CVE-2016-3822

CVE-2016-3822 affects jhead/libjhead (exif.c) across Android 4.x before 4.4.4, 5.x before 5.0.2/5.0.x, 5.1.x before 5.1.1, and 6.x before 2016-08-01. The issue is an out-of-bounds access via crafted EXIF data, enabling remote code execution or a denial of service. Public advisories and vendor upd...

CVE-2016-3822

exif.c in Matthias Wandel jhead 2.87, as used in libjhead in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01, allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds access via crafted EXIF data, aka internal bug...

CVE-2014-3822

Summary: CVE-2014-3822 affects Juniper Junos SRX Series devices and relates to the IPv6-to-IPv4 translation path. The issue can be triggered by a malformed packet, causing a denial of service via the flowd process crash. Affected software/versions (as provided): Junos OS on SRX Series with 11.4 b...

CVE-2013-3822

CVE-2013-3822 affects the Oracle Agile PLM Framework within Oracle Supply Chain Products Suite 9.3.1. The published description indicates an unspecified remote vulnerability impacting integrity via Web Client (CS), with vectors not disclosed. The connected documents do not provide concrete exploi...

CVE-2011-3822

CVE-2011-3822 affects XOOPS 2.5.0. The vulnerability is an information disclosure where a direct request to a .php file (e.g., modules/system/xoops_version.php) can reveal the installation path in an error message. The issue is documented across multiple sources (NVD, Red Hat, OpenVAS, etc.) with...

CVE-2010-3822

WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, accesses an uninitialized pointer during processing of Cascading Style Sheets CSS counter styles, which allows remote attackers to execute arbitrary code or cause a denial of service...

CVE-2010-3822

CVE-2010-3822 affects WebKit used by Apple Safari: uninitialized pointer accessed during CSS counter styles processing, allowing remote code execution or a crash. Impact is high (remote code execution/DoS) across Safari versions before 5.0.3 on macOS 10.5–10.6 and Windows, and before 4.1.3 on mac...

CVE-2009-3822

creationtimestamp| type| source ---|---|--- 2009-10-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9888...

CVE-2007-3822

CVE-2007-3822 affects Webcit before 7.11 with multiple cross-site scripting (XSS) vulnerabilities. An attacker can inject arbitrary script/HTML via (1) the who parameter to showuser and other vectors such as calendar mode, bulletin board mode, room names, and uploaded file names. The provided doc...

CVE-2006-3822

GeodesicSolutions GeoAuctions Enterprise 1.0.6 is affected by an SQL injection in index.php via the d parameter, enabling remote execution of arbitrary SQL commands. No exploitation details or fixes are provided in the connected documents beyond this description. Mitigation with a patch/update fr...

CVE-2005-3822

CVE-2005-3822 affects vTiger CRM 4.2 and earlier, with multiple SQL injection flaws allowing remote attackers to run arbitrary SQL via the login form username or the EditView–Contacts record parameter. The NVD entry lists a CVSS v2 base score of 7.5 (HIGH) with network access, minimal authenticat...