79 matches found
CVE-2017-3428
Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network...
CVE-2017-3428
CVE-2017-3428 affects Oracle E-Business Suite, Oracle One-to-One Fulfillment User Interface. Affected versions: 12.1.1–12.2.6. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment; attacks may lead to unauthorized access to ...
CVE-2016-3428
CVE-2016-3428 is associated with Oracle Agile Engineering Data Management in Oracle Supply Chain Products Suite 6.1.3.0 and 6.2.0.0, where an unspecified vulnerability could allow remote attackers to affect availability through the Engineering Communication Interface. The connected records confir...
CVE-2014-3428
CVE-2014-3428 affects Yealink VoIP Phones (Firmware 28.72.0.2) with vulnerabilities in the web interface: XSS via the servlet’s model parameter and a CRLF injection path demonstrated with the linepage parameter. Root cause is insufficient input sanitization in the web UI servlet handling these pa...
openSUSE Security Update : seamonkey (seamonkey-3428)
Mozilla SeaMonkey was updated to 2.0.10 to fix one critical security issue. MFSA 2010-73 / CVE-2010-3765: Morten Krkvik of Telenor SOC reported an exploit targeting particular versions of Firefox 3.6 on Windows XP that Telenor found while investigating an intrusion attempt on a customer network...
CVE-2013-3428
CVE-2013-3428 affects Cisco Secure Access Control System (ACS). The web interface does not properly suppress error-condition details due to insufficient filtering of error output, allowing remote authenticated users to obtain sensitive information via an error-triggering request (Bug ID CSCue6595...
CVE-2012-3428
The CVE-2012-3428 issue affects the IronJacamar container prior to 1.0.12.Final used with JBoss AS. When allow-multiple-users is enabled alongside a security domain, the credentials passed to getConnection are not used, potentially enabling an attacker to obtain access to an arbitrary datasource ...
Important: Red Hat Security Advisory: JBoss Enterprise Application Platform 6.0.1 update
JBoss Enterprise Application Platform 6.0.1, which fixes multiple security issues, various bugs, and adds enhancements, is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring...
openSUSE Security Update : seamonkey (seamonkey-3428)
Mozilla SeaMonkey was updated to 2.0.10 to fix one critical security issue. MFSA 2010-73 / CVE-2010-3765: Morten Krkvik of Telenor SOC reported an exploit targeting particular versions of Firefox 3.6 on Windows XP that Telenor found while investigating an intrusion attempt on a customer network...
CVE-2010-3428
SQL injection vulnerability in modules/notes/json.php in Intermesh Group-Office 3.5.9 allows remote attackers to execute arbitrary SQL commands via the categoryid parameter in a category action...
Group-Office 'modules/notes/json.php' SQL Injection Vulnerability
Group-Office is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to execute arbitrary code, compromise the application, access or modify data, or exploit latent...
CVE-2010-3428
creationtimestamp| type| source ---|---|--- 2010-09-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14988...
CVE-2009-3428
CVE-2009-3428 describes a stack-based buffer overflow in Easy Music Player 1.0.0.2 that allows remote code execution via a crafted .wav file. The NVD entry lists a high base score (9.3) with network attack vector, no authentication, and complete impact on confidentiality, integrity and availabili...
CVE-2009-3428
creationtimestamp| type| source ---|---|--- 2009-08-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9418 2009-08-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9412 2009-08-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9420...
Fedora Core 9 FEDORA-2009-3428 (xine-lib)
The remote host is missing an update to xine-lib announced via advisory FEDORA-2009-3428. OpenVAS Vulnerability Test $Id: fcore20093428.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-3428 xine-lib Authors: Thomas Reinke Copyright: Copyright c 2009...
CVE-2007-3428
CVE-2007-3428 describes multiple unspecified vulnerabilities in phpTrafficA before 1.4.2 that allow remote attackers to influence the application via the file parameter to plotStatBar.php or plotStatPie.php. The initial entry notes the impact as unknown and does not specify exploit vectors or aff...
CVE-2006-3428
TigerTom TTCalc 1.0 is affected by a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML through the year parameter in loan.php and mortgage.php. Root cause: unsanitized input reflected in responses, per CVE-2006-3428. Impact: browser-scrip...
CVE-2005-3428
Rockliffe MailSite Express is affected by a cross-site scripting (XSS) vulnerability in which an attacker can inject arbitrary script or HTML via a message body. The issue affects versions prior to 6.1.22. Root cause details are not fully enumerated in the provided documents, but the vulnerabilit...
