101 matches found
CVE-2019-3990
Affected product: Harbor (Open Source Harbor registry). Vulnerability: User enumeration via the "/users" API endpoint, which should be administrator-restricted, can be bypassed. Information about registered users can be obtained through the "+search" functionality. Root cause / nature (as describ...
Use-After-Free
Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...
Bypass Policy
Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...
WIBU SYSTEMS AG WibuKey Digital Rights Management (Update B)
1. EXECUTIVE SUMMARY CVSS v3 10.0 --------- Begin Update B Part 1 of 4 --------- ATTENTION: Exploitable remotely/low skill level to exploit/public exploits available Vendor: WIBU-SYSTEMS AG Equipment: WibuKey Digital Rights Management DRM --------- End Update B Part 1 of 4 ---------...
Siemens Warns of Critical Remote-Code Execution ICS Flaw
Siemens has released 16 security advisories for various industrial control and utility products, including a warning for a critical flaw in the WibuKey digital rights management DRM solution that affects the SICAM 230 process control system. SICAM 230 is used for a broad range of industrial contr...
CVE-2018-3990
CVE-2018-3990 concerns WIBU-SYSTEMS WibuKey.sys (Version 6.40, Build 2400). The vulnerability exists in the 0x8200E804 IOCTL handler; a specially crafted IRP can trigger a buffer overflow, causing kernel memory corruption and potentially privilege escalation. Talos reports this vulnerability can ...
CVE-2018-3990
creationtimestamp| type| source ---|---|--- 2019-01-29 15:18:08+00:00| seen| MISP/5c506cbf-3024-4583-b874-2d460a021402...
CVE-2014-3990
The CVE-2014-3990 entries describe an OpenCart
CVE-2017-3990
This CVE entry is rejected and not used as an active vulnerability entry.
Debian DSA-3990-1 : asterisk - security update
Klaus-Peter Junghann discovered that insufficient validation of RTCP packets in Asterisk may result in an information leak. Please see the upstream advisory at http://downloads.asterisk.org/pub/security/AST-2017-008.html for additional details. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
CVE-2009-3990
CVE-2009-3990 entry is rejected/not used and does not represent an active vulnerability entry.
[SECURITY] [DSA 3762-1] tiff security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3762-1 [email protected] https://www.debian.org/security/ Laszlo Boszormenyi GCS January 13, 2017 https://www.debian.org/security/faq -...
Amazon Linux: Security Advisory (ALAS-2016-734)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Update : tiff (openSUSE-2016-1187)
This update for tiff fixes the following security issues : - CVE-2016-3622: Specially crafted TIFF images could trigger a crash in tiff2rgba bsc974449 - Various out-of-bound write vulnerabilities with unspecified impact MSVR 35093, MSVR 35094, MSVR 35095, MSVR 35096, MSVR 35097, MSVR 35098 -...
SUSE SLED12 / SLES12 Security Update : tiff (SUSE-SU-2016:2508-1)
This update for tiff fixes the following security issues : - CVE-2016-3622: Specially crafted TIFF images could trigger a crash in tiff2rgba bsc974449 - Various out-of-bound write vulnerabilities with unspecified impact MSVR 35093, MSVR 35094, MSVR 35095, MSVR 35096, MSVR 35097, MSVR 35098 -...
SUSE-SU-2016:2508-1 Security update for tiff
This update for tiff fixes the following security issues: - CVE-2016-3622: Specially crafted TIFF images could trigger a crash in tiff2rgba bsc974449 - Various out-of-bound write vulnerabilities with unspecified impact MSVR 35093, MSVR 35094, MSVR 35095, MSVR 35096, MSVR 35097, MSVR 35098 -...
CVE-2016-3990
Heap-based buffer overflow in the horizontalDifference8 function in tifpixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service crash or execute arbitrary code via a crafted TIFF image to tiffcp...
CVE-2016-3990
CVE-2016-3990 is a heap-based buffer overflow in LibTIFF 4.0.6 and earlier, located in horizontalDifference8() of tif_pixarlog.c. Exploitation via a crafted TIFF image passed to tiffcp can cause denial of service or arbitrary code execution. Public advisories from Debian and Arch Linux, and F5 no...