122 matches found
MINI-C5M8-GJ76-3235
Bulletin has no description...
ECHO-3235-462B-0D89
Bulletin has no description...
Linux Distros Unpatched Vulnerability : CVE-2011-3235
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and...
CVE-2024-3235
The Essential Grid Gallery WordPress Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.1 via the onfrontajaxaction function. This makes it possible for unauthenticated attackers to view private and password protected posts that m...
CVE-2025-3235
creationtimestamp| type| source ---|---|--- 2025-04-04 09:35:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10421 2025-04-04 13:07:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llyichx2372z 2025-04-04 14:40:29+00:00| seen|...
CVE-2025-3235 PHPGurukul Old Age Home Management System profile.php sql injection
A vulnerability was found in PHPGurukul Old Age Home Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/profile.php. The manipulation of the argument adminname/contactnumber leads to sql injection. It is possible to initiate the attack...
Linux Distros Unpatched Vulnerability : CVE-2022-3235
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use After Free in GitHub repository vim/vim prior to 9.0.0490. CVE-2022-3235 Note that Nessus relies on the presence of the package as reported by the vendor...
Fedora 37 : vim (2022-4bc60c32a2)
The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-4bc60c32a2 advisory. Security fix for CVE-2022-3705 2139842 - vim upgrade broke :! for displaying terminal output ---- patchlevel 803 ---- The newest upstream commit...
WordPress Essential Grid Plugin <= 3.1.1 is vulnerable to Broken Access Control
Software Essential Grid Type Plugin Vulnerable versions = 3.1.1 Fixed in 3.1.2 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-3235 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 597aadc22d06 Credits 1337Wannabe Required privilege...
CVE-2024-3235
The Essential Grid Gallery WordPress Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.1 via the onfrontajaxaction function. This makes it possible for unauthenticated attackers to view private and password protected posts that m...
aiohttp's HTTP parser (the python one, not llhttp) still overly lenient about separators
Summary Security-sensitive parts of the Python HTTP parser retained minor differences in allowable character sets, that must trigger error handling to robustly match frame boundaries of proxies in order to protect against injection of additional requests. Additionally, validation could trigger...
CVE-2023-3235
creationtimestamp| type| source ---|---|--- 2024-01-04 01:04:37+00:00| seen| https://t.me/arpsyndicate/2394...
Ubuntu: Security Advisory (USN-6420-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 18.04 ESM / 20.04 LTS / 22.04 LTS : Vim vulnerabilities (USN-6420-1)
The remote Ubuntu 18.04 ESM / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6420-1 advisory. It was discovered that Vim incorrectly handled memory when opening certain files. If an attacker could trick a user into opening ...
SUSE SLES15 Security Update : gstreamer-plugins-bad (SUSE-SU-2023:3235-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3235-1 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...
CVE-2023-3235
CVE-2023-3235 affects mccms up to 2.6.5. The vulnerability lies in the pic_api function in sys/apps/controllers/admin/Comic.php, where manipulation of the url parameter enables server-side request forgery (SSRF) and can be triggered remotely. Public exploitation has been disclosed. Affected versi...
EulerOS Virtualization 3.0.6.0 : vim (EulerOS-SA-2023-2251)
According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Buffer Over-read in function grabfilename in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing...
Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2023-2080)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CBL Mariner 2.0 Security Update: vim (CVE-2022-3235)
The version of vim installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-3235 advisory. - Use After Free in GitHub repository vim/vim prior to 9.0.0490. CVE-2022-3235 Note that Nessus has not tested for...
Amazon Linux 2 : vim (ALAS-2023-1975)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-1975 advisory. A heap buffer overflow vulnerability was found in vim's inscomplinfercasegettext function of the src/insexpand.c file. This flaw occurs when vim tries to access uninitialized memory when completi...