86 matches found
SUSE CVE-2015-3131
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allows attackers to execu...
CVE-2022-3131
creationtimestamp| type| source ---|---|--- 2022-10-17 16:13:15+00:00| seen| https://t.me/cibsecurity/51568 2025-05-14 16:33:52+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16334...
CVE-2022-3131 Search Logger <= 0.9 - Admin+ SQLi
The Search Logger WordPress plugin through 0.9 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users...
CVE-2022-3131
CVE-2022-3131 affects the Search Logger WordPress plugin ≤ 0.9. The issue is an SQL injection caused by improper sanitisation/escaping of input before SQL statement construction, allowing an attacker with high privileges (Admin+) to exploit it. Public details indicate authenticated SQLi, with evi...
SUSE: Security Advisory (SUSE-SU-2017:3131-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-3131
creationtimestamp| type| source ---|---|--- 2021-01-13 19:25:23+00:00| seen| https://t.me/cibsecurity/22087...
CVE-2021-3131
The CVE concerns the Web server in 1C:Enterprise 8, prior to version 8.3.17.1851, which transmits credentials in base64 via the creds URL parameter. The issue is confirmed by multiple connected sources, including PT-2021-19235, which specifies affected versions as 1C:Enterprise 8 before 8.3.17.18...
CVE-2020-3131
The CVE-2020-3131 issue affects the Cisco Webex Teams client for Windows, caused by insufficient input validation when processing received adaptive cards. Affected component: the Windows client (Release 3.0.13131). Exploit requires an authenticated attacker with a valid developer account to send ...
CVE-2016-3131
Cloudera CDH before 5.6.1 allows authorization bypass via direct internal API calls...
RHEL 7 / 8 : OpenShift Container Platform 4.1.20 golang (RHSA-2019:3131)
The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:3131 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or...
CVE-2018-3131
Vulnerability in the Oracle Hospitality Gift and Loyalty component of Oracle Food and Beverage Applications. The supported version that is affected is 9.0. Easily exploitable vulnerability allows low privileged attacker having Report privilege with logon to the infrastructure where Oracle...
CVE-2018-3131
CVE-2018-3131 affects Oracle Hospitality Gift and Loyalty in Oracle Food and Beverage Applications (component), with version 9.0 identified as affected. The vulnerability permits a low-privileged attacker with Report privilege and logon to the infrastructure running the Gift and Loyalty component...
CVE-2018-3131
Vulnerability in the Oracle Hospitality Gift and Loyalty component of Oracle Food and Beverage Applications. The supported version that is affected is 9.0. Easily exploitable vulnerability allows low privileged attacker having Report privilege with logon to the infrastructure where Oracle...
Solaris 10 (sparc) : 149191-01
Vulnerability in the Solaris component of Oracle Sun Products Suite subcomponent: Network/NFS. Supported versions that are affected are 9, 10 and 11. Difficult to exploit vulnerability allows successful unauthenticated network attacks via NFS. Successful attack of this vulnerability can result in...
CVE-2017-3131
A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.4.0 through 5.4.4 and 5.6.0 allows attackers to execute unauthorized code or commands via the filter input in "Applications" under FortiView...
CVE-2017-3131
CVE-2017-3131 : Fortinet FortiOS versions 5.4.0–5.4.4 and 5.6.0 are affected by a cross‑site scripting (XSS) vulnerability in the FortiView Applications filter input, allowing an attacker to execute arbitrary JavaScript. The issue is tied to FortiOS’s FortiView FortiView filter handling and is ev...
FortiOS 5.6.0 - Cross-Site Scripting
FortiOS 5.6.0 - Cross-Site Scripting Title: FortiOS = 5.6.0 Multiple XSS Vulnerabilities Vendor: Fortinet www.fortinet.com CVE: CVE-2017-3131, CVE-2017-3132, CVE-2017-3133 Date: 28.07.2016 Author: Patryk Bogdan @patrykbogdan Affected FortiNet products: CVE-2017-3131 : FortiOS versions 5.4.0 to...
CVE-2017-3131
creationtimestamp| type| source ---|---|--- 2017-07-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42388...
FortiOS < 5.6.0 - Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Title: FortiOS = 5.6.0 Multiple XSS Vulnerabilities Vendor: Fortinet www.fortinet.com CVE: CVE-2017-3131, CVE-2017-3132, CVE-2017-3133 Date: 28.07.2016 Author: Patryk Bogdan @patrykbogdan Affected FortiNet products: CVE-2017-3131 : FortiOS...
Design/Logic Flaw
An issue was discovered in Moxa OnCell OnCellG3470A-LTE, AWK-1131A/3131A/4131A Series, AWK-3191 Series, AWK-5232/6232 Series, AWK-1121/1127 Series, WAC-1001 V2 Series, WAC-2004 Series, AWK-3121-M12-RTG Series, AWK-3131-M12-RCC Series, AWK-5232-M12-RCC Series, TAP-6226 Series, AWK-3121/4121 Series...