CVE-2016-0348

Cross-site request forgery CSRF vulnerability in IBM TRIRIGA Application Platform 3.3, 3.3.1, 3.3.2, and 3.4 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences. IBM X-Force ID: 111813...

Code-Crafters Ability Mail Server Cross-Site Scripting Vulnerability

Code-Crafters Ability Mail Server is a set of mail server software from Code-Crafters Software UK. The software provides SMTP, POP3, WebMail and other common functions, and supports remote management, virus protection, content filtering and so on. A cross-site scripting vulnerability exists in...

Supervisor XML-RPC Authenticated Remote Code Execution Exploit

This Metasploit module exploits a vulnerability in the Supervisor process control software, where an authenticated client can send a malicious XML-RPC request to supervisord that will run arbitrary shell commands on the server. The commands will be run as the same user as supervisord. Depending o...

libarchive Denial of Service Vulnerability (CNVD-2017-27308)

libarchive is a multi-format archive and compression library. A denial of service vulnerability exists in the archivereadsupportformatlha.c file in libarchive version 3.3.2. An attacker can exploit this vulnerability to cause a denial of service out-of-bounds read and crash...

Libarchive Out-of-Bounds Read Vulnerability

libarchive is a multi-format archive and compression library. An out-of-bounds read vulnerability exists in the archivereadsupportformatiso9660.c file in libarchive version 3.3.2. A remote attacker could exploit this vulnerability to cause a denial of service...

libarchive Denial of Service Vulnerability (CNVD-2017-27309)

libarchive is a multi-format archive and compression library. A denial of service vulnerability exists in the readheader of the archivereadsupportformatrar.c file in libarchive version 3.3.2. An attacker can exploit this vulnerability to cause a denial of service 'archivereadformatrarreadheader'...

UBUNTU-CVE-2017-14501

An out-of-bounds read flaw exists in parsefileinfo in archivereadsupportformatiso9660.c in libarchive 3.3.2 when extracting a specially crafted iso9660 iso file, related to archivereadformatiso9660readheader...

UBUNTU-CVE-2017-14166

libarchive 3.3.2 allows remote attackers to cause a denial of service xmldata heap-based buffer over-read and application crash via a crafted xar archive, related to the mishandling of empty strings in the atol8 function in archivereadsupportformatxar.c...

FFmpeg Denial of Service Vulnerability (CNVD-2017-26316)

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'ffamfgetfieldvalue' function in the libavformat/rtmppkt.c file in FFmpeg version 3.3.2. A remote attacker can exploit this vulnerability to cause a...

ALPINE-CVE-2017-11665

The ffamfgetfieldvalue function in libavformat/rtmppkt.c in FFmpeg 3.3.2 allows remote RTMP servers to cause a denial of service Segmentation Violation and application crash via a crafted stream...

CVE-2016-2355

SQL injection vulnerability in the REST API in dotCMS before 3.3.2 allows remote attackers to execute arbitrary SQL commands via the stName parameter to api/content/save/1...

CVE-2016-9189

Pillow before 3.3.2 allows context-dependent attackers to obtain sensitive information by using the "crafted image file" approach, related to an "Integer Overflow" issue affecting the Image.core.mapbuffer in map.c component...

dotCMS < 3.3.2 SQLi Vulnerability

dotCMS is prone to a SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:dotcms:dotcms"; if...

VMware vRealize Log Insight Multiple Vulnerabilities (VMSA-2016-0008)

VMware vRealize Log Insight is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Vulnerabilities of the Gentoo Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the qt package up to version 3.3.2 inclusive of the Gentoo Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Fedora 21 : qt-creator-3.3.2-2.fc21 (2015-3574)

Add SSH host key verification to built-in SSH client. Update to version 3.3.2, see https://qt.gitorious.org/qt-creator/qt-creator/raw/2fb9c3c7abc93a9237e 72972ee222b2a2628007e:dist/changes-3.3.2 for details. Note that Tenable Network Security has extracted the preceding description block directly...

Traffic Analyzer 3.3.2 - js/ta_loaded.js.php aoid Parameter XSS

The trafficanalyzer WordPress plugin was affected by a js/taloaded.js.php aoid Parameter XSS security vulnerability...

vcart 3.3.2 - Multiple Remote File Inclusion Vulnerabilities

No description provided by source. +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Scripts : vcart version 3.3.2 Discovered By : k1n9k0ng Scripts site : http://www.visionburst.com/ Thanks To : sekuritionline, semprol, bajingan, mimid, r.i.p, x-code,...

PT-2012-4232 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.3.2 Description: The issue allows local users to cause a denial of service panic via a crafted application that uses the fork system call. This is due to the copy creds function in kernel/cred.c providing an...

WordPress 3.2.2 Stored Cross Site Scripting

Author : L3b-r1'z Tilte : Wordpress 0day Cross Site Scripting STORED Version 3.3.2 Date : 2012-May-04 Email : [email protected] Desc : This Exploit In Comment b0x , if you put alert1337 You will See The Alert : . Note : If Admin Active When You Make Comment Not Published Not Work Exploit :D . How ...