CVE-2013-3344

Heap-based buffer overflow in Adobe Flash Player before 11.7.700.232 and 11.8.x before 11.8.800.94 on Windows and Mac OS X, before 11.2.202.297 on Linux, before 11.1.111.64 on Android 2.x and 3.x, and before 11.1.115.69 on Android 4.x allows attackers to execute arbitrary code via unspecified...

CVE-2013-3344

CVE-2013-3344 refers to a heap-based buffer overflow in Adobe Flash Player that could allow arbitrary code execution. According to the description, affected versions include Flash Player on Windows and Mac OS X before 11.7.700.232 and 11.8.x before 11.8.800.94, Linux before 11.2.202.297, Android ...

Flash Player for Mac <= 10.3.183.90 / 11.7.700.225 Memory Corruption (APSB13-17)

According to its version, the instance of Flash Player installed on the remote Mac OS X host is 10.x equal or prior to 10.3.183.90, or 11.x equal or prior to 10.7.700.225. It is, therefore, potentially affected by multiple vulnerabilities : - A heap based buffer overflow vulnerability exists that...

Moderate: Red Hat Security Advisory: Red Hat Network Satellite server security and enhancement update

Updated packages that fix several security issues and add one enhancement are now available for Red Hat Network Satellite 5.4.1 for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CV...

CVE-2009-3344

CVE-2009-3344 concerns SAP Crystal Reports Server 2008 on Windows XP with a denial-of-service condition (infinite loop) reported via VulnDisco Pack 8.3–8.11. The public disclosure includes no actionable information and does not specify the attack vectors, affected components, or a fix. Multiple s...

CVE-2008-3344

CVE-2008-3344 affects MyioSoft EasyE-Cards, specifically the staticpages/easyecards/index.php component in versions 3.5 trial edition (tr) and 3.10a. The issue is multiple reflected XSS vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via the parameters ResultHtm...

Debian Security Advisory DSA 884-1 (horde3)

The remote host is missing an update to horde3 announced via advisory DSA 884-1. Mike O'Connor discovered that the default installation of Horde3 on Debian includes an administrator account without a password. Already configured installations will not be altered by this update. The old stable...

CVE-2007-3344

CVE-2007-3344 describes multiple cross-site scripting (XSS) vulnerabilities in netjukebox 4.01b. The issue allows remote attackers to inject arbitrary web script or HTML via the following parameters: (1) album_id, (2) order, (3) sort, (4) filter, (5) genre_id to index.php, and (6) url to ridirect...

CVE-2006-3344

Siemens Speedstream Wireless Router 2624 is affected by CVE-2006-3344 via the UPnP/1.0 component, allowing local users to bypass authentication and access protected files. The issue is tied to UPnP/1.0 usage in the router, with impact described as partial on confidentiality, integrity, and availa...

CVE-2005-3344

The CVE-2005-3344 issue affects Horde Groupware/Horde3 where the default installation ships with an administrative account that has a blank password. This enables unauthenticated remote access to administrative functions, potentially compromising the system. Debian’s DSA-884-1 advisory fixes Hord...

[SECURITY] [DSA 884-1] New Horde3 packages fix insecure default installation

-------------------------------------------------------------------------- Debian Security Advisory DSA 884-1 [email protected] http://www.debian.org/security/ Martin Schulze November 7th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 884-1] New Horde3 packages fix insecure default installation

-------------------------------------------------------------------------- Debian Security Advisory DSA 884-1 [email protected] http://www.debian.org/security/ Martin Schulze November 7th, 2005 http://www.debian.org/security/faq -...