EUVD-2026-3370

An XML External Entity XXE vulnerability in opensagres XDocReport v0.9.2 to v2.0.3 allows attackers to execute arbitrary code via uploading a crafted .docx file...

MiracleLinux 3 : firefox-3.0.15-3.1AXS3 (AXSA:2009-419:04)

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2009-419:04 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. NSPR provides platform independence fo...

CVE-2021-3370

DouPHP v1.6 was discovered to contain a cross-site scripting XSS vulnerability via /admin/cloud.php...

CVE-2013-3370

Request Tracker RT 3.8.x before 3.8.17 and 4.0.x before 4.0.13 does not properly restrict access to private callback components, which allows remote attackers to have an unspecified impact via a direct request...

CVE-2025-3370

creationtimestamp| type| source ---|---|--- 2025-04-07 14:45:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10708 2025-04-07 17:04:06+00:00| seen| https://t.me/cvedetector/22303 2025-08-09 17:25:38+00:00| seen| MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea 2025-09-10...

CVE-2025-3370

A vulnerability classified as critical has been found in PHPGurukul Men Salon Management System 1.0. This affects an unknown part of the file /admin/admin-profile.php. The manipulation of the argument contactnumber leads to sql injection. It is possible to initiate the attack remotely. The exploi...

CVE-2025-3370 PHPGurukul Men Salon Management System admin-profile.php sql injection

A vulnerability classified as critical has been found in PHPGurukul Men Salon Management System 1.0. This affects an unknown part of the file /admin/admin-profile.php. The manipulation of the argument contactnumber leads to sql injection. It is possible to initiate the attack remotely. The exploi...

CVE-2025-3370 PHPGurukul Men Salon Management System admin-profile.php sql injection

A vulnerability classified as critical has been found in PHPGurukul Men Salon Management System 1.0. This affects an unknown part of the file /admin/admin-profile.php. The manipulation of the argument contactnumber leads to sql injection. It is possible to initiate the attack remotely. The exploi...

CVE-2025-3370

Summary: CVE-2025-3370 affects PHPGurukul Men Salon Management System 1.0, with a SQL injection in the /admin/admin-profile.php endpoint triggered by manipulating the contactnumber parameter. The vulnerability can be exploited remotely and the exploit has been disclosed publicly. Other parameters...

CVE-2024-3370

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Egebilgi Software Website Template allows SQL Injection. This issue affects Website Template: before 29.04.2024...

CVE-2024-3370

creationtimestamp| type| source ---|---|--- 2024-11-18 13:08:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113504110989877358 2024-11-18 14:52:43+00:00| seen| https://t.me/cvedetector/11334...

CVE-2024-3370

CVE-2024-3370 describes an SQL injection in Egebilgi Software Website Template due to improper neutralization of special elements in SQL commands. Affected software: Website Template prior to 29.04.2024. The provided documents indicate a high-severity impact (CVE data shows CVSS scores around 8.6...

CVE-2024-3370 SQLi in Egebilgi Software's Website Template

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Egebilgi Software Website Template allows SQL Injection. This issue affects Website Template: before 29.04.2024...

openSUSE: Security Advisory for chromium (openSUSE-SU-2022:10138-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-3370

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none...

SUSE CVE-2010-3370

unknown...

CVE-2022-3370

creationtimestamp| type| source ---|---|--- 2022-11-01 06:13:37+00:00| seen| https://t.me/cibsecurity/52344...

CVE-2022-3370

Use after free in Custom Elements in Google Chrome prior to 106.0.5249.91 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

UBUNTU-CVE-2022-3370

Use after free in Custom Elements in Google Chrome prior to 106.0.5249.91 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2022-3370

Use after free in Custom Elements in Google Chrome prior to 106.0.5249.91 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...