107 matches found
CVE-2017-3832
CVE-2017-3832 affects Cisco Wireless LAN Controller (WLC) firmware 8.3.102.0. The issue is in the web management interface where a missing internal handler for a specific request can be triggered by accessing a hidden URL on the GUI, allowing an unauthenticated remote attacker to cause a device r...
CVE-2016-3832
CVE-2016-3832 targets Android’s framework APIs. The vulnerability arises because Android 4.x–6.x runtime framework code does not consistently verify that package data originates from the Package Manager, potentially bypassing a protection mechanism via a crafted application. Affected versions inc...
CVE-2015-3832
Multiple buffer overflows in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I allow remote attackers to execute arbitrary code via invalid size values of NAL units in MP4 data, aka internal bug 19641538...
CVE-2015-3832
CVE-2015-3832: Affects Android devices with vulnerable libstagefright code (MPEG4Extractor.cpp) prior to 5.1.1 LMY48I. Multiple buffer overflows allow remote attackers to execute arbitrary code via invalid NAL unit size values in MP4 data; the vulnerability is tied to the MP4/Stagefright processi...
CVE-2015-3832
Multiple buffer overflows in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I allow remote attackers to execute arbitrary code via invalid size values of NAL units in MP4 data, aka internal bug 19641538...
CVE-2014-3832
Cross-site scripting XSS vulnerability in the Documents component in ownCloud Server 6.0.x before 6.0.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to the printunescaped function...
CVE-2014-3832
Cross-site scripting XSS vulnerability in the Documents component in ownCloud Server 6.0.x before 6.0.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to the printunescaped function...
CVE-2014-3832
CVE-2014-3832 is an XSS vulnerability in the Documents component of ownCloud Server 6.0.x before 6.0.3. The issue allows an attacker to inject arbitrary web script or HTML via unspecified vectors, with the root cause possibly related to the print_unescaped function. Public references indicate aff...
CVE-2013-3832
Unspecified vulnerability in the Siebel Server Remote component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect integrity via unknown vectors related to File System Management...
CVE-2013-3832
Unspecified vulnerability in the Siebel Server Remote component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect integrity via unknown vectors related to File System Management...
CVE-2013-3832
CVE-2013-3832 affects Oracle Siebel CRM 8.1.1 and 8.2.2, specifically the Siebel Server Remote component. The vulnerability, described as an unspecified issue related to File System Management, allows remote authenticated users to affect integrity via unknown vectors. The available connected docu...
CVE-2012-3832
Cross-site scripting XSS vulnerability in decoda/Decoda.php in Decoda before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors related to 1 b or 2 div tags...
CVE-2012-3832
Cross-site scripting XSS vulnerability in decoda/Decoda.php in Decoda before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors related to 1 b or 2 div tags...
CVE-2012-3832
CVE-2012-3832 describes an XSS vulnerability in the Decoda project, specifically in the file Decoda.php of the Decoda package prior to version 3.2 . The issue allows remote attackers to inject arbitrary web script or HTML through vectors related to the use of certain HTML tags (notably and ). T...
CVE-2011-3832
SiT! (Support Incident Tracker) 3.65 is affected by an eval/code-injection vulnerability in config.php. The issue allows remote authenticated administrators to execute arbitrary PHP code via the application_name parameter during a save action, due to the use of an eval-like construct in evaluatin...
CVE-2010-3832
Heap-based buffer overflow in the GSM mobility management implementation in Telephony in Apple iOS before 4.2 on the iPhone and iPad allows remote attackers to execute arbitrary code on the baseband processor via a crafted Temporary Mobile Subscriber Identity TMSI field...
CVE-2010-3832
CVE-2010-3832 affects Apple iOS
CVE-2009-3832
Opera for Windows prior to 10.01 is affected by CVE-2009-3832 due to the browser rendering UI using web fonts, allowing a crafted site to spoof the address bar. Root cause: Web fonts used in the UI are not prevented in rendering. Impact is spoofing the address field; exploitation status is not do...
Fedora 8/9 Linux Kernel 'utrace_control' NULL Pointer Dereference Denial of Service Vulnerability
CVE: CVE-2008-3832 Fedora 8 and 9 Linux kernel is prone to a local denial-of-service vulnerability. Attackers can exploit this issue to crash the affected kernel, denying service to legitimate users. Given the nature of this issue, attackers may also be able to execute arbitrary code, but this ha...
CVE-2008-3832
CVE-2008-3832 affects Fedora 8/9 Linux kernels patched for the utrace subsystem: a NULL pointer dereference in the utrace_control path can be triggered locally, causing a denial of service (kernel crash/hang). The vulnerable configurations are Fedora 8 before 2.6.26.5-28 and Fedora 9 before 2.6.2...