82 matches found
CVE-2013-3931
The CVE-2013-3931 issue affects the Joomla! Joomla extension Jomres (com_jomres) before version 7.3.1. The vulnerability is a cross-site scripting (XSS) flaw in the property_name parameter used during editing property details, exploitable by remote authenticated users who have the Business Manage...
CVE-2019-3931
CVE-2019-3931 affects Crestron AM-100 (firmware 1.6.0.2) and AM-101 (firmware 2.7.0.2). The issue allows argument injection to curl via crafted HTTP requests to return.cgi, enabling a remote authenticated attacker to upload files and execute code as root. Connected sources (NVD/Red Hat PRION/CVE ...
CVE-2019-3931
Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to argumention injection to the curl binary via crafted HTTP requests to return.cgi. A remote, authenticated attacker can use this vulnerability to upload files to the device and ultimately execute code as root...
Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-3931-1)
The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3931-1 advisory. M. Vefa Bicakci and Andy Lutomirski discovered that the kernel did not properly set up all arguments to an error handler callback used when running as a...
Ubuntu: Security Advisory (USN-3931-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-3931-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 14.04 LTS / 16.04 LTS : Linux kernel (HWE) vulnerabilities (USN-3931-2)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3931-2 advisory. USN-3931-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.04 LTS. This update provides the corresponding updates for the Linux...
CVE-2018-3931
In Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 6,1,2018,0312, a crafted Microsoft Word DOC document can lead to an out-of-bounds write, resulting in remote code execution. This vulnerability occurs in the putShapeProperty method...
CVE-2018-3931
CVE-2018-3931 concerns the Antenna House Office Server Document Converter for Linux64 (V6.1 Pro MR2, 6,1,2018,0312). The vulnerability exists in the putShapeProperty method and enables an out-of-bounds write via a crafted Microsoft Word (DOC) document, leading to remote code execution. Public-cov...
CVE-2018-3931
In Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 6,1,2018,0312, a crafted Microsoft Word DOC document can lead to an out-of-bounds write, resulting in remote code execution. This vulnerability occurs in the putShapeProperty method...
CVE-2017-3931
This CVE entry is rejected and not used per the Initial Description.
Debian DSA-3931-1 : ruby-rack-cors - security update
Jens Mueller discovered that an incorrect regular expression in rack-cors may lead to insufficient restriction of CORS requests. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-3931. The...
Debian: Security Advisory (DSA-3931-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-3931
CVE-2015-3931 affects Microsec e-Szigno (older than 3.2.7.12). The issue is XML Signature Wrapping: an inserted ds:Object payload can cause a valid signature to be displayed for a different document, enabling tampering with digitally signed files. Affected versions are older than 3.2.7.12; fixed ...
CVE-2014-3931
fastping.c in MRLG aka Multi-Router Looking Glass before 5.5.0 allows remote attackers to cause an arbitrary memory write and memory corruption...
CVE-2014-3931
fastping.c in MRLG aka Multi-Router Looking Glass before 5.5.0 allows remote attackers to cause an arbitrary memory write and memory corruption...
CVE-2014-3931
CVE-2014-3931 affects Multi-Router Looking Glass (MRLG); MRLG versions prior to 5.5.0 contain a buffer/memory handling vulnerability in fastping.c that can be triggered remotely without authentication, leading to an arbitrary memory write and memory corruption (potential RCE). Public references (...
CVE-2014-3931
fastping.c in MRLG aka Multi-Router Looking Glass before 5.5.0 allows remote attackers to cause an arbitrary memory write and memory corruption. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...
CVE-2016-3931
drivers/misc/qseecom.c in the Qualcomm QSEE Communicator driver in Android before 2016-10-05 on Nexus 5X, Nexus 6, Nexus 6P, and Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 29157595 and Qualcomm internal bug CR 1036418...