71 matches found
CVE-2023-3031 Prestahop module King-Avis - Path traversal
Improper Limitation of a Pathname leads to a Path Traversal vulnerability in the module King-Avis for Prestashop, allowing a user knowing the download token to read arbitrary local files.This issue affects King-Avis: before 17.3.15...
CVE-2023-3031 Prestahop module King-Avis - Path traversal
Improper Limitation of a Pathname leads to a Path Traversal vulnerability in the module King-Avis for Prestashop, allowing a user knowing the download token to read arbitrary local files.This issue affects King-Avis: before 17.3.15...
CVE-2022-3031
creationtimestamp| type| source ---|---|--- 2022-10-17 20:13:30+00:00| seen| https://t.me/cibsecurity/51612 2025-05-13 16:30:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16156...
CVE-2022-3031
An issue has been discovered in GitLab CE/EE affecting all versions before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. It may be possible for an attacker to guess a user's password by brute force by sending crafted requests to a specific...
CVE-2022-3031
CVE-2022-3031 affects GitLab CE/EE, with affected versions: all versions before 15.1.6, all versions from 15.2 before 15.2.4, and all versions from 15.3 before 15.3.2. The issue may allow an attacker to brute-force a user’s password by sending crafted requests to a specific endpoint, even if 2FA ...
CVE-2022-3031
An issue has been discovered in GitLab CE/EE affecting all versions before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. It may be possible for an attacker to guess a user's password by brute force by sending crafted requests to a specific...
CVE-2021-3031 PAN-OS: Information exposure in Ethernet data frame construction (Etherleak)
Padding bytes in Ethernet packets on PA-200, PA-220, PA-500, PA-800, PA-2000 Series, PA-3000 Series, PA-3200 Series, PA-5200 Series, and PA-7000 Series firewalls are not cleared before the data frame is created. This leaks a small amount of random information from the firewall memory into the...
CVE-2021-3031
CVE-2021-3031 (Etherleak) affects PAN-OS on multiple Palo Alto Networks devices (PA-200/220/500/800/2000/3000/3200/5200/7000 series). Padding bytes in Ethernet frames are not cleared before frame creation, causing leakage of tiny memory fragments into packets. An attacker on the same Ethernet sub...
Palo Alto Networks PAN-OS 8.1.x < 8.1.18 / 9.0.x < 9.0.12 / 9.1.x < 9.1.5 Vulnerability
The version of Palo Alto Networks PAN-OS running on the remote host is 8.1.x prior to 8.1.18 or 9.0.x prior to 9.0.12 or 9.1.x prior to 9.1.5. It is, therefore, affected by a vulnerability. - Padding bytes in Ethernet packets on PA-200, PA-220, PA-500, PA-800, PA-2000 Series, PA-3000 Series,...
CVE-2019-3031
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.34 and prior to 6.0.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...
CVE-2019-3031
CVE-2019-3031 affects Oracle VM VirtualBox (Core) with vulnerable versions before 5.2.34 and before 6.0.14. The advisory states the vulnerability allows a high-privilege attacker with logon to the infrastructure where VirtualBox runs to compromise the VirtualBox installation, potentially leading ...
Oracle VirtualBox Security Updates (oct2019-5072832) - 03 - Mac OS X
Oracle VirtualBox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:vmvirtualbox";...
CVE-2018-3031
Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker with network access...
CVE-2018-3031
CVE-2018-3031 affects Oracle FLEXCUBE Investor Servicing (Infrastructure subcomponent) on versions 12.0.4, 12.1.0, 12.3.0 and 12.4.0. The vulnerability enables a low-privileged, network-accessible attacker (via HTTP) to modify or delete certain data and cause partial denial of service. CVSS v3.0 ...
CVE-2007-3031
This CVE entry is rejected/not used and does not represent an active vulnerability entry.
CVE-2017-3031
CVE-2017-3031 affects Adobe Acrobat Reader (various channels) with a memory address leak in the XSLT engine for affected builds (e.g., 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier). The linked open vulnerability set (APSB17-11) groups multiple issues; the provided docum...
CVE-2016-3031
Consolidated findings for CVE-2016-3031: IBM Cognos Analytics 11.0.x is affected by a cross-site scripting (XSS) vulnerability in the Web UI that can allow an attacker to inject arbitrary JavaScript and potentially disclose credentials within a trusted session. The IBM bulletins cite affected ver...
Ubuntu 14.04 LTS : Pidgin vulnerabilities (USN-3031-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3031-1 advisory. Yves Younan discovered that Pidgin contained multiple issues in the MXit protocol support. A remote attacker could use this issue to cause Pidgin to cras...
Debian Security Advisory DSA 3031-1 (apt - security update)
The Google Security Team discovered a buffer overflow vulnerability in the HTTP transport code in apt-get. An attacker able to man-in-the-middle a HTTP request to an apt repository can trigger the buffer overflow, leading to a crash of the http apt method binary, or potentially to arbitrary code...