Debian Security Advisory DSA 3915-1 (ruby-mixlib-archive - security update)

It was discovered that ruby-mixlib-archive, a Chef Software OpenVAS Vulnerability Test $Id: deb3915.nasl 6800 2017-07-26 06:58:22Z cfischer $ Auto-generated from advisory DSA 3915-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone Networks Copyright: Copyright c 2017 Greenbone Networks GmbH...

CVE-2016-3915

camera/src/camerametadata.c in the Camera service in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows attackers to gain privileges via a crafted application, aka internal bug 30591838...

CVE-2016-3915

The CVE-2016-3915 issue affects Android’s Camera service (camera_metadata.c) across multiple Android versions, enabling a local attacker to escalate privileges via a crafted app. Root cause: privilege escalation in the Camera service. Impact: attacker gains high-level privileges. Mitigation/Remed...

openSUSE Security Update : v8 / chromium (openSUSE-2011-93)

Chromium update to to 18.0.972 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2011-93. The text description of this plugin is C SUSE LLC. include'deprecatednasllevel.inc';...

CVE-2014-3915

The CVE-2014-3915 issue affects Rocket Servergraph’s Admin Center, specifically the userRequest servlet. Multiple command vectors (auth, auth_session, auth_simple, add, add_flat, remove, set_pwd, add_permissions, revoke_permissions, runAsync, tsmRequest) allow remote attackers to execute arbitrar...

CVE-2013-3915

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3917...

CVE-2013-3915

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3917...

MS13-088: Cumulative Security Update for Internet Explorer (2888505)

The remote host is missing Internet Explorer IE Security Update 2888505. The installed version of IE is affected by multiple vulnerabilities that could allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid7084...