CVE-2020-23907

CVE-2020-23907 affects RettDec v3.3: a heap buffer overflow in the function canSplitFunctionOn() of ir_modifications.cpp can cause an out-of-bounds read with potential denial of service, memory disclosure, and possibly code execution. The issue is confirmed by multiple sources (NVD, CNVD/OSV/RH e...

CVE-2020-23907

An issue was discovered in retdec v3.3. In function canSplitFunctionOn of irmodifications.cpp, there is a possible out of bounds read due to a heap buffer overflow. The impact is: Deny of Service, Memory Disclosure, and Possible Code Execution...

Custom Banners < 3.3 - CSRF Nonce Bypass in saveCustomFields

The plugin did not properly check the CSRF nonce in the saveCustomFields method, which could allow attackers to make a logged in user with the editpost capability to save custom fields in a post. Numerous sanitisation fixes were also added to v3.3 PoC Send a request without the...

CVE-2011-2177

OpenOffice.org v3.3 allows execution of arbitrary code with the privileges of the user running the OpenOffice.org suite tools...

Nuuo Central Management Server Authenticated Arbitrary File Upload

Nuuo Central Management Server v3.3 and prior allow authenticated users to upload files and specify the destination in a FileName header that is vulnerable to directory traversal. Recent assessments: jrobles-r7 at May 09, 2019 5:57pm UTC reported: Details Details from module documentation in...

CVE-2018-14798

Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini C1, FRENIC-Mini C2, FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace. The program does not properly parse FNC files that may allow for information disclosure...

CVE-2018-14790

Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini C1, FRENIC-Mini C2, FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace. A buffer over-read vulnerability may allow remote code execution on the device...

Information disclosure

Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini C1, FRENIC-Mini C2, FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace. The program does not properly parse FNC files that may allow for information disclosure...

CVE-2018-14798

CVE-2018-14798 affects Fuji Electric FRENIC Loader family (FRENIC-Mini C1/C2, FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace) where the FNC file parsing logic incorrectly handles files, leading to information disclosure. The ICSA advisory confirms an out-of-bounds read vulnerability (CWE-125) ...

CVE-2018-14790

CVE-2018-14790 concerns Fuji Electric FRENIC Loader devices (FRENIC-Mini C1/C2, FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace) with firmware versions including v3.3 and v7.3.4.1a. The vulnerability is a buffer over-read in the device’s processing of FNC files, enabling remote code execution o...

CVE-2018-14798

Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini C1, FRENIC-Mini C2, FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace. The program does not properly parse FNC files that may allow for information disclosure...

CVE-2016-1000129

Reflected XSS in wordpress plugin defa-online-image-protector v3.3...

CVE-2016-1000129

Summary: CVE-2016-1000129 is a reflected cross-site scripting (XSS) vulnerability in the WordPress plugin “defa-online-image-protector”

Iranian Weblog Services v3.3 CMS - Multiple Vulnerabilities

Document Title: =============== Iranian Weblog Services v3.3 CMS - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1862 CWE-89 CWE-79 CWE-264 http://cwe.mitre.org/data/definitions/89 http://cwe.mitre.org/data/definitions/79...

74CMS 个人版V3.3(<=2013111)后台任意文件删除漏洞

No description provided by source...

Cells Blog 3.3 - XSS Reflected & Blind SQLite Injection

No description provided by source. + Exploit: Cells v3.3 XSS Reflected & Blind SQLite Injection + Author: vinicius777 + Contact: vinicius777 AT gmail @vinicius777 + version: Cells Blog 3.3 + Vendor Homepage: http://cells.tw + 14/01/2014 vendor contacted + 17/01/2014 no response from vendor +...

ForumApp 3.3 - Remote Database Disclosure Vulnerability

No description provided by source. Title: ForumApp V3.3 Remote Database Disclosure Vulnerability Credit: Cyber.Zer0 E-mail: Cyber.Zer04tHotmaildotcom Download: http://www.aspapp.com/free-asp-forum HomePage: http://www.aspapp.com/ Remote: Yes Dork: Powered by ForumApp --=Database Disclosure=--...

Cells Blog 3.3 - Reflected Cross-Site Scripting / Blind SQLite Injection

Exploit: Cells v3.3 XSS Reflected & Blind SQLite Injection + Author: vinicius777 + Contact: vinicius777 AT gmail @vinicius777 + version: Cells Blog 3.3 + Vendor Homepage: http://cells.tw + 14/01/2014 vendor contacted + 17/01/2014 no response from vendor + 20/01/2014 no response from vendor +...

MusicBox <= v3.3 (install.php) Change Password Vulnerability

Exploit for php platform in category web applications ============================================================ MusicBox = v3.3 install.php Change Password Vulnerability ============================================================ Author : Mr.ThieF Software Link : www.musicboxv2.com Version :...

ASRC Really Simple Chat 3.3 Cross Site Scripting / Remote File Inclusion

= ARSC Really Simple Chat V3.3 Remote File Inclsion & Cross Site Scripting Vulnerability = Author : Zer0 Thunder = Home : http://colombohackers.com = Download : http://sourceforge.net/projects/arsc/ = Date : 06/25/2010 Remote File Inclusion ---...