CVE-2011-3196

The CVE-2011-3196 issue affects Domain Technologie Control (DTC) prior to version 0.34.1. The root cause is world-readable permissions on /etc/apache2/apache2.conf, which allowed local users to read a configuration file and obtain the dtcdaemons MySQL password. Impact was local, with confidential...

Microsoft Windows Kernel 本地权限提升漏洞(MS13-063)

BUGTRAQ ID: 61682 CVECAN ID: CVE-2013-3196 Windows是一款由美国微软公司开发的窗口化操作系统。 Windows内核中存在NTVDM子系统内存破坏条件造成的权限提升漏洞。攻击者可利用这些漏洞破坏内存，在内核模式中执行任意代码。 0 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows Server 2003 Web Edition Microsoft Windows Server 2003 Standard...

CVE-2013-3196

The CVE-2013-3198 entry concerns the NTVDM kernel component in 32‑bit Windows platforms (XP SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2, Windows 7 SP1, Windows 8). The vulnerability arises from improper validation of kernel‑memory addresses in NTVDM, enabling local users to gain privileges o...

Microsoft Windows Kernel Privilege Elevation Vulnerabilities (2859537)

This host is missing an important security update according to Microsoft Bulletin MS13-063. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2012-3196

CVE-2012-3196 affects Oracle E-Business Suite’s Oracle Human Resources component (versions 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, 12.1.3 ). The vulnerability is described as unspecified and allows remote attackers to affect confidentiality and availability , related to PDF generation . Connected docu...

CVE-2010-3196

IBM DB2 9.7 before FP2 is affected when AUTO_REVAL is set to IMMEDIATE. A remote authenticated user can cause a denial of service (loss of privileges) to a view owner by defining a dependent view. The remediation is to apply Fix Pack 2 (FP2) for DB2 9.7 to mitigate the issue.

CVE-2009-3196

The CVE-2009-3196 entry documents a cross-site scripting (XSS) vulnerability in the PHP Video Script by JCE-Tech, specifically in index.php, where an attacker can inject arbitrary web script or HTML via the key parameter. The affected component is the index.php of JCE-Tech PHP Video Script; root ...

CVE-2009-3196

creationtimestamp| type| source ---|---|--- 2009-08-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34887...

CVE-2008-3196

skeleton.c in yacc does not properly handle reduction of a rule with an empty right hand side, which allows context-dependent attackers to cause an out-of-bounds stack access when the yacc stack pointer points to the end of the stack...

CVE-2008-3196

skeleton.c in yacc does not properly handle reduction of a rule with an empty right hand side, which allows context-dependent attackers to cause an out-of-bounds stack access when the yacc stack pointer points to the end of the stack...

CVE-2008-3196

CVE-2008-3196 involves skeleton.c in yacc failing to properly handle reduction of a rule with an empty right-hand side, which can allow context-dependent attackers to cause an out-of-bounds stack access when the yacc stack pointer points to the end of the stack. The description is sourced from th...

CVE-2007-3196

The CVE-2007-3196 entry concerns a SQL injection in vBSupport.php within vSupport Integrated Ticket System 3.x.x. The vulnerability is triggered by the ticketid parameter in the showticket action, allowing remote attackers to execute arbitrary SQL commands. Documents confirm the affected componen...

CVE-2006-3196

index.php in singapore 0.10.0 and earlier allows remote attackers to obtain the installation path via an invalid template parameter, which reveals the path in an error message...

CVE-2006-3196

CVE-2006-3196 affects the Singapore CMS (versions 0.10.0 and earlier). The flaw lies in index.php where an invalid template parameter causes an error message that reveals the installation path, enabling a remote attacker to obtain the server path. The connected documents confirm the vulnerability...

CVE-2005-3196

CVE-2005-3196 concerns the Planet Technology Corp FGSW2402RS switch running firmware 1.2, where a default password allows attackers with physical access to the device’s serial port to gain privileges. The affected component is the switch’s firmware authentication mechanism; the root cause is a de...