139 matches found
CVE-2026-3176
GitLab has remediated an issue in GitLab EE affecting all versions from 18.6 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed an authenticated user with limited permissions to access project information due to insufficient authorization...
CVE-2026-3176 Missing Authorization in GitLab
GitLab has remediated an issue in GitLab EE affecting all versions from 18.6 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed an authenticated user with limited permissions to access project information due to insufficient authorization...
GitLab 18.6 < 18.11.6 / 19.0 < 19.0.3 / 19.1 < 19.1.1 (CVE-2026-3176)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab EE affecting all versions from 18.6 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed an authenticate...
EUVD-2026-3176
A vulnerability was determined in Yonyou KSOA 9.0. This impacts an unknown function of the file /worksheet/workinfo.jsp of the component HTTP GET Parameter Handler. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been publicly...
EUVD-2022-3176
Malicious code in bioql PyPI...
CVE-2023-3176
A vulnerability, which was classified as critical, was found in SourceCodester Lost and Found Information System 1.0. Affected is an unknown function of the file admin\user\manageuser.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. Th...
CVE-2021-3176
The chat window of the Mitel BusinessCTI Enterprise MBC-E Client for Windows before 6.4.15 and 7.x before 7.1.2 could allow an attacker to gain access to user information by sending certain code, due to improper input validation of http links. A successful exploit could allow an attacker to view...
CVE-2005-3176
Microsoft Windows 2000 before Update Rollup 1 for SP4 does not record the IP address of a Windows Terminal Services client in a security log event if the client connects successfully, which could make it easier for attackers to escape detection...
Alibaba Cloud Linux 3 : 0167: cloud-kernel bugfix, enhancement and (ALINUX3-SA-2022:0167)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2022:0167 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2022-3176: There exists a use-after-free in...
CVE-2025-3176
creationtimestamp| type| source ---|---|--- 2025-04-03 21:06:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llwsmfzhvh2w 2025-04-03 23:36:13+00:00| seen| https://t.me/cvedetector/22016...
CVE-2025-3176
A vulnerability was found in Project Worlds Online Lawyer Management System 1.0. It has been classified as critical. This affects an unknown part of the file /singlelawyer.php. The manipulation of the argument uid leads to sql injection. It is possible to initiate the attack remotely. The exploit...
CVE-2025-3176 Project Worlds Online Lawyer Management System single_lawyer.php sql injection
A vulnerability was found in Project Worlds Online Lawyer Management System 1.0. It has been classified as critical. This affects an unknown part of the file /singlelawyer.php. The manipulation of the argument uid leads to sql injection. It is possible to initiate the attack remotely. The exploit...
CVE-2025-3176 Project Worlds Online Lawyer Management System single_lawyer.php sql injection
A vulnerability was found in Project Worlds Online Lawyer Management System 1.0. It has been classified as critical. This affects an unknown part of the file /singlelawyer.php. The manipulation of the argument uid leads to sql injection. It is possible to initiate the attack remotely. The exploit...
CVE-2025-3176
A vulnerability (CVE-2025-3176) affects Project Worlds Online Lawyer Management System 1.0. The issue is an SQL injection in the /single_lawyer.php file caused by unsafely manipulating the u_id parameter. It is exploitable remotely and has been publicly disclosed. The available documents do not p...
CVE-2024-3176
creationtimestamp| type| source ---|---|--- 2024-07-17 02:19:53+00:00| seen| https://t.me/cvedetector/1028...
CVE-2024-3176
Out of bounds write in SwiftShader in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Chromium security severity: High...
CVE-2024-3176
CVE-2024-3176 affects Google Chrome with an out-of-bounds write in SwiftShader triggered by a crafted HTML page, enabling remote memory corruption. Chrome versions prior to 117.0.5938.62 are vulnerable; upgrade to 117.0.5938.62 or later to mitigate. Other connected sources corroborate the same Ch...
CVE-2024-3176
Out of bounds write in SwiftShader in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Chromium security severity: High...
CVE-2023-3176
CVE-2023-3176 affects SourceCodester Lost and Found Information System 1.0. The vulnerability is an SQL injection in the admin\user\manage_user.php function, triggered by manipulating the id parameter. It can be exploited remotely and the exploit has been publicly disclosed. Affected component is...
SUSE CVE-2014-3176
Google Chrome before 37.0.2062.94 does not properly handle the interaction of extensions, IPC, the sync API, and Google V8, which allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-3177...