32 matches found
CGA-6HJ9-GV59-9347
Bulletin has no description...
MINI-9347-V744-67H7
Bulletin has no description...
MINI-WPC7-9347-83PR
Bulletin has no description...
Malicious code in @zalastax/nolb-illust-9347 (npm)
The package @zalastax/nolb-illust-9347 was found to contain malicious code...
MAL-2025-9347 Malicious code in @sourceressj2001/quo-quae-magnam (npm)
The package @sourceressj2001/quo-quae-magnam was found to contain malicious code...
CVE-2019-9347
In the m4vh263 codec, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-109891727...
Linux Distros Unpatched Vulnerability : CVE-2017-9347
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 2.2.0 to 2.2.6, the ROS dissector could crash with a NULL pointer dereference. This was addressed in epan/dissectors/asn1/ros/packet-ros-template.c...
CVE-2024-9347
creationtimestamp| type| source ---|---|--- 2024-10-17 07:26:41+00:00| seen| https://t.me/cvedetector/8143...
CVE-2024-9347
The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wpext-export' parameter in all versions up to, and including, 3.0.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...
WordPress The Ultimate WordPress Toolkit – WP Extended Plugin <= 3.0.9 is vulnerable to Cross Site Scripting (XSS)
Software The Ultimate WordPress Toolkit – WP Extended Type Plugin Vulnerable versions = 3.0.9 Fixed in 3.0.10 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9347 Patch priority Medium CVSS severity Medium 7.1 Developer WP Extended PSID c3aa4715ec21...
SUSE CVE-2017-9347
In Wireshark 2.2.0 to 2.2.6, the ROS dissector could crash with a NULL pointer dereference. This was addressed in epan/dissectors/asn1/ros/packet-ros-template.c by validating an OID...
CVE-2020-9347
Zoho ManageEngine Password Manager Pro through 10.x has a CSV Excel Macro Injection vulnerability via a crafted name that is mishandled by the Export Passwords feature. NOTE: the vendor disputes the significance of this report because they expect CSV risk mitigation to be provided by an external...
CVE-2020-9347
Zoho ManageEngine Password Manager Pro (versions up to 10.x; vendor notes no CSV constraints planned) contains a CSV Excel Macro Injection vulnerability. The issue arises when a crafted name is mishandled by the Export Passwords feature, enabling potential macro injection via CSV exports. Red Hat...
CVE-2019-9347
In the m4vh263 codec, there is a possible out of bounds read due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-109891727...
CVE-2019-9347
CVE-2019-9347 affects Android 10 via the m4v_h263 codec. The vulnerability is an out-of-bounds read caused by a use-after-free, leading to local information disclosure without requiring user interaction. Documentation across sources confirms the issue in the Media framework; exploitation details ...
CVE-2015-9347
The wp-plotly plugin before 1.0.3 for WordPress has XSS by authors...
CVE-2015-9347
The wp-plotly WordPress plugin (versions prior to 1.0.3) is affected by a cross-site scripting (XSS) vulnerability. The issue arises from insufficient validation of client-side data in the plugin, enabling an attacker to execute client-side code. Some sources reference an authenticated stored XSS...
CVE-2018-9347
The CVE-2018-9347 entry affects Android devices and is caused by incorrect input validation in SMF_ParseMetaEvent within eas_smf.c, which can trigger an infinite loop and enable a remote temporary DoS. Affected products/versions listed include Android 7.x (7.0, 7.1.1, 7.1.2), Android 8.x (8.0, 8....
SUSE SLES11 Security Update : wireshark (SUSE-SU-2017:1664-1)
The network analysis tool wireshark was updated to version 2.0.13 to fix the following issues : - CVE-2017-9352: Bazaar dissector infinite loop wnpa-sec-2017-22 bsc1042304 - CVE-2017-9348: DOF dissector read overflow wnpa-sec-2017-23 bsc1042303 - CVE-2017-9351: DHCP dissector read overflow...
SUSE SLED12 / SLES12 Security Update : wireshark (SUSE-SU-2017:1663-1)
The network debugging tool wireshark was updated to version 2.2.7 to fix the following issues : - CVE-2017-9352: Bazaar dissector infinite loop wnpa-sec-2017-22 bsc1042304 - CVE-2017-9348: DOF dissector read overflow wnpa-sec-2017-23 bsc1042303 - CVE-2017-9351: DHCP dissector read overflow...