PT-2018-2608 · Red Hat +1 · Glusterfs +1

Name of the Vulnerable Software and Affected Versions: glusterfs version 3.8.4 Description: The issue is related to the usage of the snprintf function in the feature/locks translator of the glusterfs server, which is vulnerable to a format string attack. A remote, authenticated attacker could...

CVE-2018-6376

In Joomla! before 3.8.4, the lack of type casting of a variable in a SQL statement leads to a SQL injection vulnerability in the Hathor postinstall message...

CVE-2018-6380

CVE-2018-6380 affects Joomla! 3.x prior to 3.8.4, due to lack of escaping in the module chromes, resulting in reflected XSS. Affected range includes 3.0.0–3.8.3 per the public entry and Nessus findings explicitly tie this CVE to Joomla! 3.0.x through 3.8.3 in multiple scans. The underlying issue ...

CVE-2018-6379

In Joomla! before 3.8.4, inadequate input filtering in the Uri class formerly JUri leads to an XSS vulnerability...

CVE-2018-6380

In Joomla! before 3.8.4, lack of escaping in the module chromes leads to XSS vulnerabilities in the module system...

MatrixSSL has a Denial of Service Vulnerability Vulnerability

MatrixSSL is an embedded, open source SSLv3 stack designed for small applications and devices. A denial of service vulnerability vulnerability exists in the pstmexptmod&rsquo function of MatrixSSL prior to version 3.8.4. A remote attacker exploiting this vulnerability could launch a denial of...

kernel: Information leak in the RTNETLINK component

The rtnlfillifinfo function in net/core/rtnetlink.c in the Linux kernel before 3.8.4 does not initialize a certain structure member, which allows local users to obtain sensitive information from kernel stack memory via a crafted application...

Fedora 17 : kernel-3.8.4-102.fc17 (2013-4357)

Update to latest upstream stable release, 3.8.4. Fixes across the entire tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 18 : kernel-3.8.4-202.fc18 (2013-4240)

The 3.8.4 stable update includes a number of fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

[SECURITY] Fedora 18 Update: kernel-3.8.4-202.fc18

The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operating system: memory allocation, process allocation, device input and output, etc...

PT-2013-3438 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.8.4 Description: The issue is related to a heap-based buffer overflow in the wdm in callback function. This can be exploited by physically proximate attackers using a crafted cdc-wdm USB device, potentially...

UBUNTU-CVE-2013-1796

The kvmsetmsrcommon function in arch/x86/kvm/x86.c in the Linux kernel through 3.8.4 does not ensure a required timepage alignment during an MSRKVMSYSTEMTIME operation, which allows guest OS users to cause a denial of service buffer overflow and host OS memory corruption or possibly have...

WordPress Plugin E-Commerce 3.8.4 - SQL Injection

WordPress Plugin E-Commerce 3.8.4 - SQL Injection Exploit Title: WP E-commerce plugin $value $formsql = "SELECT FROM " . WPSCTABLECHECKOUTFORMS . " WHERE id = '$valueid' LIMIT 1"; $formdata = $wpdb-getrow $formsql, ARRAYA ; FIX: Upgrade to version 3.8.5 Bug found by: IHTeam For GetShopped as thei...

vBulletin 3.8.4 & 3.8.5 Registration Bypass Vulnerability

Exploit for php platform in category web applications ========================================================= vBulletin 3.8.4 & 3.8.5 Registration Bypass Vulnerability ========================================================= 010101010101010101010101010101010101010101010101010101010 0 0 1 Irani...

vBulletin Version 3.8.4 File Include Vulnerability

Exploit for unknown platform in category web applications ================================================== vBulletin Version 3.8.4 File Include Vulnerability ================================================== Script: vBulletin Version 3.8.4 File Include Vulnerability Language: $php$ Author :...

vBulletin adminCP Cross Site Scripting

.::vBulletin adminCP Cross-Site Scripting ::. Exploit Title: vBulletin adminCP Cross-Site Scripting Date: 2009 Author: Ashiyane Digital Security Members Cair3x Software Link: http://www.vbulletin.com/ Version: 3.8.4 and all Version Tested on: vBulletin 3.8.4 CVE : Code : -::Forum Manager = Add Ne...

Fedora 12 : rt3-3.8.4-7.fc12 (2009-12783)

Fri Dec 4 2009 Ralf Corsepius - 3.8.4-7 - Add rt-3.8.4-rh-bz543962.diff BZ 543962. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

vBulletin - Multiple Versions - Cross Site Script Redirection

No description provided by source. vBulletin - Cross Site Script Redirection Versions Affected: 3.8.4 / 3.7.6 / 3.6.12 Patches Available: 3.8.4PL1 / 3.7.6PL1 / 3.6.12PL1 Info: An XSS flaw within the user profile page has recently been discovered. This could allow an attacker to carry out an actio...