OESA-2021-1457 vim security update

Vim is a highly configurable text editor for efficiently creating and changing any kind of text. Security Fixes: vim is vulnerable to Heap-based Buffer OverflowCVE-2021-3984...

CVE-2021-3984

creationtimestamp| type| source ---|---|--- 2021-12-01 14:35:44+00:00| seen| https://t.me/cibsecurity/33184...

DEBIAN-CVE-2021-3984

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2021-3984

vim is vulnerable to Heap-based Buffer Overflow...

ALPINE-CVE-2021-3984

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2021-3984

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2021-3984 Heap-based Buffer Overflow in vim/vim

vim is vulnerable to Heap-based Buffer Overflow...

CVE-2021-3984

CVE-2021-3984 affects vim and is a heap-based buffer overflow in memory handling when opening/editing crafted files. Affected versions include vim prior to 8.2.4081-1 (per CBLMariner bulletin) and advisories from ALAS2-2022-1743 and ALAS-2022-0366 reference. The issue can crash vim or potentially...

CVE-2020-3984

creationtimestamp| type| source ---|---|--- 2020-11-24 18:46:58+00:00| seen| https://t.me/cibsecurity/16784...

CVE-2020-3984

The CVE-2020-3984 issue affects SD-WAN Orchestrator (versions 3.3.2 prior to 3.3.2 P3 and 3.4.x prior to 3.4.4) where insufficient input validation permits SQL injection via a vulnerable API call by an authenticated user, potentially leading to unauthorized data access. This is corroborated in Re...

CVE-2020-3984

The SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3 and 3.4.x prior to 3.4.4 does not apply correct input validation which allows for SQL-injection. An authenticated SD-WAN Orchestrator user may exploit a vulnerable API call using specially crafted SQL queries which may lead to unauthorized data acce...

VMware SD-WAN Orchestrator updates address multiple security vulnerabilities (CVE-2020-3984, CVE-2020-3985, CVE-2020-4000, CVE-2020-4001, CVE-2020-4002 ,CVE-2020-4003)

3a. SQL injection vulnerability due to improper input validation CVE-2020-3984 The SD-WAN Orchestrator does not apply correct input validation which allows for SQL-injection. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of...

CentOS 7 : freeradius (RHSA-2020:3984)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3984 advisory. - It was discovered freeradius up to and including version 3.0.19 does not correctly configure logrotate, allowing a local attacker who already has...

Oracle Linux 7 : freeradius (ELSA-2020-3984)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-3984 advisory. 3.0.13-15 - Fixes EAP-PWD: DoS issues due to multithreaded BNCTX access Resolves: bz1818808 3.0.13-14 - Fixes receiving of multiple RADIUS packets unde...

CVE-2019-3984

CVE-2019-3984 affects Blink XT2 Sync Module firmware prior to 2.13.11. The issue arises from improperly sanitized input in update scripts fetched from the internet, allowing remote attackers to execute arbitrary commands on the device. Reported in multiple sources (NVD, Red Hat, CNVD, CVE listing...

CVE-2018-3984

CVE-2018-3984 affects Atlantis Word Processor 3.0.2.3 and 3.0.2.5. The Word Document parser has an uninitialized length (SprmTDefTable) for the number of table columns, which is later used as a loop bound. A crafted Word doc can trigger a heap-based buffer overflow, leading to code execution unde...

Debian DSA-3984-1 : git - security update

joernchen discovered that the git-cvsserver subcommand of Git, a distributed version control system, suffers from a shell command injection vulnerability due to unsafe use of the Perl backtick operator. The git-cvsserver subcommand is reachable from the git-shell subcommand even if CVS support ha...

CVE-2016-3984

The McAfee VirusScan Console mcconsol.exe in McAfee Active Response MAR before 1.1.0.161, Agent MA 5.x before 5.0.2 Hotfix 1110392 5.0.2.333, Data Exchange Layer 2.x DXL before 2.0.1.140.1, Data Loss Prevention Endpoint DLPe 9.3 before Patch 6 and 9.4 before Patch 1 HF3, Device Control MDC 9.3...

CVE-2016-3984

The McAfee VirusScan Console mcconsol.exe in McAfee Active Response MAR before 1.1.0.161, Agent MA 5.x before 5.0.2 Hotfix 1110392 5.0.2.333, Data Exchange Layer 2.x DXL before 2.0.1.140.1, Data Loss Prevention Endpoint DLPe 9.3 before Patch 6 and 9.4 before Patch 1 HF3, Device Control MDC 9.3...

CVE-2014-3984

CVE-2014-3984 affects Libav up to version 0.8.12. The primary issue is multiple unspecified vulnerabilities in Libav that allow remote attackers to trigger impact and vectors that are not detailed in the core CVE description. Public advisories connected to this CVE (Ubuntu USN-2244-1) describe th...