CVE-2020-9689

Magento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have a path traversal vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2020-9689

CVE-2020-9689 affects Magento Open Source and Commerce up to 2.3.5-p1. The issue is a path traversal vulnerability that could enable arbitrary code execution on local access. Affected products include Magento 2.x; exploitation is described in public advisories (APSB20-47) and related OSV/NVD entr...

CVE-2019-9689

processcertificate in tls1.c in Cameron Hamilton-Rich axTLS through 2.1.5 has a Buffer Overflow via a crafted TLS certificate handshake message with zero certificates...

CVE-2019-9689

processcertificate in tls1.c in Cameron Hamilton-Rich axTLS through 2.1.5 has a Buffer Overflow via a crafted TLS certificate handshake message with zero certificates...

CVE-2019-9689

CVE-2019-9689 affects axTLS up to version 2.1.5. The vulnerability is a buffer overflow in the function process_certificate (tls1.c) when handling a TLS handshake message with zero certificates, leading to potential denial of service. Affected: axTLS 2.1.5 and earlier. Some sources (Debian) indic...

CVE-2017-9689

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a specially-crafted HDMI CEC message can be used to cause stack memory corruption...

CVE-2017-9689

CVE-2017-9689 is linked to stack memory corruption via HDMI CEC in the Qualcomm HDMI driver, affecting Android for MSM and related CAF/Linux-based builds. Connected sources corroborate the issue across Android for MSM, Firefox OS for MSM, and QRD Android, with the HDMI driver listed as the compon...

CVE-2016-9689

CVE-2016-9689 is rejected; this CVE ID is not used and does not represent an active vulnerability entry.

CVE-2016-9689

...

CVE-2014-9689

content/renderer/devicesensors/deviceorientationeventpump.cc in Google Chrome before 41.0.2272.76 does not properly restrict access to high-rate gyroscope data, which makes it easier for remote attackers to obtain speech signals from a device's physical environment via a crafted web site that...

CVE-2014-9689

CVE-2014-9689 : Chrome up to 41.0.2272.76 may expose high‑rate gyroscope data via content/renderer/device_sensors/device_orientation_event_pump.cc, enabling remote sites to infer ambient speech signals through ondeviceorientation events. The vulnerability stems from insufficient restriction of de...

SuSE 11.3 Security Update : procmail (SAT Patch Number 9689)

procmail was updated to fix a security issue in its formail helper. - When formail processed specially crafted e-mail headers a heap corruption could be triggered, which would lead to a crash of formail. CVE-2014-3618 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...