CVE-2022-3017 Cross-Site Request Forgery (CSRF) in froxlor/froxlor

Cross-Site Request Forgery CSRF in GitHub repository froxlor/froxlor prior to 0.10.38...

CVE-2022-3017

CVE-2022-3017 describes a Cross‑Site Request Forgery (CSRF) vulnerability in the Froxlor project (froxlor/froxlor) affecting versions prior to 0.10.38. The issue allows unauthorized actions to be performed in the authenticated context of Froxlor web applications. The available connected sources c...

CVE-2021-3017

creationtimestamp| type| source ---|---|--- 2021-05-07 08:28:28+00:00| seen| https://t.me/pwnwikizhchannel/367 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-3017.yaml...

CVE-2021-3017

Intelbras WIN 300 and WRN 342 routers (through 2021-01-04) suffer a credentials disclosure flaw: remote attackers can read the def_wirelesspassword line in the HTML source to obtain credentials. Affected component: web interface; root cause: improper exposure of sensitive data in HTML. Impact: po...

CVE-2019-3017

CVE-2019-3017 affects Oracle VM VirtualBox (Core) in VirtualBox 5.2.x and 6.x prior to 5.2.34 and 6.0.14. The vulnerability allows a high-privilege attacker with local logon to take over VirtualBox; impact can extend to other products. Public sources (including vendor advisories) indicate a fix i...

Oracle VirtualBox Security Updates (oct2019-5072832) - 03 - Mac OS X

Oracle VirtualBox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:vmvirtualbox";...

CVE-2018-3017

CVE-2018-3017 affects the Oracle E-Business Suite, specifically the CRM Technical Foundation component (subcomponent: Preferences). Affected versions: 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, and 12.2.7. The vulnerability allows an unauthenticated attacker with network access via H...

CVE-2013-3017

IBM Tivoli Application Dependency Discovery Manager (TADDM) is affected in versions before 7.2.1.5 and 7.2.x before 7.2.2. The issue arises from support for weak SSL ciphers, which could allow remote attackers to defeat cryptographic protection mechanisms. The provided documents identify the affe...

solvusoft.com XSS vulnerability

Vulnerable URL: http://www.solvusoft.com/en/malware'-alert'OPENBUGBOUNTY'-'/trojans/backdoor-mivast// Details: Description| Value ---|--- Patched:| Yes, at 24.07.2017 Latest check for patch:| 24.07.2017 09:31 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3017...

CVE-2008-3017

CVE-2008-3017 entry is rejected/not used per the Initial Description.

CVE-2008-3017

...

CVE-2017-3017

CVE-2017-3017 affects Adobe Acrobat Reader (variants including 11.0.19 and earlier; 15.006.30280 and earlier; 15.023.20070 and earlier). It is a memory corruption vulnerability triggered by handling a malformed PDF, with the potential for arbitrary code execution. The provided documents do not in...

Adobe Acrobat and Reader Memory Corruption (APSB17-11: CVE-2017-3017)

A memory corruption vulnerability exists in Adobe Reader and Acrobat. The vulnerability is due to an error in Adobe Reader and Acrobat while parsing a corrupted file. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted file...

CVE-2016-3017

CVE-2016-3017 affects IBM Security Access Manager (ISAM) products. The root cause is security misconfigurations that could allow a remote attacker to obtain sensitive information. Affected are IBM Security Access Manager for Web 7.0 appliances (7.0.0), 8.0 appliances (all firmware versions), IBM ...

Ubuntu 14.04 LTS : Linux kernel (Wily HWE) vulnerabilities (USN-3017-3)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3017-3 advisory. USN-3017-1 fixed vulnerabilities in the Linux kernel for Ubuntu 15.10. This update provides the corresponding updates for the Linux Hardware Enablement H...

Ubuntu: Security Advisory (USN-3017-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-3017-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-3017-1 : php-cas - security update

Marvin S. Addison discovered that Jasig phpCAS, a PHP library for the CAS authentication protocol, did not encode tickets before adding them to an URL, creating a possibility for cross site scripting. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

CVE-2012-3017

Summary: CVE-2012-3017 affects Siemens SIMATIC S7-400 PN CPU devices running firmware 5.x. The vulnerability allows remote attackers to trigger a denial of service (defect-mode transition and service outage) by sending malformed HTTP traffic or malformed IP packets. The publicly provided document...

Google Chrome Multiple Vulnerabilities - February 12 (Windows 01)

The host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnfeb12win01.nasl 5988 2017-04-20 09:02:29Z teissa $ Google Chrome Multiple Vulnerabilities - February 12 Windows 01 Authors: Madhuri D Copyright: Copyright c 201...