Lucene search
+L

107 matches found

CVE
CVE
added 2017/04/06 6:00 p.m.81 views

CVE-2017-3832

CVE-2017-3832 affects Cisco Wireless LAN Controller (WLC) firmware 8.3.102.0. The issue is in the web management interface where a missing internal handler for a specific request can be triggered by accessing a hidden URL on the GUI, allowing an unauthenticated remote attacker to cause a device r...

7.8CVSS7.5AI score0.03246EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2016/08/05 8:00 p.m.59 views

CVE-2016-3832

CVE-2016-3832 targets Android’s framework APIs. The vulnerability arises because Android 4.x–6.x runtime framework code does not consistently verify that package data originates from the Package Manager, potentially bypassing a protection mechanism via a crafted application. Affected versions inc...

8.3CVSS7.3AI score0.00625EPSS
SaveExploits0References3Affected Software1
UbuntuCve
UbuntuCve
added 2015/10/01 12:59 a.m.55 views

CVE-2015-3832

Multiple buffer overflows in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I allow remote attackers to execute arbitrary code via invalid size values of NAL units in MP4 data, aka internal bug 19641538...

10CVSS6.2AI score0.02883EPSS
SaveExploits0References3
CVE
CVE
added 2015/10/01 12:00 a.m.97 views

CVE-2015-3832

CVE-2015-3832: Affects Android devices with vulnerable libstagefright code (MPEG4Extractor.cpp) prior to 5.1.1 LMY48I. Multiple buffer overflows allow remote attackers to execute arbitrary code via invalid NAL unit size values in MP4 data; the vulnerability is tied to the MP4/Stagefright processi...

10CVSS8AI score0.02883EPSS
SaveExploits0References2Affected Software1
android
android
added 2015/08/01 12:00 a.m.52 views

CVE-2015-3832

Multiple buffer overflows in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I allow remote attackers to execute arbitrary code via invalid size values of NAL units in MP4 data, aka internal bug 19641538...

10CVSS8.9AI score0.02883EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2014/06/04 2:55 p.m.25 views

CVE-2014-3832

Cross-site scripting XSS vulnerability in the Documents component in ownCloud Server 6.0.x before 6.0.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to the printunescaped function...

4.3CVSS5.8AI score0.01005EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2014/06/04 2:55 p.m.37 views

CVE-2014-3832

Cross-site scripting XSS vulnerability in the Documents component in ownCloud Server 6.0.x before 6.0.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to the printunescaped function...

4.3CVSS5.9AI score0.01005EPSS
SaveExploits0References2
CVE
CVE
added 2014/06/04 2:00 p.m.63 views

CVE-2014-3832

CVE-2014-3832 is an XSS vulnerability in the Documents component of ownCloud Server 6.0.x before 6.0.3. The issue allows an attacker to inject arbitrary web script or HTML via unspecified vectors, with the root cause possibly related to the print_unescaped function. Public references indicate aff...

4.3CVSS5.9AI score0.01005EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2013/10/16 3:55 p.m.3 views

CVE-2013-3832

Unspecified vulnerability in the Siebel Server Remote component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect integrity via unknown vectors related to File System Management...

4CVSS5.6AI score0.00871EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2013/10/16 3:00 p.m.35 views

CVE-2013-3832

Unspecified vulnerability in the Siebel Server Remote component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect integrity via unknown vectors related to File System Management...

5.5AI score0.00871EPSS
SaveExploits0References1
CVE
CVE
added 2013/10/16 3:00 p.m.53 views

CVE-2013-3832

CVE-2013-3832 affects Oracle Siebel CRM 8.1.1 and 8.2.2, specifically the Siebel Server Remote component. The vulnerability, described as an unspecified issue related to File System Management, allows remote authenticated users to affect integrity via unknown vectors. The available connected docu...

4CVSS5.6AI score0.00871EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2012/07/03 10:55 p.m.15 views

CVE-2012-3832

Cross-site scripting XSS vulnerability in decoda/Decoda.php in Decoda before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors related to 1 b or 2 div tags...

4.3CVSS5.6AI score0.01483EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2012/07/03 10:00 p.m.40 views

CVE-2012-3832

Cross-site scripting XSS vulnerability in decoda/Decoda.php in Decoda before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors related to 1 b or 2 div tags...

5.6AI score0.01483EPSS
SaveExploits1References1
CVE
CVE
added 2012/07/03 10:00 p.m.43 views

CVE-2012-3832

CVE-2012-3832 describes an XSS vulnerability in the Decoda project, specifically in the file Decoda.php of the Decoda package prior to version 3.2 . The issue allows remote attackers to inject arbitrary web script or HTML through vectors related to the use of certain HTML tags (notably and ). T...

4.3CVSS5.7AI score0.01483EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2012/01/29 2:00 a.m.56 views

CVE-2011-3832

SiT! (Support Incident Tracker) 3.65 is affected by an eval/code-injection vulnerability in config.php. The issue allows remote authenticated administrators to execute arbitrary PHP code via the application_name parameter during a save action, due to the use of an eval-like construct in evaluatin...

6.5CVSS7.6AI score0.01389EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2010/11/26 7:00 p.m.37 views

CVE-2010-3832

Heap-based buffer overflow in the GSM mobility management implementation in Telephony in Apple iOS before 4.2 on the iPhone and iPad allows remote attackers to execute arbitrary code on the baseband processor via a crafted Temporary Mobile Subscriber Identity TMSI field...

7.5AI score0.03712EPSS
SaveExploits0References6
CVE
CVE
added 2010/11/26 7:00 p.m.66 views

CVE-2010-3832

CVE-2010-3832 affects Apple iOS

6.8CVSS7.7AI score0.03712EPSS
SaveExploits0References6Affected Software1
CVE
CVE
added 2009/10/30 8:05 p.m.71 views

CVE-2009-3832

Opera for Windows prior to 10.01 is affected by CVE-2009-3832 due to the browser rendering UI using web fonts, allowing a crafted site to spoof the address bar. Root cause: Web fonts used in the UI are not prevented in rendering. Impact is spoofing the address field; exploitation status is not do...

5.8CVSS6.4AI score0.02042EPSS
SaveExploits0References8Affected Software1
seebug.org
seebug.org
added 2008/10/04 12:00 a.m.31 views

Fedora 8/9 Linux Kernel 'utrace_control' NULL Pointer Dereference Denial of Service Vulnerability

CVE: CVE-2008-3832 Fedora 8 and 9 Linux kernel is prone to a local denial-of-service vulnerability. Attackers can exploit this issue to crash the affected kernel, denying service to legitimate users. Given the nature of this issue, attackers may also be able to execute arbitrary code, but this ha...

4.9CVSS1.2AI score0.00782EPSS
SaveExploits3
CVE
CVE
added 2008/10/03 5:18 p.m.69 views

CVE-2008-3832

CVE-2008-3832 affects Fedora 8/9 Linux kernels patched for the utrace subsystem: a NULL pointer dereference in the utrace_control path can be triggered locally, causing a denial of service (kernel crash/hang). The vulnerable configurations are Fedora 8 before 2.6.26.5-28 and Fedora 9 before 2.6.2...

4.9CVSS6.2AI score0.00782EPSS
SaveExploits3References5Affected Software1
Rows per page
Query Builder