236 matches found
CVE-2014-3446
CVE-2014-3446 describes an unauthenticated SQL injection in BSS Continuity CMS 4.2.22640.0, specifically in wcm/system/pages/admin/getnode.aspx via the nodeid parameter. The vulnerability arises from lack of input sanitization when constructing an SQL query to retrieve node information, allowing ...
BSS Continuity CMS 4.2.22640.0 SQL Injection
Vulnerability title: Unauthenticated Blind SQL Injection in BSS Continuity CMS CVE: CVE-2014-3446 Vendor: BSS Product: Continuity CMS Affected version: 4.2.22640.0 Fixed version: N/A Reported by: Jerzy Kramarz Details: he following URL and parameters have been confirmed to suffer from Blind SQL...
Fedora Update for ReviewBoard FEDORA-2014-3446
Check for the Version of ReviewBoard OpenVAS Vulnerability Test Fedora Update for ReviewBoard FEDORA-2014-3446 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...
Fedora Update for ReviewBoard FEDORA-2014-3446
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2013-3446
Cisco Digital Media Manager (DMM) is affected by CVE-2013-3446: an open redirect in the DMM login page could allow an unauthenticated, remote attacker to redirect users to an arbitrary external URL, potentially enabling phishing. The issue stems from an open redirect vulnerability in the login fl...
CVE-2012-3446
Apache Libcloud before 0.11.1 suffers from an incorrect regular expression in hostname verification against the X.509 certificate’s CN/subjectAltName, allowing MITM via crafted certificates. Affected versions: Libcloud prior to 0.11.1. Root cause: faulty domain name matching logic in SSL verifica...
CVE-2011-3446
Summary: CVE-2011-3446 affects Apple Type Services (ATS) in Mac OS X up to 10.7.3. The vulnerability stems from improper memory management for data-font files, enabling remote code execution or a denial of service when a crafted font is opened by Font Book. Affected product/component: Apple Mac O...
Apple Releases Multiple Security Updates
Apple has released security updates for Apple OS X Lion 10.7 to 10.7.2, OS X Lion Server 10.7 to 10.7.2, Mac OS 10.6.8, and Mac OS X Server v 10.6.8 to address multiple vulnerabilities. These vulnerabilities may allow an attacker to execute arbitrary code, cause a denial-of-service condition,...
Mac OS X Multiple Vulnerabilities (Security Update 2012-001) (BEAST)
The remote host is running a version of Mac OS X 10.6 that does not have Security Update 2012-001 applied. This update contains multiple security-related fixes for the following components : - Apache - ATS - ColorSync - CoreAudio - CoreMedia - CoreText - curl - Data Security - dovecot - filecmds ...
CVE-2009-3446
The CVE-2009-3446 issue involves the MyRemote Video Gallery (com_mytube) component for Joomla! (version 1.0 Beta). The vulnerability is an SQL injection in the user_id parameter within a videos action to index.php, enabling a remote attacker to execute arbitrary SQL commands. According to the sou...
CVE-2009-3446
creationtimestamp| type| source ---|---|--- 2009-09-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9733...
CVE-2008-3446
CVE-2008-3446 is a directory traversal vulnerability in LetterIt 2 affecting the file inc/wysiwyg.php, where remote attackers can cause local file inclusion via a ../ in the language parameter. The issue is evidenced in multiple sources (NVD/NVD CVE) with a CVSS v2 base score of 6.8 (Medium) and ...
CVE-2008-3446
creationtimestamp| type| source ---|---|--- 2008-07-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6179...
CVE-2007-3446
The vulnerability CVE-2007-3446 affects BugMall Shopping Cart 2.5 and earlier. The issue is the default credentials: username “demo” and password “demo,” which allow remote attackers to obtain login access. This constitutes an authentication issue that can enable unauthorized access to the applic...