63 matches found
CVE-2012-3057
creationtimestamp| type| source ---|---|--- 2026-06-28 12:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpdwr5bhpp2n...
CVE-2023-3057
A vulnerability was found in YFCMF up to 3.0.4. It has been rated as problematic. This issue affects some unknown processing of the file app/admin/controller/Ajax.php. The manipulation of the argument controllername leads to path traversal: '../filedir'. The attack may be initiated remotely. The...
CVE-2025-3057
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Drupal core allows Cross-Site Scripting XSS.This issue affects Drupal core: from 8.0.0 before 10.3.13, from 10.4.0 before 10.4.3, from 11.0.0 before 11.0.12, from 11.1.0 before 11.1.3...
CVE-2025-3057
creationtimestamp| type| source ---|---|--- 2025-04-01 01:54:26+00:00| seen| https://t.me/cvedetector/21657...
CVE-2025-3057
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Drupal core allows Cross-Site Scripting XSS.This issue affects Drupal core: from 8.0.0 before 10.3.13, from 10.4.0 before 10.4.3, from 11.0.0 before 11.0.12, from 11.1.0 before 11.1.3...
CVE-2025-3057
Drupal core is vulnerable to a Cross-Site Scripting (XSS) vulnerability due to the improper neutralization of input during web page generation. Specifically, the error handling in DefaultExceptionHtmlSubscriber.php does not sufficiently filter its output, potentially allowing an attacker to execu...
CVE-2025-3057 Drupal core - Critical - Cross site scripting - SA-CORE-2025-001
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Drupal core allows Cross-Site Scripting XSS.This issue affects Drupal core: from 8.0.0 before 10.3.13, from 10.4.0 before 10.4.3, from 11.0.0 before 11.0.12, from 11.1.0 before 11.1.3...
CVE-2025-3057 Drupal core - Critical - Cross site scripting - SA-CORE-2025-001
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Drupal core allows Cross-Site Scripting XSS.This issue affects Drupal core: from 8.0.0 before 10.3.13, from 10.4.0 before 10.4.3, from 11.0.0 before 11.0.12, from 11.1.0 before 11.1.3...
CVE-2024-3057
A flaw exists whereby a user can make a specific call to a FlashArray endpoint allowing privilege escalation...
CVE-2024-3057
creationtimestamp| type| source ---|---|--- 2024-10-08 20:24:10+00:00| seen| https://t.me/cvedetector/7391...
CVE-2024-3057: Improper Privilege Management
A flaw exists whereby a user can make a specific call to a FlashArray endpoint allowing privilege escalation...
SUSE SLES15: kubevirt-container-disk / kubevirt-manifests / kubevirt-tests / etc (SUSE-SU-2023:3057-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3057-1 advisory. This update rebuilds the kubevirt stack with the current GO release. Tenable has extracted the preceding description block...
CVE-2023-3057
CVE-2023-3057 affects YFCMF up to 3.0.4. The vulnerability arises from unknown processing in app/admin/controller/Ajax.php, where manipulating the controllername argument enables path traversal via "../filedir". This potentially allows remote attackers to access restricted files. The exploit has ...
CVE-2023-3057 YFCMF Ajax.php path traversal
A vulnerability was found in YFCMF up to 3.0.4. It has been rated as problematic. This issue affects some unknown processing of the file app/admin/controller/Ajax.php. The manipulation of the argument controllername leads to path traversal: '../filedir'. The attack may be initiated remotely. The...
Debian: Security Advisory (DLA-151-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE CVE-2006-3057
Unspecified vulnerability in NetworkManager daemon for DHCP dhcdbd allows remote attackers to cause a denial of service crash via certain invalid DHCP responses that trigger memory corruption...
SUSE CVE-2011-3057
Google V8, as used in Google Chrome before 17.0.963.83, allows remote attackers to cause a denial of service via vectors that trigger an invalid read operation...
Fedora: Security Advisory for chromium (FEDORA-2022-3f28aa88cf)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2022-3057
CVE-2022-3057 affects Google Chrome prior to 105.0.5195.52, where an inappropriate implementation in the iframe Sandbox could allow a remote attacker to leak cross-origin data via a crafted HTML page. Affected product: Google Chrome (iframe Sandbox component). Root cause per sources: flawed Sandb...
