CVE-2015-3948

Cross-site scripting XSS vulnerability in Advantech WebAccess before 8.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-3948

Cross-site scripting XSS vulnerability in Advantech WebAccess before 8.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-3948

Summary : CVE-2015-3948 is a cross-site scripting (XSS) vulnerability in Advantech WebAccess prior to 8.1. The issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. According to NVD, the CVSS base score (v3) is 5.4 (Medium) with network access, lo...

CVE-2014-3948

CVE-2014-3948 applies to the TYPO3 powermail extension. The HTML export wizard in the powermail backend module is affected by a cross-site scripting (XSS) vulnerability in versions up to 1.6.10, allowing remote attackers to inject arbitrary script via unspecified vectors. A fixed release is 1.6.1...

Arbitrary code execution in extension "powermail" (powermail)

It has been discovered that the extension "powermail" powermail is susceptible to arbitrary code execution and Cross-Site Scripting Release Date: May 22, 2014 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: powermail:...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-3948. Reason: This candidate is a duplicate of CVE-2013-3948. Notes: All CVE users should reference CVE-2013-3948 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2014-1277

CVE-2014-1277 is rejected and not an active vulnerability entry; reference CVE-2013-3948.

CVE-2013-3948

Apple iOS 6.1.3 is affected by an open-redirect vulnerability in hostname determination during Enterprise Deployment prompts. This vulnerability can be leveraged by a remote attacker to trigger installation of arbitrary applications via a download-manifest itms-services:// URL that abuses a trust...

CVE-2005-3948

creationtimestamp| type| source ---|---|--- 2011-10-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18045...

COWON Media Center JetAudio .wav File Denial Of Service Vulnerability

This host has COWON Media Center JetAudio installed and is prone to Denial of Service vulnerability. Vulnerabilities Insight: An error occurs while parsing a .wav file containing an overly long string at the end. OpenVAS Vulnerabilities Test $Id: secpodcowonjetaudiowavdosvuln.nasl 5055 2017-01-20...

CVE-2009-3948

CVE-2009-3948 affects JetAudio 7.5.3 (COWON Media Center). A remote denial-of-service can be triggered by a long string at the end of a .wav file, causing memory consumption and application crash. CVSS context indicates network vector, no authentication, moderate complexity, and partial availabil...

CVE-2009-3948

creationtimestamp| type| source ---|---|--- 2009-07-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9139...

Gentoo Security Advisory GLSA 200708-11 (lighttpd)

The remote host is missing updates announced in advisory GLSA 200708-11. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200708-11 (lighttpd)

The remote host is missing updates announced in advisory GLSA 200708-11. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-3948

CVE-2008-3948: SQL injection in XRMS, affecting admin/users/self-2.php. Remote attackers can execute arbitrary SQL and modify name/email via unspecified vectors. No explicit remediation details provided in the documents; exploitation details not documented.

Debian: Security Advisory (DSA-1609-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1609-1 : lighttpd - various

Several local/remote vulnerabilities have been discovered in lighttpd, a fast webserver with minimal memory footprint. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-0983 lighttpd 1.4.18, and possibly other versions before 1.5.0, does not properly...

openSUSE 10 Security Update : lighttpd (lighttpd-3985)

Multiple bugs in lighttpd allowed remote attackers to crash lighttpd, circumvent access restricions or even execute code. CVE-2007-3946, CVE-2007-3947, CVE-2007-3948, CVE-2007-3949, CVE-2007-3950 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

CVE-2007-3948

connections.c in lighttpd before 1.4.16 might accept more connections than the configured maximum, which allows remote attackers to cause a denial of service failed assertion via a large number of connection attempts...

CVE-2007-3948

connections.c in lighttpd before 1.4.16 might accept more connections than the configured maximum, which allows remote attackers to cause a denial of service failed assertion via a large number of connection attempts...