Apple Safari Webkit Multiple Vulnerabilities (Mar 2012) - Windows

Apple Safari web browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari";...

Google Chrome < 15.0.874.102 Multiple Vulnerabilities

Binary data 6050.pasl...

CVE-2011-3888

Use-after-free vulnerability in Google Chrome before 15.0.874.102 allows user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to editing operations in conjunction with an unknown plug-in...

CVE-2011-3888

CVE-2011-3888 corresponds to a use-after-free vulnerability in Google Chrome prior to 15.0.874.102. The flaw affects editing operations in conjunction with an unknown plug-in and can allow a user‑assisted remote attacker to cause a denial of service and potentially other impacts. The provided con...

Chrome Stable Release

The Google Chrome team is happy to announce the arrival of Chrome 15.0.874.102 to the Stable Channel for Windows, Mac, Linux, and Chrome Frame. Chrome 15 contains some really great improvements including a new New Tab page. You can read about it more on the Google Chome blog. Security fixes and...

CVE-2010-3888

creationtimestamp| type| source ---|---|--- 2010-11-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15589 2012-07-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/19930 2026-06-19 16:45:39+00:00| exploited|...

CVE-2010-3888

Unspecified vulnerability in Microsoft Windows on 32-bit platforms allows local users to gain privileges via unknown vectors, as exploited in the wild in July 2010 by the Stuxnet worm, and identified by Kaspersky Lab researchers and other researchers...

CVE-2010-3888

CVE-2010-3888 concerns an unspecified local privilege escalation in 32-bit Windows, exploited in the wild by Stuxnet in July 2010. The initial description notes a privilege gain via unknown vectors and does not specify affected versions beyond 32-bit Windows; no concrete root cause, vulnerable co...

CVE-2009-3888

The dommappgoff function in mm/nommu.c in the Linux kernel before 2.6.31.6, when the CPU lacks a memory management unit, allows local users to cause a denial of service OOPS via an application that attempts to allocate a large amount of memory...

CVE-2009-3888

CVE-2009-3888 affects the Linux kernel up to version 2.6.31.5; the vulnerability is in do_mmap_pgoff in mm/nommu.c when an MMU is absent. Local users can trigger a denial of service (OOPS) by allocating a large amount of memory. A patch released in 2.6.31.6 fixes the issue; updating to 2.6.31.6 o...

CVE-2009-3888

creationtimestamp| type| source ---|---|--- 2009-11-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10017...

CVE-2008-3888

SQL injection vulnerability in members.asp in Mini-NUKE Freehost 2.3 allows remote attackers to execute arbitrary SQL commands via the uid parameter in a memberdetails action...

CVE-2008-3888

The CVE concerns Mini-NUKE Freehost 2.3, where a SQL injection vulnerability exists in members.asp. The flaw allows remote attackers to send a crafted uid in the member_details action to execute arbitrary SQL commands. Exploitation details or live exploit info are not provided in the documents. N...

CVE-2007-3888

CVE-2007-3888 affects Insanely Simple Blog 0.5 and earlier, with multiple XSS vulnerabilities. The issue is exploitable via (1) the search action, potentially related to the term parameter to index.php, and (2) an anonymous blog entry, possibly involving posted_by, subject, and content parameters...

CVE-2007-3888

Multiple cross-site scripting XSS vulnerabilities in Insanely Simple Blog 0.5 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the search action, possibly related to the term parameter to index.php; or 2 an anonymous blog entry, possibly involving the a postedby, b...

CVE-2006-4840

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2006-3888. Reason: This candidate is a reservation duplicate of CVE-2006-3888. Notes: All CVE users should reference CVE-2006-3888 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2006-4840

CVE-2006-4840 is a placeholder/duplicate entry reserved for CVE-2006-3888 and is not the active vulnerability entry. The connected documents show the underlying issue: a buffer overflow in AOL’s YGP Pic Downloader ActiveX control (AOL.PicDownloadCtrl.1, YGPPicDownload.dll) used in America Online ...

CVE-2006-3888

The CVE-2006-3888 issue affects AOL You’ve Got Pictures (YGP) Pic Downloader ActiveX control (AOL.PicDownloadCtrl.1, YGPPicDownload.dll) used in AOL 9.0 Security Edition. A buffer overflow allows remote attackers to execute arbitrary code via a long argument to SetAlbumName. The vulnerability is ...

CVE-2005-3888

CVE-2005-3888 affects Gadu-Gadu 7.20. A memory leak occurs in handling DCC packets: when a packet has a code other than 2 and a large size field, memory is allocated but not freed after the packet is dropped, enabling remote denial of service. Affected product: Gadu-Gadu 7.20. Root cause: memory ...