CVE-2015-3823

CVE-2015-3823 concerns libstagefright in Android versions before 5.1.1 LMY48T. A crafted media file can cause memory corruption in mediaserver, enabling remote code execution or a denial of service. The NVD description notes remote code execution and memory corruption via specially crafted files ...

CVE-2015-3823

libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 21335999...

Nexus Security Bulletin - October 2015Stay organized with collectionsSave and categorize content based on your preferences.

We have released a security update to Nexus devices through an over-the-air OTA update as part of our Android Security Bulletin Monthly Release process. The Nexus firmware images have also been released to the Google Developer site. Builds LMY48T or later such as LMY48W and Android M with Securit...

CVE-2015-3823

libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 21335999...

Android aeration infinite reboot Vulnerability, CVE-2 0 1 5-3 8 2 3, The impact of almost 9 0% of Android users-vulnerability warning-the black bar safety net

Android users are undoubtedly going through a tough week. This product of the latest vulnerabilities number of CVE-2 0 1 5-3 8 2 3, hackers can take advantage of the loudo make Android phone unlimited reboot, it sounds a bit like Stagefright vulnerability, and it stems from the media server,...

CVE-2014-3823

CVE-2014-3823 affects Juniper Junos Pulse Secure Access Service (SSL VPN) IVE OS: 8.0 before 8.0r1, 7.4 before 7.4r5, and 7.1 before 7.1r18. The vulnerability is a clickjacking issue exposed via unspecified vectors, allowing remote attackers to leverage UI framing protections. The issue was addre...

Junos Pulse Secure Access IVE OS Clickjacking (JSA10647)

According to its self-reported version, the version of IVE running on the remote host is affected by a clickjacking vulnerability. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid77691; scriptversion"1.5"; scriptsetattributeattribute:"pluginmodificationdate",...

CVE-2013-3823

The CVE-2013-3823 entry concerns an unspecified vulnerability in the Oracle Agile PLM Framework within Oracle Supply Chain Products Suite 9.3.1 that allows remote authenticated users to affect confidentiality via unknown vectors. The connected documents do not provide concrete technical details (...

CVE-2011-3823

CVE-2011-3823 affects Yamamah 1.0. A vulnerable behavior allows remote attackers to obtain sensitive information by requesting a .php file directly, causing an error message that reveals the installation path (e.g., themes/default/index.php and similar files). The underlying root cause is an info...

CVE-2010-3823

CVE-2010-3823 is a use-after-free in WebKit affecting Apple Safari prior to 5.0.3 on Mac OS X 10.5–10.6 and Windows, and prior to 4.1.3 on Mac OS X 10.4, exploitable via Geolocation object vectors. The vulnerability can allow remote code execution or cause an application crash (DoS). The issue is...

Fedora 11 : horde-3.3.6-1.fc11 (2010-5483)

Upgrade to 3.3.6 - Fixes a lot of security bugs Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 12 : horde-3.3.6-1.fc12 (2010-5520)

Upgrade to 3.3.6 - Fixes a lot of security bugs Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 13 : horde-3.3.6-1.fc13 (2010-5563)

Upgrade to 3.3.6 - Fixes a lot of security bugs Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora Update for horde FEDORA-2010-5483

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2009-3823

CVE-2009-3823 describes a directory traversal vulnerability in Mobilelib GOLD 3.0, affecting the file myhtml.php. When magic_quotes_gpc is enabled, an attacker can read arbitrary files by supplying a dot-dot (“..”) sequence in the GLOBALS[page] parameter. The root cause is improper validation/san...

CVE-2009-3823

Directory traversal vulnerability in myhtml.php in Mobilelib GOLD 3.0, when magicquotesgpc is enabled, allows remote attackers to read arbitrary files via a .. dot dot in the GLOBALSpage parameter...

CVE-2009-3823

creationtimestamp| type| source ---|---|--- 2009-07-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9144...

CVE-2008-3823

Cross-site scripting XSS vulnerability in MIME/MIME/Contents.php in the MIME library in Horde 3.2.x before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via the filename of a MIME attachment in an e-mail message...

CVE-2008-3823

Cross-site scripting XSS vulnerability in MIME/MIME/Contents.php in the MIME library in Horde 3.2.x before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via the filename of a MIME attachment in an e-mail message...

CVE-2008-3823

Technical details of CVE-2008-3823 are not publicly available in the provided connected documents. The Initial Description indicates an XSS in Horde's MIME library (MIME/Contents.php) for attachments in emails, but no further specifics or fixes are included here. Monitor for updates.