83 matches found
CVE-2014-3911
CVE-2014-3911 affects Samsung iPOLiS Device Manager prior to 1.8.7. The issue is a remote code execution vulnerability in the XNSSDKDEVICE.XnsSdkDeviceCtrlForIpInstaller.1 ActiveX control; providing malicious values to methods such as Start, ChangeControlLocalName, DeleteDeviceProfile, FrameAdvan...
CVE-2014-3911
Samsung iPOLiS Device Manager before 1.8.7 allow remote attackers to execute arbitrary code via unspecified values to the 1 Start, 2 ChangeControlLocalName, 3 DeleteDeviceProfile, 4 FrameAdvanceReader, or other unknown method in the XNSSDKDEVICE.XnsSdkDeviceCtrlForIpInstaller.1 ActiveX control...
CVE-2013-3911
Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."...
MS13-088: Cumulative Security Update for Internet Explorer (2888505)
The remote host is missing Internet Explorer IE Security Update 2888505. The installed version of IE is affected by multiple vulnerabilities that could allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid7084...
CVE-2013-3911
CVE-2013-3911 affects Microsoft Internet Explorer 9 and 10 (IE9/IE10). The connected ZDI advisory confirms a use-after-free in CEditAdorner handling that can be exploited to execute arbitrary code on vulnerable IE installations. The exploitation requires the target to visit a malicious page or ot...
Microsoft Internet Explorer Memory Corruption (MS13-088: CVE-2013-3911)
A Remote code execution vulnerability has been reported in Microsoft Internet Explorer...
Google Chrome Multiple Vulnerabilities - December11 (Linux)
The host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodgooglechromemultvulndec11lin.nasl 7029 2017-08-31 11:51:40Z teissa $ Google Chrome Multiple Vulnerabilities - December11 Linux Authors: Rachana Shetty Copyright: Copyright c 20...
Google Chrome Multiple Vulnerabilities - December11 (Windows)
The host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodgooglechromemultvulndec11win.nasl 7052 2017-09-04 11:50:51Z teissa $ Google Chrome Multiple Vulnerabilities - December11 Windows Authors: Rachana Shetty Copyright: Copyright c...
Google Chrome < 16.0.912.63 Multiple Vulnerabilities
Binary data 6108.pasl...
CVE-2011-3911
Technical details for CVE-2011-3911 are not provided in the connected documents. The initial description notes a PDF handling issue in Chrome prior to 16.0.912.63 and an out-of-bounds read; monitor for updates.
CVE-2010-3911
CVE-2010-3911 affects vtiger CRM 5.2.0 and earlier, with multiple XSS flaws: pre-auth reflected on login (username/password) and on Settings GetFieldInfo.php (label), plus additional XSS variants in phprint.php and graph.php. Root cause is improper input handling and unfiltered user inputs reflec...
CVE-2009-3911
TFTgallery 0.13 is vulnerable to a cross-site scripting (XSS) flaw in settings.php via the sample parameter, allowing remote injection of script/HTML. OpenVAS notes TFTgallery
CVE-2009-3911
creationtimestamp| type| source ---|---|--- 2009-11-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33320...
Linux Kernel proc_do_xprt()函数本地栈溢出漏洞
BUGTRAQ ID: 31937 CVECAN ID: CVE-2008-3911 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的net/sunrpc/sysctl.c文件中的procdoxprt函数没有检查某些从用户域所获得缓冲区的长度，本地攻击者可以通过对/proc/sys/sunrpc/transports文件特制的读系统调用触发栈溢出，导致执行任意指令。 Linux kernel 2.6.26.3 Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
BELL-CVE-2008-3911 CVE-2008-3911 does not affect BellSoft software
Bulletin has no description...
CVE-2008-3911
The CVE-2008-3911 issue affects the Linux kernel 2.6.26.3, specifically the proc_do_xprt function in net/sunrpc/sysctl.c, which does not validate the length of a user-supplied buffer when reading /proc/sys/sunrpc/transports. This can allow local users to overflow a stack-based buffer and cause un...
CVE-2007-3911
Multiple heap-based buffer overflows in 1 clsscheduler.exe aka scheduler client and 2 srvscheduler.exe aka scheduler server in BakBone NetVault Reporter 3.5 before Update4 allow remote attackers to execute arbitrary code via long filename arguments in HTTP requests...
CVE-2007-3911
BakBone NetVault Reporter 3.5 before Update4 is affected by a heap-based overflow in both the scheduler client (clsscheduler.exe) and scheduler server (srvscheduler.exe). The vulnerability allows remote attackers to execute arbitrary code by sending overly long filename arguments in HTTP requests...
ZDI-07-044: BakBone NetVault Reporter Scheduler Heap Overflow Vulnerability
ZDI-07-044: BakBone NetVault Reporter Scheduler Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-044.html July 25, 2007 -- CVE ID: CVE-2007-3911 -- Affected Vendor: BakBone -- Affected Products: BakBone NetVault Reporter 3.5 Update4 -- TippingPointTM IPS Customer...