88 matches found
CVE-2021-3968
vim is vulnerable to Heap-based Buffer Overflow...
CVE-2021-3968
Technical details about CVE-2021-3968 are not provided in the connected documents. The initial description notes a heap-based buffer overflow in vim, but specifics (affected versions, exploitation, remediation) are not present here; monitor for official advisories.
SUSE: Security Advisory (SUSE-SU-2014:1318-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-3968-3: Sudo vulnerabilities
USN-3968-1 fixed several vulnerabilities in Sudo. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: Florian Weimer discovered that Sudo incorrectly handled the noexec restriction when used with certain applications. A local attacker could possibly use...
VMSA-2020-0015:VMware Cloud Foundation, ESXi, Workstation, and Fusion updates address multiple security vulnerabilities
Advisory ID: VMSA-2020-0015.2 CVSSv3 Range: 4.0 - 9.3 Issue Date:2020-06-23 Updated On: 2020-07-02 CVEs: CVE-2020-3962, CVE-2020-3963, CVE-2020-3964, CVE-2020-3965, CVE-2020-3966, CVE-2020-3967, CVE-2020-3968, CVE-2020-3969, CVE-2020-3970, CVE-2020-3971 Synopsis: VMware Cloud Foundation, ESXi,...
OpenEMR New.php Command Injection (CVE-2019-3968)
A command injection vulnerability exists in OpenEMR New.php. Successful exploitation of this vulnerability could result in arbitrary command execution on the affected system...
CVE-2019-3968
CVE-2019-3968 affects OpenEMR 5.0.1 and earlier. An authenticated attacker can execute arbitrary commands on the host via the Scanned Forms interface when creating a new form. The Red Hat/other advisories corroborate command injection in OpenEMR New.php; no remediation details are provided in the...
Ubuntu: Security Advisory (USN-3968-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2018-3968
An exploitable vulnerability exists in the verified boot protection of the Das U-Boot from version 2013.07-rc1 to 2014.07-rc2. The affected versions lack proper FIT signature enforcement, which allows an attacker to bypass U-Boot's verified boot and execute an unsigned kernel, embedded in a legac...
CVE-2018-3968
An exploitable vulnerability exists in the verified boot protection of the Das U-Boot from version 2013.07-rc1 to 2014.07-rc2. The affected versions lack proper FIT signature enforcement, which allows an attacker to bypass U-Boot's verified boot and execute an unsigned kernel, embedded in a legac...
CVE-2018-3968
An exploitable vulnerability exists in the verified boot protection of the Das U-Boot from version 2013.07-rc1 to 2014.07-rc2. The affected versions lack proper FIT signature enforcement, which allows an attacker to bypass U-Boot's verified boot and execute an unsigned kernel, embedded in a legac...
CVE-2018-3968
The vulnerability CVE-2018-3968 affects Das U-Boot versions 2013.07-rc1 through 2014.07-rc2, where verified boot lacks proper FIT signature enforcement. This allows a local attacker who can supply a boot image to bypass verified boot and execute an unsigned kernel embedded in a legacy image forma...
CVE-2017-3968
CVE-2017-3968 concerns a session fixation vulnerability in the web interface of McAfee Network Security Manager (NSM) and Network Data Loss Prevention (NDLP). The issue allows remote attackers to disclose sensitive information or manipulate the underlying database by exploiting a crafted authenti...
Debian DSA-3968-1 : icedove - security update
Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code or denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-3968. The...
Debian: Security Advisory (DSA-3968-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2016-3968
CVE-2016-3968 affects Sophos Cyberoam CR100iNG UTM (FW 10.6.3 MR-1 build 503) and CR35iNG UTM (FW 10.6.2 MR-1 build 383, and FW 10.6.2 build 378). The vulnerability is cross-site scripting (XSS) via web parameters in LiveConnections.jsp and LiveConnectionDetail.jsp (specifically ipFamily in LiveC...
CVE-2015-3968
Summary of CVE-2015-3968 : The Janitza UMG power quality devices (models 508, 509, 511, 604, 605) expose an FTP interface protected by a default/password-hardcoded credential, enabling remote attackers to read or write files via TCP port 21. The root cause is weak/default credentials in the devic...
Oracle: Security Advisory (ELSA-2012-1211)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 201504-04
Gentoo Linux Local Security Checks GLSA 201504-04 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...