CVE-2014-3708

OpenStack Compute Nova before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service CPU consumption via an IP filter in a list active servers API request...

CVE-2014-3708

CVE-2014-3708 affects OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1. The vulnerability arises from how an IP filter is processed in the list active servers API request, allowing remote authenticated users to cause a denial of service (CPU consumption). Public advisories (R...

CVE-2013-3708

The CVE-2013-3708 entry concerns the Novell iPrint Client. The vulnerability exists in the id1.GetPrinterURLList function, affecting iPrint Client versions 5.92 and earlier, where remote attackers can cause a denial of service. The underlying issue is an unspecified vector that enables DoS, with ...

KLA10279 DoS vulnerability in iPrint

An unspecified vulnerability was found in Novell iPrint. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via unknown vectors. Original advisories - Related products Novell-iPrint-Client CVE list CVE-2013-3708 warning...

RHEL 5 : JBoss Enterprise Application Platform 4.3.0.CP09 update (Important) (RHSA-2010:0938)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0938 advisory. JBoss Enterprise Application Platform is the market leading platform for innovative and scalable Java applications; integrating the JBoss...

RHEL 4 : JBoss EAP (RHSA-2010:0937)

Updated JBoss Enterprise Application Platform JBEAP 4.3 packages that fix three security issues and multiple bugs are now available for Red Hat Enterprise Linux 4 as JBEAP 4.3.0.CP09. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerabilit...

CVE-2012-3708

WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2012-09-12-1...

CVE-2012-3708

CVE-2012-3708 refers to a WebKit vulnerability in Apple iTunes prior to 10.7. The issue allows a remote attacker to trigger memory corruption via a crafted webpage, enabling arbitrary code execution or a denial of service (application crash). The initial description specifies the affected technol...

CVE-2011-3708

CVE-2011-3708 affects Automne 4.0.2. A remote attacker can obtain sensitive information via a direct request to a .php file, with the installation path revealed in an error message (shown by admin/page-redirect-info.php). The connected documents confirm the exposure but do not provide exploitatio...

CVE-2010-3708

The serialization implementation in JBoss Drools in Red Hat JBoss Enterprise Application Platform aka JBoss EAP or JBEAP 4.3 before 4.3.0.CP09 and JBoss Enterprise SOA Platform 4.2 and 4.3 supports the embedding of class files, which allows remote attackers to execute arbitrary code via a crafted...

CVE-2010-3708

CVE-2010-3708 affects Red Hat JBoss Enterprise Application Platform (JBEAP) 4.3.x (prior to 4.3.0.CP09) and JBoss SOA Platform 4.2/4.3, where the Drools serialization embeds class files, enabling remote code execution via a crafted static initializer. The vulnerability is rooted in the serializat...

Important: Red Hat Security Advisory: JBoss Enterprise Application Platform 4.3.0.CP09 update

Updated JBoss Enterprise Application Platform JBEAP 4.3 packages that fix three security issues and multiple bugs are now available for Red Hat Enterprise Linux 5 as JBEAP 4.3.0.CP09. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerabilit...

CVE-2009-3708

The CVE-2009-3708 entry concerns Konae Technologies’ Alleycode HTML Editor 2.21, where a stack-based buffer overflow in the Meta Content Optimizer could allow user-assisted remote code execution via an overly long description or keyword META tag. The related OpenVAS/NVD entries corroborate a high...

CVE-2009-3708

creationtimestamp| type| source ---|---|--- 2009-10-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9991 2009-10-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9866...

CVE-2008-3708

Multiple directory traversal vulnerabilities in dotCMS 1.6.0.9 allow remote attackers to read arbitrary files via a .. dot dot in the id parameter to 1 news/index.dot and 2 gettingstarted/macros/macrosdetail.dot...

CVE-2008-3708

DotCMS 1.6.0.9 is affected by multiple directory traversal vulnerabilities that allow remote attackers to read arbitrary files by injecting a .. in the id parameter of news/index.dot and getting_started/macros/macros_detail.dot. The root cause is insufficient input sanitization in these scripts, ...

CVE-2008-3708

creationtimestamp| type| source ---|---|--- 2008-08-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6247...

CVE-2007-3708

CodeIgniter 1.5.3 before 20070626 is affected by a cross-site scripting (XSS) vulnerability due to insufficient sanitization in the xss_clean function. The issue allows remote attackers to inject arbitrary script/HTML via (1) String.fromCharCode and (2) malformed nested tag manipulations in an un...

CVE-2006-3708

Technical details for CVE-2006-3708 are not provided in the supplied documents. Public information appears unavailable in these sources; monitor for updates.

CVE-2005-3708

CVE-2005-3708 describes an integer overflow in Apple QuickTime prior to 7.0.4, triggered by crafted TGA image files. The vulnerability allows remote code execution by exploiting the QuickTime image parsing path, as documented across multiple sources (NVD entry for CVE-2005-3708 and CERT advisorie...