126 matches found
CVE-2019-3981
CVE-2019-3981 affects MikroTik Winbox ≤3.20. The issue allows a remote attacker to perform a man-in-the-middle attack that downgrades the client’s authentication protocol, enabling disclosure of the user’s username and MD5-hashed password. This is described across multiple connected records as a ...
CVE-2019-3981
MikroTik Winbox 3.20 and below is vulnerable to man in the middle attacks. A man in the middle can downgrade the client's authentication protocol and recover the user's username and MD5 hashed password...
Virtuozzo Linux Errata and Security Advisory 2019:3981 Important
Upstream security update. Follow RHSA-2019:3981 for details...
RHEL 7 : 389-ds-base (RHSA-2019:3981)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3981 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP server an...
USN-3981-2: Linux kernel (HWE) vulnerabilities (AKA ZombieLoad Attack) | Cloud Foundry
Severity High Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Description USN-3981-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 18.04 LTS for Ubuntu 16.04...
Ubuntu: Security Advisory (USN-3981-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2018-3981
creationtimestamp| type| source ---|---|--- 2019-01-31 15:20:44+00:00| seen| MISP/5c531198-c080-4891-921e-562e0a021402...
CVE-2018-3981
An exploitable out-of-bounds write exists in the TIFF-parsing functionality of Canvas Draw version 5.0.0. An attacker can deliver a TIFF image to trigger this vulnerability and gain code execution...
CVE-2018-3981
ACD Systems Canvas Draw 5, TIFF parsing, contains an exploitable out-of-bounds write in version 5.0.0 (CVE-2018-3981). Specifically, a specially crafted TIFF image can cause a lower four bytes of a user-controlled address to be zeroed and used in DIB_resolution_set, triggering an out-of-bounds wr...
CVE-2017-3981
CVE-2017-3981 entry is rejected/not used; does not represent an active vulnerability.
FreeBSD : Axis2 -- XSS (XSS) vulnerability (0baadc45-92d0-11e6-8011-005056925db4)
Apache Axis2 reports : Apache Axis2 1.7.3 is a security release that contains a fix for CVE-2010-3981. That security vulnerability affects the admin console that is part of the Axis2 Web application and was originally reported for SAP BusinessObjects which includes a version of Axis2. That report...
Ubuntu 14.04 LTS : OptiPNG vulnerabilities (USN-2951-1)
The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2951-1 advisory. Gustavo Grieco discovered that OptiPNG incorrectly handled memory. A remote attacker could use this issue with a specially crafted image file to cause...
Ubuntu: Security Advisory (USN-2951-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Update : optipng (openSUSE-2016-469)
optipng was updated to fix one security issue. This security issue was fixed : - CVE-2016-2191: Invalid write while processing bitmap images bsc973992. - CVE-2016-3981: Heap buffer overflow pngxrbmp.c bmpreadrows - CVE-2016-3982: Heap buffer overflow pngxrbmp.c bmprle4fread %NASLMINLEVEL 70300 C...
openSUSE Security Update : optipng (openSUSE-2016-468)
optipng was updated to fix one security issue. This security issue was fixed : - CVE-2016-2191: Invalid write while processing bitmap images bsc973992. - CVE-2016-3981: Heap buffer overflow pngxrbmp.c bmpreadrows - CVE-2016-3982: Heap buffer overflow pngxrbmp.c bmprle4fread %NASLMINLEVEL 70300 C...
Gratipay: PHP 5.4.45 is Outdated and Full of Preformance Interupting Arbitrary Code Execution Bugs
Your PHP version is affected by quite a few remote arbitrary code execution, remote file renaming, and remote file rewriting bugs that require no authentication and can cause big problems, from performance interruptions and messing with server files to DoS attacks. These are not related to any...
CVE-2016-3981
Heap-based buffer overflow in the bmpreadrows function in pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service out-of-bounds read or write access and crash or possibly execute arbitrary code via a crafted image file...
CVE-2016-3981
OptiPNG (before 0.7.6) is affected by CVE-2016-3981 due to a heap-based overflow in bmp_read_rows (pngxrbmp.c), enabling potential out-of-bounds access and possible code execution or crash.iva Attack vector: crafted image file; impact: DoS or code execution. Mitigation: upgrade to OptiPNG 0.7.6+ ...
CVE-2016-3981
Heap-based buffer overflow in the bmpreadrows function in pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service out-of-bounds read or write access and crash or possibly execute arbitrary code via a crafted image file...