Amazon Linux 2 : rclone, --advisory ALAS2-2026-3309 (ALAS-2026-3309)

The version of rclone installed on the remote host is prior to 1.55.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3309 advisory. Actions which insert URLs into the content attribute of HTML meta tags are not escaped. This can allow XSS if the meta tag...

CVE-2026-3309

creationtimestamp| type| source ---|---|--- 2026-04-04 12:23:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mio7zi75se2z 2026-04-11 00:30:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mj6lgxzsza2m...

CVE-2021-3309

packages/wekan-ldap/server/ldap.js in Wekan before 4.87 can process connections even though they are not authorized by the Certification Authority trust store,...

CVE-2025-3309

A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/campsdetails.php. The manipulation of the argument hospital leads to sql injection. The attack may be launched...

CVE-2025-3309

creationtimestamp| type| source ---|---|--- 2025-04-06 06:38:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10630 2025-04-06 08:00:33+00:00| published-proof-of-concept| Telegram/IbA9X09J1CppMWO1fGsDOe1by6gSQipns8xXYjrvhxBpw 2025-04-06 09:12:37+00:00| seen|...

CVE-2025-3309

CVE-2025-3309 affects code-projects Blood Bank Management System 1.0. The /admin/campsdetails.php functionality is vulnerable to SQL injection via the hospital parameter. The issue is exploitable remotely and a public exploit is available. Root cause: improper handling/manipulation of the hospita...

CVE-2025-3309 code-projects Blood Bank Management System campsdetails.php sql injection

A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/campsdetails.php. The manipulation of the argument hospital leads to sql injection. The attack may be launched...

CVE-2019-3309

creationtimestamp| type| source ---|---|--- 2025-01-16 23:15:22+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfvfvxhl5m2h 2025-01-16 23:34:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lfvgy53drk25...

CVE-2019-3309

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is mistakenly published by the other party...

UBUNTU-CVE-2019-3309

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is mistakenly published by the other party...

openSUSE: Security Advisory for chromium (openSUSE-SU-2022:10138-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHSA-2019:3309

creationtimestamp| type| source ---|---|--- 2024-02-27 08:46:43+00:00| seen| https://t.me/ctinow/194118...

CVE-2023-3309

creationtimestamp| type| source ---|---|--- 2023-06-18 17:35:32+00:00| seen| https://t.me/cibsecurity/65323...

CVE-2023-3309

A vulnerability classified as problematic was found in SourceCodester Resort Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file ?page=rooms of the component Manage Room Page. The manipulation of the argument Cottage Number leads to cross site scripting...

CVE-2023-3309

CVE-2023-3309 affects SourceCodester Resort Reservation System 1.0 with a cross-site scripting flaw in the Manage Room Page (?page=rooms). The vulnerability arises from manipulating the Cottage Number argument, enabling remote exploitation. Multiple connected records confirm the issue; a PoC is i...

CVE-2023-3309 SourceCodester Resort Reservation System Manage Room Page ?page=rooms cross site scripting

A vulnerability classified as problematic was found in SourceCodester Resort Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file ?page=rooms of the component Manage Room Page. The manipulation of the argument Cottage Number leads to cross site scripting...

Debian dla-3309 : graphite-web - security update

The remote Debian 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3309 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3309-1 [email protected]...

MariaDB 5.5.0 < 5.5.55 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 5.5.55. It is, therefore, affected by multiple vulnerabilities as referenced in the 5.5.55 advisory. - Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DDL. Supported versions that are affected are...

CVE-2022-3309

Use after free in assistant in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via specific UI gestures. Chromium security severity: Medium...

CVE-2022-3309

Use after free in assistant in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via specific UI gestures. Chromium security severity: Medium...