89 matches found
WibuKey Network Server Management Heap Overflow (CVE-2018-3991)
A heap overflow vulnerability exists in WibuKey Network Server Management. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
CVE-2020-3991
The CVE-2020-3991 entry affects VMware Horizon Client for Windows (5.x before 5.5.0). The vulnerability is a denial-of-service caused by a file system access control issue during install time, where an unauthenticated local attacker could use a symbolic link to overwrite certain admin-privileged ...
VMware Horizon Client update addresses a denial-of-service vulnerability (CVE-2020-3991)
3. File system access control denial-of-service vulnerability CVE-2020-3991 VMware Horizon Client for Windows contains a denial-of-service vulnerability due to a file system access control issue during install time. VMware has evaluated the severity of this issue to be in the Moderate severity...
Huawei EulerOS: Security Advisory for compat-libtiff3 (EulerOS-SA-2017-1043)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for compat-libtiff3 (EulerOS-SA-2017-1044)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-3991-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Use-After-Free
Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...
Bypass Policy
Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...
WIBU SYSTEMS AG WibuKey Digital Rights Management (Update B)
1. EXECUTIVE SUMMARY CVSS v3 10.0 --------- Begin Update B Part 1 of 4 --------- ATTENTION: Exploitable remotely/low skill level to exploit/public exploits available Vendor: WIBU-SYSTEMS AG Equipment: WibuKey Digital Rights Management DRM --------- End Update B Part 1 of 4 ---------...
Siemens Warns of Critical Remote-Code Execution ICS Flaw
Siemens has released 16 security advisories for various industrial control and utility products, including a warning for a critical flaw in the WibuKey digital rights management DRM solution that affects the SICAM 230 process control system. SICAM 230 is used for a broad range of industrial contr...
CVE-2018-3991
An exploitable heap overflow vulnerability exists in the WkbProgramLow function of WibuKey Network server management, version 6.40.2402.500. A specially crafted TCP packet can cause a heap overflow, potentially leading to remote code execution. An attacker can send a malformed TCP packet to trigg...
CVE-2018-3991
The CVE-2018-3991 vulnerability is a heap-based overflow in WIBU-SYSTEMS WibuKey Network server management (WkbProgramLow function) affecting versions around 6.40.2402.500. A specially crafted TCP packet to port 22347/TCP can trigger the overflow, potentially enabling remote code execution. Mitig...
CVE-2018-3991
creationtimestamp| type| source ---|---|--- 2019-01-29 15:18:08+00:00| seen| MISP/5c506cbf-3024-4583-b874-2d460a021402 2019-02-23 08:16:50+00:00| published-proof-of-concept| https://t.me/icscert/81...
CVE-2017-3991
CVE-2017-3991 entry is rejected/not used per the Initial Description.
Debian DSA-3991-1 : qemu - security update
Multiple vulnerabilities were found in qemu, a fast processor emulator : - CVE-2017-9375 Denial of service via memory leak in USB XHCI emulation. - CVE-2017-12809 Denial of service in the CDROM device drive emulation. - CVE-2017-13672 Denial of service in VGA display emulation. - CVE-2017-13711...
Debian: Security Advisory (DSA-3991-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-3991
CVE-2015-3991 affects strongSwan versions 5.2.2 and 5.3.0, enabling a remote attacker to cause a daemon crash (DoS) or execute arbitrary code. Public references across OSV, NVD, Debian/CVEs corroborate the issue. Fedora advisory notes a later update (5.3.2) fixes this CVE; other entries (openSUSE...
CVE-2009-3991
CVE-2009-3991 entry is rejected/not used and does not represent an active vulnerability.
[SECURITY] [DSA 3762-1] tiff security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3762-1 [email protected] https://www.debian.org/security/ Laszlo Boszormenyi GCS January 13, 2017 https://www.debian.org/security/faq -...