Code injection

In Kronos Web Time and Attendance webTA 3.8.x and later 3.x versions before 4.0, the com.threeis.webta.H491delegate servlet allows an attacker with Timekeeper or Supervisor privileges to gain unauthorized administrative privileges within the application via the delegate, delegateRole, and...

CVE-2020-8492

Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1 allows an HTTP server to conduct Regular Expression Denial of Service ReDoS attacks against a client because of urllib.request.AbstractBasicAuthHandler catastrophic backtracking...

Code injection

Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1 allows an HTTP server to conduct Regular Expression Denial of Service ReDoS attacks against a client because of urllib.request.AbstractBasicAuthHandler catastrophic backtracking...

CVE-2013-2571

Iris 3.8 before build 1548, as used in Xpient point of sale POS systems, allows remote attackers to execute arbitrary commands via a crafted request to TCP port 7510, as demonstrated by opening the cash drawer...

Design/Logic Flaw

Iris 3.8 before build 1548, as used in Xpient point of sale POS systems, allows remote attackers to execute arbitrary commands via a crafted request to TCP port 7510, as demonstrated by opening the cash drawer...

CVE-2013-2571

CVE-2013-2571 affects Iris 3.8 (before build 1548) used in Xpient POS. A remote attacker can trigger the cash drawer via a crafted request to TCP port 7510, enabling arbitrary command-like actions without authentication, as demonstrated by PoC code. The vulnerability is caused by an input-validat...

CVE-2013-2571

Iris 3.8 before build 1548, as used in Xpient point of sale POS systems, allows remote attackers to execute arbitrary commands via a crafted request to TCP port 7510, as demonstrated by opening the cash drawer...

PT-2020-20082 · Microsoft +2 · Windows 8 +3

Name of the Vulnerable Software and Affected Versions: Python CPython versions 3.6 through 3.6.10 Python CPython versions 3.7 through 3.7.6 Python CPython versions 3.8 through 3.8.1 Description: An insecure dependency load upon launch on Windows 7 may result in an attacker's copy of...

Design/Logic Flaw

A memory usage vulnerability exists in Trend Micro Password Manager 3.8 that could allow an attacker with access and permissions to the victim's memory processes to extract sensitive information...

Trend Micro Password Manager Memory Usage Vulnerability

Trend Micro Password Manager is a secure password management solution from Trend Micro. A memory usage vulnerability exists in Trend Micro Password Manager version 3.8, which can be exploited by attackers to obtain sensitive information...

Oracle Hospitality Suites Management CVE-2020-2697 Local Security Vulnerability

Description Oracle Hospitality Suites Management is prone to a local security vulnerability. The vulnerability can be exploited over the 'HTTP' protocol. The 'Request Tracker' package is affected. This vulnerability affects the following supported versions: 3.7, 3.8 Technologies Affected Oracle...

PT-2022-8585 · Moodle +1 · Moodle +1

Name of the Vulnerable Software and Affected Versions: Moodle version 3.8 Description: The issue concerns stored cross-site scripting. In Moodle, messages required extra sanitizing before updating the conversation overview to prevent this risk. Recommendations: For Moodle version 3.8, ensure that...

Fedora Update for python38 FEDORA-2019-d11594bf0a

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 30 Update: python38-3.8.1-1.fc30

Python 3.8 package for developers. This package exists to allow developers to test their code against a newer version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.8, update your Fedora to a newer version once Python 3.8 is stable...

[SECURITY] Fedora 31 Update: python38-3.8.1-1.fc31

Python 3.8 package for developers. This package exists to allow developers to test their code against a newer version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.8, update your Fedora to a newer version once Python 3.8 is stable...

Security Bulletin: Multiple Vulnerabilities in python affects IBM Watson Studio Local

Summary Security Bulletin: Multiple Vulnerabilities in python affects IBM Watson Studio Local Vulnerability Details CVEID: CVE-2018-14647 DESCRIPTION: Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial of...

CVE-2019-18862

maidag in GNU Mailutils before 3.8 is installed setuid and allows local privilege escalation in the url mode...

Fedora 31 : python38 (2019-d11594bf0a)

This is a beta preview of Python 3.8 Python 3.8 is still in development. This release, 3.8.0b4 is the last of four planned beta release previews. Beta release previews are intended to give the wider community the opportunity to test new features and bug fixes and to prepare their projects to...

WordPress 3.8.x < 3.8.30 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A cross-site scripting XSS vulnerability in post previews by contributors. - A cross-site scripting XSS vulnerability in stored comments. - An unspecified issue with...

[SECURITY] Fedora 31 Update: python38-3.8.0~b4-1.fc31

Python 3.8 package for developers. This package exists to allow developers to test their code against a newer version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.8, update your Fedora to a newer version once Python 3.8 is stable...