SUSE: Security Advisory (SUSE-SU-2022:3939-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-3939-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2021:3939-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-3939

creationtimestamp| type| source ---|---|--- 2021-11-17 16:26:43+00:00| seen| https://t.me/cibsecurity/32497 2021-12-14 12:40:13+00:00| published-proof-of-concept| https://t.me/hackertrick/549 2021-12-15 11:05:07+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/4976...

CVE-2021-3939

CVE-2021-3939 affects Ubuntu’s accountsservice. Ubuntu patch 0010-set-language.patch caused the fallback_locale (pointing to static storage) to be freed in user_change_language_authorized_cb, making it reachable via the SetLanguage D-Bus function. The issue is fixed in Ubuntu releases: 0.6.55-0ub...

CVE-2021-3939

Ubuntu-specific modifications to accountsservice in patch file debian/patches/0010-set-language.patch caused the fallbacklocale variable, pointing to static storage, to be freed, in the userchangelanguageauthorizedcb function. This is reachable via the SetLanguage dbus function. This is fixed in...

CVE-2021-3939 Free of static data in accountsservice

Ubuntu-specific modifications to accountsservice in patch file debian/patches/0010-set-language.patch caused the fallbacklocale variable, pointing to static storage, to be freed, in the userchangelanguageauthorizedcb function. This is reachable via the SetLanguage dbus function. This is fixed in...

CVE-2021-3939

Ubuntu-specific modifications to accountsservice in patch file debian/patches/0010-set-language.patch caused the fallbacklocale variable, pointing to static storage, to be freed, in the userchangelanguageauthorizedcb function. This is reachable via the SetLanguage dbus function. This is fixed in...

Ubuntu 20.04 LTS : AccountsService vulnerability (USN-5149-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5149-1 advisory. Kevin Backhouse discovered that AccountsService incorrectly handled memory when performing certain language setting operations. A local attacker could use this...

CVE-2020-3939

SysJust Syuan-Gu-Da-Shih, versions before 20191223, contain vulnerability of Cross-Site ScriptingXSS, personal information may be leaked to attackers via the vulnerability...

CVE-2020-3939

CVE-2020-3939 concerns SysJust Syuan-Gu-Da-Shih, with versions prior to 20191223 vulnerable to Cross-Site Scripting (XSS). The vulnerability may allow leakage of personal information to attackers. The publicly documented details specify the affected software and the XSS impact but do not provide ...

CVE-2013-3939

creationtimestamp| type| source ---|---|--- 2020-01-02 22:49:12+00:00| seen| https://t.me/cibsecurity/8965...

CVE-2013-3939

XnView vulnerability CVE-2013-3939: Multiple connected sources confirm a heap-based buffer overflow in XnView’s RGB handling, caused by improper processing of RLE strip lengths. The issue exists in xnview.exe prior to version 2.13 (and cited variants reference older versions, e.g., 2.04), enablin...

CVE-2019-3939

Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 use default credentials admin/admin and moderator/moderator for the web interface. An unauthenticated, remote attacker can use these credentials to gain privileged access to the device...

CVE-2019-3939

CVE-2019-3939 affects Crestron AM-100 (firmware 1.6.0.2) and AM-101 (firmware 2.7.0.2). The underlying issue is default credentials (admin/admin, moderator/moderator) used for the web interface, allowing an unauthenticated, remote attacker to gain privileged access to the device. Documents confir...

Foxit PhantomPDF < 8.3.7 Multiple Vulnerabilities

According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is prior to 8.3.7. It is, therefore, affected by multiple arbitrary code execution and information disclosure vulnerabilities. C Tenable Network Security, Inc...

Foxit Reader < 8.3.7 Multiple Vulnerabilities

The version of Foxit Reader installed on the remote Windows host is prior to 8.3.7. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid112059; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate"...

CVE-2018-3939

CVE-2018-3939 is a use-after-free vulnerability in Foxit Software’s PDF Reader (version 9.1.0.5096) JavaScript engine. A specially crafted PDF can trigger reuse of a previously freed memory object, enabling arbitrary code execution. Exploitation requires user interaction (opening the malicious PD...

Foxit Reader < 9.2 Multiple Vulnerabilities

The version of Foxit Reader installed on the remote Windows host is prior to 9.2. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid111377; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate",...

Foxit PhantomPDF < 9.2 Multiple Vulnerabilities

According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is prior to 9.2. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid111376; scriptversion"1.7...