CVE-2014-3975

CVE-2014-3975 describes an absolute path traversal in AuraCMS 3.0, exploitable through filemanager.php via a full pathname in the viewdir parameter, allowing remote attackers to list directories. The vulnerability is documented across multiple sources (NVD/Red Hat/CVE list), with the core issue b...

CVE-2014-3975

creationtimestamp| type| source ---|---|--- 2014-05-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33555...

CVE-2013-3975

IBM Sametime Meeting Server (IBM Lotus Notes Sametime) contains an information-disclosure vulnerability that lets remote attackers enumerate user identities (usernames, full names, and e-mail addresses) via a search on the web interface. Affected products/versions: IBM Sametime 8.x up to 8.5.2.1 ...

IBM Lotus Notes Sametime User Enumeration

This module extracts usernames using the IBM Lotus Notes Sametime web interface using either a dictionary attack which is preferred, or a bruteforce attack trying all usernames of MAXDEPTH length or less. This module requires Metasploit: https://metasploit.com/download Current source:...

SuSE Update for MozillaFirefox openSUSE-SU-2012:1064-1 (MozillaFirefox)

Check for the Version of MozillaFirefox OpenVAS Vulnerability Test $Id: gbsuse201210641.nasl 8285 2018-01-04 06:29:16Z teissa $ SuSE Update for MozillaFirefox openSUSE-SU-2012:1064-1 MozillaFirefox Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH,...

MozillaFirefox: Update to version 15 (critical)

Mozilla Firefox, Thunderbird, xulrunner, seamonkey 15.0 update bnc777588 MFSA 2012-57/CVE-2012-1970 Miscellaneous memory safety hazards MFSA 2012-58/CVE-2012-1972/CVE-2012-1973/CVE-2012-1974/CVE-2012-1 975 CVE-2012-1976/CVE-2012-3956/CVE-2012-3957/CVE-2012-3958/CVE- 2012-3959...

Mozilla Products Memory Corruption Vulnerabilities - August12 (Mac OS X)

This host is installed with Mozilla firefox/thunderbird/seamonkey and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaprdtsmemcorrvulnaug12macosx.nasl 6445 2017-06-27 12:31:06Z santu $ Mozilla Products Memory Corruption Vulnerabilities - August12 Mac OS X Authors:...

CVE-2012-3975

Technical details about CVE-2012-3975 (affected product, root cause, impact, remediation) are not provided in the connected documents. Monitor for updates.

CVE-2011-3975

CVE-2011-3975 involves an HTC update for Android 2.3.4 (build GRJ22) used with Sense on HTC EVO 3D, EVO 4G, ThunderBolt, and other devices. The HtcLoggers.apk component is exposed via android.permission.INTERNET and can be leveraged by user-assisted remote attackers to extract sensitive data, inc...

CVE-2010-3975

CVE-2010-3975 describes an untrusted search path vulnerability in Adobe Flash Player 9 that enables arbitrary code execution via a Trojan horse schannel.dll alongside a file processed by Flash. The issue is characterized as a DLL hijacking scenario where local users, and possibly remote attackers...

CVE-2009-3975

The CVE-2009-3975 entry concerns Moa Gallery (versions 1.1.0 and 1.2.0). The vulnerability is a SQL injection in index.php, exploitable via the gallery_view action’s gallery_id parameter, allowing remote attackers to execute arbitrary SQL commands. Severity in NVD is Medium (CVSS v2: AV:N/AC:M/Au...

CVE-2009-3975

creationtimestamp| type| source ---|---|--- 2009-08-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9481...

CVE-2008-3975

Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3 and 10.1.2.3 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2008-3977...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3 and 10.1.2.3 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2008-3975...

CVE-2008-3975

Technical details for CVE-2008-3975 are not publicly available in the provided documents. Monitor for updates from Oracle/vendor advisories; no confirmed impact, affected versions, exploit methods, or fixes are documented here.

Debian: Security Advisory (DSA-958-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-3975

Cross-site scripting XSS vulnerability in index.php in Elite Forum 1.0.0.0 allows remote attackers to inject arbitrary web script or HTML via the title parameter in a ptopic action, a different vulnerability than CVE-2005-3412...

CVE-2007-3975

CVE-2007-3975 is a Cross-site Scripting (XSS) vulnerability in Elite Forum 1.0.0.0, exploitable via the title parameter in a ptopic action on index.php. The public text in the connected documents confirms the vulnerability existence but does not provide concrete technical details beyond the param...

CVE-2006-3975

CVE-2006-3975 affects Computer Associates’ eTrust Antivirus WebScan ActiveX component. The root cause is missing bounds checking during processing of update manifests (filelist.txt) delivered by the WebScan update mechanism, which could enable remote code execution when a user visits a malicious ...

[SECURITY] [DSA 958-1] New drupal packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 958-1 [email protected] http://www.debian.org/security/ Martin Schulze January 27th, 2006 http://www.debian.org/security/faq -...