95 matches found
CVE-2011-3483
Wireshark 1.6.x before 1.6.2 is affected by CVE-2011-3483 (buffer exception handling). A malformed capture file can cause an application crash via an invalid root tvbuff, enabling a remote Denial of Service. Remediation per connected sources is to upgrade to Wireshark 1.6.2 (or apply the patched ...
CVE-2011-3483
creationtimestamp| type| source ---|---|--- 2011-09-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36128...
Sql injection
Multiple SQL injection vulnerabilities in cmswrite.php in Primitive CMS 1.0.9 allow remote authenticated administrators to execute arbitrary SQL commands via the 1 title and 2 menutitle parameters. NOTE: this can be leveraged with CVE-2010-3483 to conduct attacks without authentication...
CVE-2010-3483
CVE-2010-3483 affects Primitive CMS 1.0.9: the file cms_write.php does not properly restrict access, enabling remote attackers to gain administrative privileges via a direct request. The description notes this vulnerability can be leveraged to perform cross-site scripting (XSS) using the title, c...
CVE-2010-3482
CVE-2010-3482 affects Primitive CMS 1.0.9, specifically the cms_write.php component, where multiple SQL injection vulnerabilities exist in the title and menutitle parameters. The root cause is improper input handling, enabling remote authenticated administrators to execute arbitrary SQL commands....
CuteFTP Heap Based Buffer Overflow Vulnerability
CuteFTP is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2009-3483
CVE-2009-3483 affects GlobalSCAPE CuteFTP products (Professional, Home, Lite) v8.3.3 and v8.3.3.0054. The vulnerability is a heap-based buffer overflow in the Create New Site feature triggered by a site list entry with a long label, allowing user‑assisted remote attackers to cause memory corrupti...
KLA10131 DoS vulnerability in CuteFTP
A buffer overflow was found in CuteFTP. By exploiting this vulnerability malicious users can cause denial of service or possibly execute arbitrary code. This vulnerability can be exploited remotely via a specially designed site list. Original advisories - Related products CuteFTP-Pro CuteFTP-Home...
CVE-2008-3483
CVE-2008-3483 : In ScrewTurn Wiki, vulnerable versions are 2.0.29 and 2.0.30. The issue is a cross-site scripting (XSS) vulnerability exposed via error messages on the "/admin.aspx - System Log" page, allowing remote attackers to inject arbitrary script/HTML. Root cause details are not fully disc...
CVE-2008-3483
creationtimestamp| type| source ---|---|--- 2008-05-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32126...
CVE-2007-3483
CVE-2007-3483 affects Research in Motion BlackBerry Enterprise Server 4.0–4.1. The vulnerability arises from a default configuration that allows installation of arbitrary third-party applications on BlackBerry devices, potentially enabling loading of malware. The available documents explicitly de...
CVE-2007-3483
Research in Motion BlackBerry Enterprise Server 4.0 through 4.1 has a default configuration that permits installation of arbitrary third-party applications on BlackBerry devices, which might facilitate loading of malware...
CVE-2006-3483
PHPMailList 1.8.0 is affected. The issue is insufficient access control that allows remote attackers to directly access sensitive files (list.dat, ml_config.dat) under the web root, exposing subscriber email addresses, configuration information, and admin credentials. This is tied to the CVE-2006...
CVE-2005-3483
GO-Global for Windows (3.1.0.3270 and earlier) is affected by a remote buffer overflow in the GO-Global remote display server/client. The issue occurs when a data block longer than the specified data block size is processed, potentially allowing arbitrary code execution or a crash on the remote h...
DUO-PSA-2020-004: Duo Product Security Advisory
Duo Product Security Advisory Advisory ID: DUO-PSA-2020-004 CVE: CVE-2020-3483 Publication Date: 2020-08-13 Revision Date: 2020-08-13 Status: Confirmed, Fixed Document Revision: 1 Overview Duo has identified and fixed an issue with the Duo Network Gateway DNG product in which some customer-provid...