CVE-2009-3496

CVE-2009-3496 describes a cross-site scripting (XSS) vulnerability in the Vastal I-Tech DVD Zone’s view_mag.php, exploitable via the mag_id parameter to inject arbitrary script/HTML. Affected component is the server-side script handling mag_id in that application. The connected documents corrobor...

CVE-2009-3496

creationtimestamp| type| source ---|---|--- 2009-09-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33241...

openSUSE Security Update : uvcvideo-kmp-bigsmp (uvcvideo-kmp-bigsmp-148)

The kernel driver uvcvideo was vulnerable to a buffer overflow in format descriptor parsing. CVE-2008-3496 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update uvcvideo-kmp-bigsmp-148. The text...

Mandriva Linux Security Advisory : kernel (MDVSA-2008:223)

Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : Buffer overflow in format descriptor parsing in the uvcparseformat function in drivers/media/video/uvc/uvcdriver.c in uvcvideo in the video4linux V4L implementation in the Linux kernel before 2.6.26.1 has unknown impact...

CVE-2008-3496

Buffer overflow in format descriptor parsing in the uvcparseformat function in drivers/media/video/uvc/uvcdriver.c in uvcvideo in the video4linux V4L implementation in the Linux kernel before 2.6.26.1 has unknown impact and attack vectors...

CVE-2008-3496

CVE-2008-3496 affects the Linux kernel uvcvideo (V4L) in drivers/media/video/uvc/uvc_driver.c, where a buffer overflow in format descriptor parsing occurs in uvc_parse_format. Affected are kernels older than 2.6.26.1; the ChangeLog indicates this version contains the fix. Public disclosures in SU...

CVE-2007-3496

Cross-site scripting XSS vulnerability in SAP Web Dynpro Java BC-WD-JAV in SAP NetWeaver Nw04 SP15 through SP19 and Nw04s SP7 through SP11, aka SAP Java Technology Services 640 before SP20 and SAP Web Dynpro Runtime Core Components 700 before SP12, allows remote attackers to inject arbitrary web...

CVE-2007-3496

Cross-site scripting XSS vulnerability in SAP Web Dynpro Java BC-WD-JAV in SAP NetWeaver Nw04 SP15 through SP19 and Nw04s SP7 through SP11, aka SAP Java Technology Services 640 before SP20 and SAP Web Dynpro Runtime Core Components 700 before SP12, allows remote attackers to inject arbitrary web...

CVE-2006-3496

AFP Server in Apple Mac OS X 10.3.9 and 10.4.7 allows remote attackers to cause denial of service crash via an invalid AFP request that triggers an unchecked error condition...

CVE-2006-3496

CVE-2006-3496 affects Apple Mac OS X AFP Server on 10.3.9 and 10.4.7. A remote attacker can crash the AFP server by sending a specially crafted invalid AFP request, due to an unchecked error condition (leading to denial of service). The vulnerability is addressed in Security Update 2006-004; reme...

CVE-2005-3496

CVE-2005-3496: XSS in PHP Handicapper via msg parameter to msg.php; second vector via login parameter to process_signup.php is reported as CRLF injection (CVE-2005-4712) per sources. CVE-2005-3497: SQL injection via serviceid parameter in process_signup.php. Exploitation details are not provided ...

CVE-2023-3496

...

CVE-2023-3496

CVE-2023-3496 is rejected/not used and does not represent an active vulnerability entry.