107 matches found
Input validation
TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has been discovered that TYPO3 CMS is susceptible to host spoofing due to improper validation of the HTTP Host header. TYPO3 uses the HTTP Host header, for example, to generate absolute URLs during the...
VMware Tools 10.x < 11.0.0 Privilege Escalation (VMSA-2020-0002)
The version of VMware Tools installed on the remote Windows host is 10.x, which is prior to 11.0.0. It is, therefore, affected by a race condition which may allow for privilege escalation in the virtual machine where Tools is installed. An authenticated, local attacker can exploit this to escalat...
CVE-2020-3941
The repair operation of VMware Tools for Windows 10.x.y has a race condition which may allow for privilege escalation in the Virtual Machine where Tools is installed. This vulnerability is not present in VMware Tools 11.x.y since the affected functionality is not present in VMware Tools 11...
CVE-2020-3941
CVE-2020-3941 boils down to a race-condition in the repair operation of VMware Tools for Windows (10.x.y), which may enable local privilege escalation in the guest VM. VMware notes the vulnerability is not present in Tools 11.x.y, where the affected functionality is removed. Affected remediation ...
VMSA-2020-0002:VMware Tools workaround addresses a local privilege escalation vulnerability
Advisory ID: VMSA-2020-0002 CVSSv3 Range: 7.8 Issue Date:2020-01-14 Updated On: 2020-01-14 Initial Advisory CVEs: CVE-2020-3941 Synopsis: VMware Tools workaround addresses a local privilege escalation vulnerability CVE-2020-3941 RSS Feed Download PDF Download Text File Share this page on social...
CVE-2013-3941
creationtimestamp| type| source ---|---|--- 2020-01-02 22:49:11+00:00| seen| https://t.me/cibsecurity/8964 2020-01-08 22:32:33+00:00| seen| https://t.me/cibsecurity/9048...
CVE-2013-3941
CVE-2013-3941 affects XnView before 2.13. The vulnerability is in Xjp2.dll (JPEG2000 handling): (1) Csiz parameter in a SIZ marker triggers incorrect memory allocation, and (2) lqcd field in a QCD marker causes a heap-based buffer overflow. This can enable remote code execution. Remediation: upgr...
Advantech WebAccess webvrpcs.exe Arbitrary File Download
Binary data scadaadvantechwebaccesscve-2019-3941.nbin...
CVE-2019-3941
Advantech WebAccess 8.3.4 is affected by CVE-2019-3941. The vulnerability allows unauthenticated, remote attackers to delete arbitrary files via IOCTL 10005 RPC. Affected product: Advantech WebAccess (version 8.3.4). Root cause: improper handling of IOCTL 10005 RPC leading to arbitrary file delet...
Ubuntu: Security Advisory (USN-3941-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 16.04 LTS / 18.04 LTS : Lua vulnerability (USN-3941-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3941-1 advisory. Fady Othman discovered that Lua incorrectly handled certain scripts. An attacker could possibly use this issue to cause a denial of service. Tenable h...
USN-3941-1 lua5.3 vulnerability
Fady Othman discovered that Lua incorrectly handled certain scripts. An attacker could possibly use this issue to cause a denial of service...
Foxit Reader < 9.3 Multiple Vulnerabilities
The version of Foxit Reader installed on the remote Windows host is prior to 9.3. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid118093; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate",...
CVE-2018-3941
CVE-2018-3941 describes a use-after-free vulnerability in Foxit PDF Reader’s JavaScript engine affecting version 9.1.0.5096. A specially crafted PDF can trigger reuse of a previously freed object in memory, enabling arbitrary code execution. Exploitation requires the user to open a malicious file...
Foxit Reader and PhantomPDF Multiple Use After Free Vulnerabilities (CVE-2018-3940; CVE-2018-3941; CVE-2018-3942; CVE-2018-3943; CVE-2018-3944; CVE-2018-3945; CVE-2018-3946)
A remote code execution vulnerability exists in Foxit Reader and PhantomPDF. The vulnerability is due to a use-after-free error while handling a specially crafted PDF file. Successful exploitation could lead to arbitrary code execution. Additional CVEs: CVE-2018-3957, CVE-2018-3958, CVE-2018-3959...
CVE-2017-3941
CVE-2017-3941 is rejected/not used and does not represent an active vulnerability entry.
CVE-2015-3941
CVE-2015-3941 is rejected/not used according to the initial description.
openSUSE Security Update : typo3-cms-4_7 (openSUSE-2016-1002)
This update for typo3-cms-47 fixes the following issues : - CVE-2014-3941: Multiple vulnerabilities TYPO3-CORE-SA-2014-001 - CVE-2013-4701: Multiple vulnerabilities TYPO3-CORE-SA-2014-002 - CVE-2013-7073: Multiple vulnerabilities TYPO3-CORE-SA-2013-004 - other security fixes, e.g. preventing XSS...