272 matches found
CVE-2012-3136
CVE-2012-4681 affects the Java Runtime Environment/OpenJDK Beans component with improper permission checks, enabling remote code execution. Publicly known fixes were issued for OpenJDK/JRE (e.g., ALAS-2012-119 and RHSA/CESA advisories) and CentOS/RHEL updates addressing CVE-2012-1682, CVE-2012-05...
CVE-2012-1682
CVE-2012-1682 (Beans component) and CVE-2012-4681 relate to OpenJDK/JRE sandbox bypass and remote code execution. Connected advisories (CESA-2012:1221/1222/1223) describe updates for java-1.6.0-openjdk and java-1.7.0-openjdk to fix these issues, noting that the Beans component could bypass sandbo...
CVE-2011-3136
CVE-2011-3136 affects IBM Tivoli Federated Identity Manager (TFIM) and TFIMBG with versions prior to 6.2.0.9. The description indicates an unspecified vulnerability with unknown impact and attack vectors (APAR IV03048); no concrete root cause, affected component specifics, exploit details, or rem...
CVE-2010-3136
CVE-2010-3136 affects Skype on Windows (v4.2.0.169 and earlier). The vulnerability is an untrusted search path that enables DLL hijacking by a Trojan wab32.dll located in the same folder as a .skype file, allowing arbitrary code execution with local access (and potentially remote exposure). Multi...
CVE-2010-3136
creationtimestamp| type| source ---|---|--- 2010-08-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14766...
CVE-2008-3136
The CVE-2008-3136 entry concerns a SQL injection in AShop Deluxe 4.x. Affected software: AShop Deluxe (version family 4.x). Vulnerable component: catalogue.php, with exploitation via the cat parameter. Root cause: unsanitized input leading to arbitrary SQL execution. Impact: partial confidentiali...
CVE-2008-3136
creationtimestamp| type| source ---|---|--- 2008-06-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5976...
CVE-2007-3136
CVE-2007-3136 affects newsSync 1.5.0rc6 via a PHP remote file inclusion vulnerability in inc/nuke_include.php. An attacker can supply a URL to newsSync_NUKE_PATH, enabling remote PHP code execution. The affected component is PHP on the newsSync server, with the root cause described as improper ha...
CVE-2006-3136
Multiple PHP remote file inclusion vulnerabilities in Nucleus 3.23 allow remote attackers to execute arbitrary PHP code via a URL the DIRLIBS parameter in 1 path/action.php, and to files in path/nucleus including 2 media.php, 3 /xmlrpc/server.php, and 4 /xmlrpc/apimetaweblog.inc.php. NOTE: this i...
CVE-2006-3136
CVE-2006-3136 affects Nucleus CMS 3.23 and reports multiple PHP remote file inclusion vulnerabilities. The issue allows an attacker to trigger arbitrary PHP code execution by supplying a URL via the DIR_LIBS parameter in the affected endpoints: path/action.php and files under path/nucleus includi...
CVE-2005-3136
CVE-2005-3136 affects Virtools Web Player 3.0.0.100 and earlier. The vulnerability is a directory traversal flaw where a .. in a filename enables writing to arbitrary files. The connected documents provide the vulnerability description and do not include explicit exploitation details or confirmed...
