CVE-2014-3937

SQL injection vulnerability in the Contextual Related Posts plugin before 1.8.10.2 for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-3937

The CVE-2014-3937 issue affects the WordPress Contextual Related Posts plugin and is a SQL injection in the plugin’s code prior to version 1.8.10.2. Affected component: Contextual Related Posts plugin for WordPress. Root cause: improper handling of input that leads to arbitrary SQL execution. Imp...

XnView 2.x < 2.13 Multiple Buffer Overflows

The version of XnView 2.x installed on the remote Windows host is earlier than 2.13. It is, therefore, reportedly affected by the following buffer overflow vulnerabilities: - A remote, heap-based buffer overflow vulnerability exists due to an error in the 'xnview.exe' file when processing BMP...

CVE-2011-3937

The H.263 codec libavcodec/h263dec.c in FFmpeg 0.7.x before 0.7.12, 0.8.x before 0.8.11, and unspecified versions before 0.10, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7.5, and 0.8.x before 0.8.1 has unspecified impact and attack vectors related to "width/height changin...

CVE-2011-3937

CVE-2011-3937 concerns the H.263 decoder (libavcodec/h263dec.c) in FFmpeg and Libav, where the width/height could change when frame threads are used. Affected products/versions include FFmpeg 0.7.x before 0.7.12, 0.8.x before 0.8.11, and older Libav lines (0.5.x before 0.5.9, 0.6.x before 0.6.6, ...

Cisco WebEx WRF Player Multiple Buffer Overflows (cisco-sa-20121010-webex)

The version of Cisco WebEx WRF Player installed on the remote host has multiple buffer overflow vulnerabilities. A remote attacker could exploit these issues by tricking a user into opening a malicious WRF file, resulting in arbitrary code execution. C Tenable Network Security, Inc...

CVE-2012-3937

CVE-2012-3937 describes a buffer overflow in the Cisco WebEx Recording Format (WRF) Player for versions T27 before LD SP32 EP10 and T28 before T28.4, allowing remote code execution via a crafted WRF file. The issue affects the WebEx WRF Player used to play back recordings; exploitation would occu...

Gentoo Security Advisory GLSA 201210-06 (libav)

The remote host is missing updates announced in advisory GLSA 201210-06. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

CVE-2010-3937

CVE-2010-3937 affects Microsoft Exchange Server 2007 SP2 on x64. The vulnerability is in RPC processing that allows a remote authenticated attacker to trigger a denial of service, causing an infinite loop and MSExchangeIS outage. Multiple sources (MS10-106) indicate this can be exploited via spec...

CVE-2005-3937

creationtimestamp| type| source ---|---|--- 2009-12-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10656...

CVE-2009-3937

CVE-2009-3937 affects Sun/OpenSolaris Solaris in the TCP sockets stack. Specifically, a memory leak in the kernel related to tcp_sendmsg processing of ancillary data could enable local users to exhaust kernel memory, leading to a denial of service. The vulnerability is described for OpenSolaris s...

CVE-2008-3937

OpenDb (Open Media Collectors Database) version 1.0.6 contains multiple cross-site scripting (XSS) vulnerabilities. The issues allow remote attackers to inject arbitrary script/HTML via three inputs: user_id in edit action to user_admin.php, title in listings.php, and redirect_url in user_profile...

CVE-2008-3937

creationtimestamp| type| source ---|---|--- 2008-08-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32313 2008-08-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32314 2008-08-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32315...

CVE-2007-3937

CVE-2007-3937 concerns Multiple SQL injection vulnerabilities in A-shop 0.70 and earlier. The available sources indicate that unsanitized inputs in the application allow remote attackers to execute arbitrary SQL commands via unspecified vectors. Affected software: A-shop (version 0.70 and earlier...

CVE-2006-3937

CVE-2006-3937 affects x_atrix xGuestBook 1.02 via post.php. The vulnerability allows remote attackers to obtain sensitive information by crafting a request that omits any of the parameters (user, mail, p, url), causing an error message that reveals the installation path. The NVD records a CVSSv2 ...

CVE-2005-3937

SQL injection vulnerability in Softbiz B2B Trading Marketplace Script 1.1 and earler allows remote attackers to execute arbitrary SQL commands via the cid parameter in 1 selloffers.php, 2 buyoffers.php, 3 products.php, or 4 profiles.php...

CVE-2005-3937

The CVE-2005-3937 entry concerns a SQL injection vulnerability in Softbiz B2B Trading Marketplace Script 1.1 and earlier. The flaw allows remote attackers to execute arbitrary SQL commands by manipulating the cid parameter in one of four scripts: selloffers.php, buyoffers.php, products.php, or pr...