105 matches found
MINI-3257-W9MM-W7QH
Bulletin has no description...
MINI-3257-468P-F4QW
Bulletin has no description...
CVE-2026-3257
UnQLite versions through 0.06 for Perl uses a potentially insecure version of the UnQLite library. UnQLite for Perl embeds the UnQLite library. Version 0.06 and earlier of the Perl module uses a version of the library from 2014 that may be vulnerable to a heap-based overflow...
MiracleLinux 4 : gnupg2-2.0.14-9.AXS4 (AXSA:2018-3257:01)
The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2018-3257:01 advisory. gnupg2: Improper sanitization of filenames allows for the display of fake status messages and the bypass of signature verification CVE-2018-12020 Tenable has...
MINI-RXMH-2XRW-3257
Bulletin has no description...
CVE-2022-3257
Mattermost version 7.1.x and earlier fails to sufficiently process a specifically crafted GIF file when it is uploaded while drafting a post, which allows authenticated users to cause resource exhaustion while processing the file, resulting in server-side Denial of Service...
CVE-2009-3257
vtiger CRM before 5.1.0 allows remote authenticated users to bypass the permissions on the 1 Account Billing Address and 2 Shipping Address fields in a profile by creating a Sales Order SO associated with that profile...
CVE-2025-3257
A vulnerability classified as problematic has been found in xujiangfei admintwo 1.0. This affects an unknown part of the file /user/updateSet. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may...
CVE-2025-3257
A vulnerability classified as problematic has been found in xujiangfei admintwo 1.0. This affects an unknown part of the file /user/updateSet. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may...
CVE-2025-3257
creationtimestamp| type| source ---|---|--- 2025-04-04 16:36:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10483 2025-04-04 20:32:00+00:00| seen| https://t.me/cvedetector/22147...
CVE-2025-3257
CVE-2025-3257 affects xujiangfei admintwo 1.0. The issue is a cross-site request forgery in an unknown portion of the /user/updateSet file. Exploitation is possible remotely, and the exploit has been disclosed publicly. Several sources (Red Hat, CVE listings, and vulnerability trackers) corrobora...
CVE-2025-3257 xujiangfei admintwo updateSet cross-site request forgery
A vulnerability classified as problematic has been found in xujiangfei admintwo 1.0. This affects an unknown part of the file /user/updateSet. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may...
CVE-2024-3257
CVE-2024-3257 affects the SourceCodester Internship Portal Management System 1.0. The vulnerability is an SQL injection in the file admin/edit_activity_query.php , triggered by manipulating the arguments title , description , start , and end . The issue can be exploited remotely and is publicly d...
openSUSE: Security Advisory for pipewire (SUSE-SU-2023:3257-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
BELL-CVE-2017-3257 CVE-2017-3257 does not affect BellSoft software
Bulletin has no description...
K98750200: Server component of Oracle MySQL vulnerabilities CVE-2017-3243, CVE-2017-3244, CVE-2017-3257, CVE-2017-3265, and CVE-2017-3273
Security Advisory Description CVE-2017-3243 Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Charsets. Supported versions that are affected are 5.5.53 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple...
Mattermost Server 7.1.0 DoS (MMSA-2022-00115)
The version of Mattermost Server running on the remote host is 7.1.0. It is, therefore, affected by a denial of service DoS vulnerability. An authenticated, remote attacker can upload a specially crafted GIF file when creating a post which causes resource exhaustion on the host. Note that Nessus...
CVE-2022-3257
creationtimestamp| type| source ---|---|--- 2022-09-23 18:19:40+00:00| seen| https://t.me/cibsecurity/50347...
CVE-2022-3257
Mattermost 7.1.x and earlier is affected by a Denial of Service vulnerability when uploading a specifically crafted GIF during post drafting. The issue arises from insufficient processing of the GIF, allowing an authenticated user to cause resource exhaustion on the server (availability impact). ...
CVE-2022-3257 Server-side Denial of Service while processing a specifically crafted GIF file
Mattermost version 7.1.x and earlier fails to sufficiently process a specifically crafted GIF file when it is uploaded while drafting a post, which allows authenticated users to cause resource exhaustion while processing the file, resulting in server-side Denial of Service...