82 matches found
CVE-2016-3931
CVE-2016-3931 affects the Qualcomm QSEE Communicator driver (drivers/misc/qseecom.c) in Android. It enables local privilege escalation via a crafted application on Nexus 5X, Nexus 6, Nexus 6P and Android One devices running pre-2016-10-05 builds. The vulnerability stems from the QSEE Communicator...
CVE-2015-3931 Microsec e-Szigno, CVE-2015-3932 Netlock Mokka XSW vulnerability
In November 2014, SEARCH-LAB Ltd. discovered a security vulnerability in Microsec e-Szigno, and Netlock Mokka computer applications that are used to generate and validate digital signatures, which are applied within the official Hungarian government processes. The vulnerability affected the...
CVE-2010-3931
The CVE-2010-3931 entry corresponds to a cross-site scripting (XSS) vulnerability in multiple Rocomotion products (e.g., P board, P forum, P up board, P diary R, P link, pplog/pplog2, PM bbs/PM forum) across listed versions (e.g., P board 1.18 and earlier, P forum 1.30 and earlier, P up board 1.3...
CVE-2009-3931
The CVE refers to an incomplete blacklist in Google Chrome’s browser/download/download_exe.cc that, in Chrome before 3.0.195.32, could cause a remote attacker to force downloads of certain dangerous files via Content-Disposition: attachment (examples include .mht/.mhtml with IE6, .svg with Safari...
CVE-2009-3931
Removed by vendor...
Fedora Core 10 FEDORA-2009-3931 (prelude-manager)
The remote host is missing an update to prelude-manager announced via advisory FEDORA-2009-3931. OpenVAS Vulnerability Test $Id: fcore20093931.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-3931 prelude-manager Authors: Thomas Reinke Copyright:...
Mandriva Linux Security Advisory : R-base (MDVSA-2008:198)
A symlink vulnerability was found in the javareconf script in R that allows local users to overwrite arbitrary files CVE-2008-3931. The updated packages have been patched to prevent this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...
Gentoo Security Advisory GLSA 200809-13 (R)
The remote host is missing updates announced in advisory GLSA 200809-13. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200809-13 (R)
The remote host is missing updates announced in advisory GLSA 200809-13. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GLSA-200809-13 : R: Insecure temporary file creation
The remote host is affected by the vulnerability described in GLSA-200809-13 R: Insecure temporary file creation Dmitry E. Oboukhov reported that the 'javareconf' script uses temporary files in an insecure manner. Impact : A local attacker could exploit this vulnerability to overwrite arbitrary...
CVE-2008-3931
javareconf in R 2.7.2 allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2008-3931
javareconf in R 2.7.2 allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2008-3931
javareconf in R 2.7.2 allows local users to overwrite arbitrary files via a symlink attack on temporary files...
UBUNTU-CVE-2008-3931
javareconf in R 2.7.2 allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2008-3931
Summary of CVE-2008-3931 (R-base): A symlink-based vulnerability in the javareconf script of R allowed local attackers to overwrite arbitrary files via insecure temporary file handling. The issue is rooted in the way temporary files are created by javareconf, enabling a local write when the scrip...
CVE-2008-3931
javareconf in R 2.7.2 allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2007-3931
CVE-2007-3931 affects the Samsung SCX-4200 Driver 2.00.95 installation script. The wrap_setuid_third_party_application function grants setuid permissions to third-party applications (e.g., xsane, xscanimage), enabling local users to escalate privileges. Documented impact is privilege escalation f...
Mozilla Thunderbird < 1.5.0.10 Multiple Vulnerabilities (deprecated)
Binary data 3931.prm...
CVE-2006-3931
CVE-2006-3931 affects Midirecord 2.0 (Midirecord daemon). A buffer overflow in the daemon function in midirecord.cc permits local users to execute arbitrary code via a long command line argument (filename). The note indicates the vulnerability may not exist if Midirecord is not installed setuid. ...
CVE-2005-3931
CVE-2005-3931 : A SQL injection flaw exists in default.asp of ASP-Rider 1.6 , allowing remote attackers to inject arbitrary SQL commands via the HTTP Referer. The vulnerability targets the input handling in that page/file, enabling unauthorized data access or manipulation as described in the publ...