CVE-2019-3418

The CVE-2019-3418 entry concerns the ZTE ZXHN F670 family. A cross-site scripting (XSS) vulnerability exists due to incomplete input validation, affecting all versions up to V1.1.10P3T18. An authorized user can trigger the vulnerability to execute malicious scripts (impact: client-side code execu...

CVE-2011-3418

...

CVE-2011-3418

CVE-2011-3418 is rejected and does not represent an active vulnerability entry.

CVE-2017-3418

Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite subcomponent: User Interface. The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technica...

CVE-2017-3418

CVE-2017-3418 affects Oracle E-Business Suite, specifically the Oracle CRM Technical Foundation component (User Interface) version 12.1.3. The vulnerability allows an unauthenticated attacker with network access over HTTP to compromise the CRM Technical Foundation; attacks may impact additional p...

GLSA-201701-64 : X.Org X Server: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201701-64 X.Org X Server: Multiple vulnerabilities Multiple vulnerabilities have been discovered in X.Org X Server. Please review the CVE identifiers referenced below for details. Impact : An authenticated attacker could possibly...

CVE-2015-3418

The ProcPutImage function in dix/dispatch.c in X.Org Server aka xserver and xorg-server before 1.16.4 allows attackers to cause a denial of service divide-by-zero and crash via a zero-height PutImage request...

UBUNTU-CVE-2015-3418

The ProcPutImage function in dix/dispatch.c in X.Org Server aka xserver and xorg-server before 1.16.4 allows attackers to cause a denial of service divide-by-zero and crash via a zero-height PutImage request...

CVE-2015-3418

The ProcPutImage function in dix/dispatch.c in X.Org Server aka xserver and xorg-server before 1.16.4 allows attackers to cause a denial of service divide-by-zero and crash via a zero-height PutImage request...

CVE-2015-3418

CVE-2015-3418 affects the X.Org Server (xserver/xorg-server) ProcPutImage function in dix/dispatch.c and is exploitable via a zero-height PutImage request. Affected with versions prior to 1.16.4 may experience denial of service (divide-by-zero) or crash. Connected documents confirm this behavior ...

CVE-2016-3418

Unspecified vulnerability in the DataStore component in Oracle Berkeley DB 11.2.5.0.32, 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, 12.1.6.0.35, and 12.1.6.1.26 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2016-0682,...

Design/Logic Flaw

Unspecified vulnerability in the DataStore component in Oracle Berkeley DB 11.2.5.0.32, 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, 12.1.6.0.35, and 12.1.6.1.26 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2016-0682,...

CVE-2016-3418

Unspecified vulnerability in the DataStore component in Oracle Berkeley DB 11.2.5.0.32, 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, 12.1.6.0.35, and 12.1.6.1.26 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2016-0682,...

CVE-2016-3418

CVE-2016-3418 affects the DataStore component of Oracle Berkeley DB versions 11.2.5.0.32, 11.2.5.1.29, 11.2.5.2.42, 11.2.5.3.28, 12.1.6.0.35, and 12.1.6.1.26. The vulnerability allows local users to impact confidentiality, integrity, and availability via unknown vectors; root cause and exploit de...

Debian DSA-3418-1 : chromium-browser - security update

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2015-6788 A type confusion issue was discovered in the handling of extensions. - CVE-2015-6789 cloudfuzzer discovered a use-after-free issue. - CVE-2015-6790 Inti De Ceukelaire discovered a way to inject HTML into...

Debian Security Advisory DSA 3418-1 (chromium-browser - security update)

Several vulnerabilities have been discovered in the chromium web browser. CVE-2015-6788 A type confusion issue was discovered in the handling of extensions. CVE-2015-6789 cloudfuzzer discovered a use-after-free issue. CVE-2015-6790 Inti De Ceukelaire discovered a way to inject HTML into serialize...

SUSE SLED12 / SLES12 Security Update : xorg-x11-server (SUSE-SU-2015:1127-1)

The X Server was updated to fix 1 security issues and 4 bugs : Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

SUSE-SU-2015:1127-1 Security update for xorg-x11-server

The X Server was updated to fix 1 security issues and 4 bugs: Security issues: - CVE-2015-3418: Fixed a regression introduced by CVE-2014-8092 in PutImage that caused crashes when called with 0 height bnc928520. Bugs fixed: - Xephyr: Don't crash when no command line argument is specified The DDX...

SUSE SLED11 / SLES11 Security Update : xorg-x11-server (SUSE-SU-2015:1025-1)

This update for xorg-x11-server fixes a regression introduced with the fix for CVE-2014-8092 : CVE-2015-3418: Xserver: PutImage crashes Server when called with 0 height. bsc928520 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

MGASA-2015-0196 Updated x11-server packages fix CVE-2015-3418

Updated x11-server packages fix security vulnerability: A regression in the fix for CVE-2014-8092 MGASA-2014-0532 caused another issue which could lead to a local denial of service CVE-2015-3418...