Linux Distros Unpatched Vulnerability : CVE-2026-3082

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on...

CVE-2026-3082

creationtimestamp| type| source ---|---|--- 2026-03-06 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-163/ 2026-03-16 15:47:07+00:00| seen| https://ccb.belgium.be/advisories/warning-multiple-critical-vulnerabilities-gstreamer-patch-immediately 2026-03-18 04:00:12+00:00|...

EUVD-2022-3082

Malicious code in bioql PyPI...

MongoDB 5.0.x < 5.0.31 / 6.0.x < 6.0.20 / 7.0.x < 7.0.14 / 7.3.x < 7.3.4 Improper Access Control (SERVER-103151)

The version of MongoDB installed on the remote host is 5.0 prior to 5.0.31, 6.0 prior to 6.0.20, 7.0 prior to 7.0.14, 7.3 prior to 7.3.4. It is, therefore, affected by a vulnerability as referenced in the SERVER-103151 advisory. - A user authorized to access a view may be able to alter the intend...

CVE-2022-3082

The miniOrange Discord Integration WordPress plugin before 2.1.6 does not have authorisation and CSRF in some of its AJAX actions, allowing any logged in users, such as subscriber to call them, and disable the app for example...

CVE-2022-3082

creationtimestamp| type| source ---|---|--- 2025-05-13 16:30:43+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16161...

CVE-2025-3082

A user authorized to access a view may be able to alter the intended collation, allowing them to access to a different or unintended view of underlying data. This issue affects MongoDB Server v5.0 version prior to 5.0.31, MongoDB Server v6.0 version prior to 6.0.20, MongoDB Server v7.0 version...

CVE-2025-3082

creationtimestamp| type| source ---|---|--- 2025-04-01 11:34:35+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9875 2025-04-01 16:23:21+00:00| seen| https://t.me/cvedetector/21754 2025-04-02 23:09:18+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3lluiyzj2ms2x...

CVE-2025-3082 User may override a view's collation and gain unauthorized access to underlying data

A user authorized to access a view may be able to alter the intended collation, allowing them to access to a different or unintended view of underlying data. This issue affects MongoDB Server v5.0 version prior to 5.0.31, MongoDB Server v6.0 version prior to 6.0.20, MongoDB Server v7.0 version...

CVE-2025-3082

CVE-2025-3082 affects MongoDB Server versions prior to fixes: 5.0.31, 6.0.20, 7.0.14, and 7.3.4. A user with view access can alter the intended collation, allowing access to a different or unintended view of underlying data. The vulnerability is rooted in improper access control during view colla...

CVE-2025-3082 User may override a view's collation and gain unauthorized access to underlying data

A user authorized to access a view may be able to alter the intended collation, allowing them to access to a different or unintended view of underlying data. This issue affects MongoDB Server v5.0 version prior to 5.0.31, MongoDB Server v6.0 version prior to 6.0.20, MongoDB Server v7.0 version...

CVE-2025-3082 User may override a view's collation and gain unauthorized access to underlying data

A user authorized to access a view may be able to alter the intended collation, allowing them to access to a different or unintended view of underlying data. This issue affects MongoDB Server v5.0 version prior to 5.0.31, MongoDB Server v6.0 version prior to 6.0.20, MongoDB Server v7.0 version...

CVE-2024-3082

A “CWE-256: Plaintext Storage of a Password” affecting the administrative account allows an attacker with physical access to the machine to retrieve the password in cleartext unless specific security measures at other layers e.g., full-disk encryption have been enabled...

openSUSE: Security Advisory for qemu (SUSE-SU-2023:3082-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHSA-2019:3082

creationtimestamp| type| source ---|---|--- 2024-01-08 13:36:46+00:00| seen| https://t.me/ctinow/164333...

CVE-2018-3082

creationtimestamp| type| source ---|---|--- 2023-11-15 16:53:23+00:00| published-proof-of-concept| https://t.me/BABATATASASA/5991...

CVE-2023-3082

creationtimestamp| type| source ---|---|--- 2023-07-12 12:48:25+00:00| seen| https://t.me/cibsecurity/66503...

CVE-2023-3082

The CVE-2023-3082 entry relates to the WordPress Post SMTP plugin (versions up to and including 2.5.7). The root cause is insufficient input sanitization and output escaping in email contents, enabling Stored Cross-Site Scripting (XSS). The impact is unauthenticated attackers can inject arbitrary...

CVE-2023-3082 Post SMTP <= 2.5.7 - Unauthenticated Stored Cross-Site Scripting via Email

The Post SMTP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via email contents in versions up to, and including, 2.5.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that...

WordPress Post SMTP Plugin <= 2.5.7 is vulnerable to Cross Site Scripting (XSS)

Software Post SMTP Type Plugin Vulnerable versions = 2.5.7 Fixed in 2.5.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-3082 Patch priority Low CVSS severity Low 7.1 Developer WPExperts PSID c8d98d03e5dd Credits Alex Thomas Required privilege...