CVE-2023-52890

NTFS-3G before 75dcdc2 has a use-after-free in ntfsuppercasembs in libntfs-3g/unistr.c. NOTE: discussion suggests that exploitation would be challenging...

CVE-2023-52890

NTFS-3G before 75dcdc2 has a use-after-free in ntfsuppercasembs in libntfs-3g/unistr.c. NOTE: discussion suggests that exploitation would be challenging...

CVE-2023-52890

NTFS-3G before 75dcdc2 has a use-after-free in ntfsuppercasembs in libntfs-3g/unistr.c. NOTE: discussion suggests that exploitation would be challenging...

CVE-2023-52890

NTFS-3G before 75dcdc2 contains a use-after-free in ntfs_uppercase_mbs (libntfs-3g/unistr.c). Exploitation is noted as challenging in the sources. A fixed version exists (75dcdc2); several advisories reference updates to remediate CVE-2023-52890. Connected documents associate the CVE with ntfs-3g...

RHEL 8 : libguestfs-winsupport (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfschecklogclientarray...

RHEL 6 : libguestfs-winsupport (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - ntfs-3g: heap-based buffer overflow leads to local root privilege escalation CVE-2019-9755 Note that Nessus has not...

Oracle Linux 8 : virt:ol / and / virt-devel:rhel (ELSA-2024-2962)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-2962 advisory. - Fix CVE-2022-2211 Denial of Service in --key parameter resolves: rhbz2101280 - Fixes: CVE-2022-40284 - Fixes: CVE-2021-46790, CVE-2022-30783,...

RHEL 6 : ntfs-3g (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - ntfs-3g: heap-based buffer overflow leads to local root privilege escalation CVE-2019-9755 Note that Nessus has not...

RHEL 7 : ntfs-3g (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - ntfs-3g: a file handle created in fuselibopendir, and later used in fuselibreaddir, enables arbitrary...

ROS-20240403-02

Vulnerability of ntfsnamesfullcollate function of NTFS file system for NTFS-3G FUSE module is related to buffer overflow in dynamic memory. Exploitation of the vulnerability could allow an attacker to execute arbitrary code with elevated privileges using a specially crafted NTFS image file The NT...

CVE-2024-30862

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/index.php...

CVE-2024-30866

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/menu.php...

CVE-2024-30866

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/menu.php...

CVE-2024-30866

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/menu.php...

CVE-2024-30862

NetentSec NS-ASG 6.3 is vulnerable to SQL Injection via the /3g/index.php endpoint. Affected component: NS-ASG 6.3. Reported impact includes high confidentiality, integrity, and availability according to CVSS metrics. The connected sources confirm the vulnerability detail; no patch/version remedi...

CVE-2024-29244

Shenzhen Libituo Technology Co., Ltd LBT-T300-mini v1.2.9 was discovered to contain a buffer overflow via the pincode3g parameter at /apply.cgi...

CVE-2024-29244

Shenzhen Libituo Technology Co., Ltd LBT-T300-mini v1.2.9 was discovered to contain a buffer overflow via the pincode3g parameter at /apply.cgi...

LinBle LBT T300-T390 Security Vulnerability

The LinBle LBT T300-T390 is a 4G industrial router from LinBle China. A security vulnerability exists in the LinBle LBT T300-T390 version v2.2.1.8, which stems from a buffer overflow in the apnname3g parameter of the setupEC20Apn method...

CentOS 9 : libguestfs-winsupport-9.2-1.el9

The remote CentOS Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the libguestfs-winsupport-9.2-1.el9 build changelog. - ntfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow involving buffer+5123-2. NOTE: the upstream position is...

CentOS 9 : libguestfs-winsupport-9.3-1.el9

The remote CentOS Linux 9 host has a package installed that is affected by a vulnerability as referenced in the libguestfs-winsupport-9.3-1.el9 build changelog. - A buffer overflow was discovered in NTFS-3G before 2022.10.3. Crafted metadata in an NTFS image can cause code execution. A local...