CVE-2013-3531

The CVE-2013-3531 entry relates to a SQL injection in RadioCMS 2.2, affecting the file Meneger.php and exploitable via the playlist_id parameter. Affected: RadioCMS 2.2 (Meneger.php). Root cause: improper handling of user input leading to arbitrary SQL execution. Impact per NVD: partial confident...

CVE-2012-3531

Cross-site scripting XSS vulnerability in the Install Tool in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 and 4.7.x before 4.7.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-3531

CVE-2012-3531 is a cross-site scripting vulnerability in the TYPO3 Install Tool affecting TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12, and 4.7.x before 4.7.4. The issue allows remote attackers to inject arbitrary web script/HTML via unspecified vectors. The connected advisories confirm the sam...

CVE-2011-3531

CVE-2011-3531 affects Oracle Fusion Middleware’s Oracle Web Services Manager in versions 11.1.1.3, 11.1.1.4, and 11.1.1.5. The vulnerability is described as unspecified with impact to availability via unknown vectors related to Web Services Security. The connected documents confirm the affected p...

CVE-2010-3531

Unspecified vulnerability in the PeopleSoft Enterprise FMS ESA - RM component in Oracle PeopleSoft and JDEdwards Suite 8.9 Bundle 38, 9.0 Bundle 31, and 9.1 Bundle 6 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

CVE-2010-3531

CVE-2010-3531 affects PeopleSoft Enterprise FMS ESA - RM, listed under PeopleSoft in the Oracle/PeopleSoft patch set. The vulnerability is associated with the FMS ESA - RM component across Oracle PeopleSoft/JD Edwards Suite bundles 8.9 (8.9 Bundle #38), 9.0 (Bundle #31) and 9.1 (Bundle #6). The c...

CVE-2009-3531

CVE-2009-3531: A SQL injection in Universe CMS 1.0.6 affects vnews.php, exploitable via the id parameter to allow remote execution of arbitrary SQL. Base CVSS v2 score 7.5 (HIGH). No remediation details are provided in the connected documents.

FreeBSD 7.07.1 - vfs.usermount Local Privilege Escalation

FreeBSD 7.07.1 - vfs.usermount Local Privilege Escalation / cve-2008-3531.c -- Patroklos Argyroudis, argp at domain census-labs.com Privilege escalation exploit for the FreeBSD-SA-08:08.nmount CVE-2008-3531 vulnerability: http://security.freebsd.org/advisories/FreeBSD-SA-08:08.nmount.asc...

CVE-2008-3531

creationtimestamp| type| source ---|---|--- 2009-07-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9082...

FreeBSD 7.0/7.1 - 'vfs.usermount' Local Privilege Escalation

/ cve-2008-3531.c -- Patroklos Argyroudis, argp at domain census-labs.com Privilege escalation exploit for the FreeBSD-SA-08:08.nmount CVE-2008-3531 vulnerability: http://security.freebsd.org/advisories/FreeBSD-SA-08:08.nmount.asc http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-3531 For ...

Gentoo Security Advisory GLSA 200511-17 (FUSE)

The remote host is missing updates announced in advisory GLSA 200511-17. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200511-17 (FUSE)

The remote host is missing updates announced in advisory GLSA 200511-17. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD 'mount(2)'和'nmount(2)'多个栈缓冲区溢出漏洞

BUGTRAQ ID: 31002 CVE ID：CVE-2008-3531 CNCVE ID：CNCVE-20083531 FreeBSD是一款开放源代码的操作系统。 FreeBSD处理mount2和nmount2系统调用存在问题，本地攻击者可以利用漏洞以内核进程权限执行任意指令。 各种用户定义的输入如挂接点，设备，挂接选项会作为参数传递给nmount2到内核，在部分错误条件下，用户定义的数据会没有充分边界检查的情况下拷贝到存储在内核中的堆栈缓冲区中。如果系统配置成允许非特权用户挂接文件系统，可导致这些非特权用户通过设置vfs.usermount...

CVE-2008-3531

CVE-2008-3531 affects FreeBSD 7.0–7.1 when vfs.usermount is enabled. A stack-based buffer overflow in sys/kern/vfs_mount.c during mount/nmount error handling copies user-supplied data into a kernel stack buffer, enabling local privilege escalation to root. The advisory FreeBSD-SA-08:08.nmount des...

FreeBSD Security Advisory (FreeBSD-SA-08:08.nmount.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-08:08.nmount.asc ADV FreeBSD-SA-08:08.nmount.asc OpenVAS Vulnerability Test $ Description: Auto generated from ADV FreeBSD-SA-08:08.nmount.asc Authors: Thomas Reinke Copyright: Copyright c 2008...

FreeBSD-SA-08:08.nmount

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-08:08.nmount Security Advisory The FreeBSD Project Topic: nmount2 local arbitrary code execution Category: core Module: syskern Announced: 2008-09-03 Credits:...

openSUSE 10 Security Update : clamav (clamav-3531)

This update of ClamAV fixes several security bugs. - wrong calculation of buffer-end - use strict permissions for temporary files - heap corruption causing denial-of-service with corrupted rar archive - detect block list loop %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive te...

GLSA-200707-08 : NVClock: Insecure file usage

The remote host is affected by the vulnerability described in GLSA-200707-08 NVClock: Insecure file usage Tavis Ormandy of the Gentoo Linux Security Team discovered that NVClock makes usage of an insecure temporary file in the /tmp directory. Impact : A local attacker could create a specially...

[Full-disclosure] [ GLSA 200707-08 ] NVClock: Insecure file usage

Gentoo Linux Security Advisory GLSA 200707-08 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

CVE-2006-3531

Pivot 1.30 RC2 and earlier are affected by CVE-2006-3531 due to authentication credentials being constructed from request parameters in includes/editor/insert_image.php. This enables remote attackers to escalate privileges and upload arbitrary files by modifying (1) pass, (2) session, (3) pass an...