Lucene search
+L

71 matches found

Cvelist
Cvelist
added 2023/06/02 12:42 p.m.19 views

CVE-2023-3031 Prestahop module King-Avis - Path traversal

Improper Limitation of a Pathname leads to a Path Traversal vulnerability in the module King-Avis for Prestashop, allowing a user knowing the download token to read arbitrary local files.This issue affects King-Avis: before 17.3.15...

4.9CVSS5.4AI score0.0079EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2023/06/02 12:42 p.m.8 views

CVE-2023-3031 Prestahop module King-Avis - Path traversal

Improper Limitation of a Pathname leads to a Path Traversal vulnerability in the module King-Avis for Prestashop, allowing a user knowing the download token to read arbitrary local files.This issue affects King-Avis: before 17.3.15...

4.9CVSS6.8AI score0.0079EPSS
SaveExploits1References1
Circl
Circl
added 2022/10/17 8:13 p.m.8 views

CVE-2022-3031

creationtimestamp| type| source ---|---|--- 2022-10-17 20:13:30+00:00| seen| https://t.me/cibsecurity/51612 2025-05-13 16:30:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16156...

7.5CVSS7.3AI score0.00529EPSS
SaveExploits0References2
NVD
NVD
added 2022/10/17 4:15 p.m.26 views

CVE-2022-3031

An issue has been discovered in GitLab CE/EE affecting all versions before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. It may be possible for an attacker to guess a user's password by brute force by sending crafted requests to a specific...

7.5CVSS0.00529EPSS
SaveExploits0References2
CVE
CVE
added 2022/10/17 12:0 a.m.91 views

CVE-2022-3031

CVE-2022-3031 affects GitLab CE/EE, with affected versions: all versions before 15.1.6, all versions from 15.2 before 15.2.4, and all versions from 15.3 before 15.3.2. The issue may allow an attacker to brute-force a user’s password by sending crafted requests to a specific endpoint, even if 2FA ...

7.5CVSS7.2AI score0.00529EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2022/10/17 12:0 a.m.9 views

CVE-2022-3031

An issue has been discovered in GitLab CE/EE affecting all versions before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. It may be possible for an attacker to guess a user's password by brute force by sending crafted requests to a specific...

3.7CVSS6.9AI score0.00529EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2021/01/13 6:10 p.m.42 views

CVE-2021-3031 PAN-OS: Information exposure in Ethernet data frame construction (Etherleak)

Padding bytes in Ethernet packets on PA-200, PA-220, PA-500, PA-800, PA-2000 Series, PA-3000 Series, PA-3200 Series, PA-5200 Series, and PA-7000 Series firewalls are not cleared before the data frame is created. This leaks a small amount of random information from the firewall memory into the...

4.3CVSS4.9AI score0.00538EPSS
SaveExploits0References1
CVE
CVE
added 2021/01/13 6:10 p.m.151 views

CVE-2021-3031

CVE-2021-3031 (Etherleak) affects PAN-OS on multiple Palo Alto Networks devices (PA-200/220/500/800/2000/3000/3200/5200/7000 series). Padding bytes in Ethernet frames are not cleared before frame creation, causing leakage of tiny memory fragments into packets. An attacker on the same Ethernet sub...

4.3CVSS4.7AI score0.00538EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/01/13 12:0 a.m.27 views

Palo Alto Networks PAN-OS 8.1.x < 8.1.18 / 9.0.x < 9.0.12 / 9.1.x < 9.1.5 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 8.1.x prior to 8.1.18 or 9.0.x prior to 9.0.12 or 9.1.x prior to 9.1.5. It is, therefore, affected by a vulnerability. - Padding bytes in Ethernet packets on PA-200, PA-220, PA-500, PA-800, PA-2000 Series, PA-3000 Series,...

4.3CVSS5.8AI score0.00538EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2019/10/16 5:41 p.m.28 views

CVE-2019-3031

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.34 and prior to 6.0.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...

6.4AI score0.00898EPSS
SaveExploits0References4
CVE
CVE
added 2019/10/16 5:41 p.m.80 views

CVE-2019-3031

CVE-2019-3031 affects Oracle VM VirtualBox (Core) with vulnerable versions before 5.2.34 and before 6.0.14. The advisory states the vulnerability allows a high-privilege attacker with logon to the infrastructure where VirtualBox runs to compromise the VirtualBox installation, potentially leading ...

6CVSS6.2AI score0.00898EPSS
SaveExploits0References4Affected Software1
OpenVAS
OpenVAS
added 2019/10/16 12:0 a.m.60 views

Oracle VirtualBox Security Updates (oct2019-5072832) - 03 - Mac OS X

Oracle VirtualBox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:vmvirtualbox";...

8.8CVSS7.6AI score0.01198EPSS
SaveExploits0References1
NVD
NVD
added 2018/07/18 1:29 p.m.20 views

CVE-2018-3031

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker with network access...

5.5CVSS4.5AI score0.01611EPSS
SaveExploits0References3
CVE
CVE
added 2018/07/18 1:0 p.m.55 views

CVE-2018-3031

CVE-2018-3031 affects Oracle FLEXCUBE Investor Servicing (Infrastructure subcomponent) on versions 12.0.4, 12.1.0, 12.3.0 and 12.4.0. The vulnerability enables a low-privileged, network-accessible attacker (via HTTP) to modify or delete certain data and cause partial denial of service. CVSS v3.0 ...

5.5CVSS4.9AI score0.01611EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2017/05/11 2:1 p.m.36 views

CVE-2007-3031

This CVE entry is rejected/not used and does not represent an active vulnerability entry.

6.9AI score
SaveExploits0
Cvelist
Cvelist
added 2017/05/11 2:1 p.m.8 views

CVE-2007-3031

...

SaveExploits0
CVE
CVE
added 2017/04/12 2:0 p.m.86 views

CVE-2017-3031

CVE-2017-3031 affects Adobe Acrobat Reader (various channels) with a memory address leak in the XSLT engine for affected builds (e.g., 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier). The linked open vulnerability set (APSB17-11) groups multiple issues; the provided docum...

4.3CVSS6AI score0.03159EPSS
SaveExploits0References4Affected Software4
CVE
CVE
added 2017/04/05 6:0 p.m.53 views

CVE-2016-3031

Consolidated findings for CVE-2016-3031: IBM Cognos Analytics 11.0.x is affected by a cross-site scripting (XSS) vulnerability in the Web UI that can allow an attacker to inject arbitrary JavaScript and potentially disclose credentials within a trusted session. The IBM bulletins cite affected ver...

5.4CVSS5.2AI score0.00516EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2016/07/13 12:0 a.m.27 views

Ubuntu 14.04 LTS : Pidgin vulnerabilities (USN-3031-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3031-1 advisory. Yves Younan discovered that Pidgin contained multiple issues in the MXit protocol support. A remote attacker could use this issue to cause Pidgin to cras...

8.1CVSS6.5AI score0.04554EPSS
SaveExploits17References17
OpenVAS
OpenVAS
added 2014/09/23 12:0 a.m.25 views

Debian Security Advisory DSA 3031-1 (apt - security update)

The Google Security Team discovered a buffer overflow vulnerability in the HTTP transport code in apt-get. An attacker able to man-in-the-middle a HTTP request to an apt repository can trigger the buffer overflow, leading to a crash of the http apt method binary, or potentially to arbitrary code...

6.8CVSS9.7AI score0.02437EPSS
SaveExploits0References1
Rows per page
Query Builder