86 matches found
CVE-2026-3380
A vulnerability was found in Tenda F453 1.0.0.3. This issue affects the function frmL7ImForm of the file /goform/L7Im. The manipulation of the argument page results in buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used...
CVE-2026-3380
CVE-2026-3380 affects the Tenda F453 firmware 1.0.0.3. The vulnerability is in the function frmL7ImForm of the file /goform/L7Im , where manipulating the page argument causes a buffer overflow. It is exploitable remotely, and public exploit information exists. Several sources corroborate the issu...
CVE-2026-3380
creationtimestamp| type| source ---|---|--- 2026-02-28 07:07:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116146990737576376 2026-03-01 04:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116152036747115760 2026-03-01 04:30:30+00:00| seen|...
PT-2026-22469
Name of the Vulnerable Software and Affected Versions Tenda F453 version 1.0.0.3 Description A buffer overflow issue exists in the frmL7ImForm function of the /goform/L7Im file. The issue is triggered by manipulating the page argument. The exploit for this issue has been made public and could be...
CVE-2013-3380
The administrative web interface in the Access Control Server in Cisco Secure Access Control System ACS does not properly restrict the report view page, which allows remote authenticated users to obtain sensitive information via a direct request, aka Bug ID CSCue79279...
CVE-2010-3380
The 1 init.d/slurm and 2 init.d/slurmdbd scripts in SLURM before 2.1.14 place the . dot directory in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...
CVE-2025-3380
creationtimestamp| type| source ---|---|--- 2025-04-07 19:45:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10777 2025-04-07 22:55:56+00:00| seen| https://t.me/cvedetector/22352...
CVE-2025-3380 PCMan FTP Server FEAT Command buffer overflow
A vulnerability, which was classified as critical, has been found in PCMan FTP Server 2.0.7. Affected by this issue is some unknown functionality of the component FEAT Command Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed t...
CVE-2025-3380
CVE-2025-3380 affects PCMan FTP Server 2.0.7, specifically the FEAT Command Handler. The vulnerability is a buffer overflow in an unknown function of FEAT, with remote attack potential and public exploit disclosure. Multiple connected sources corroborate that exploitation could impact confidentia...
openSUSE: Security Advisory for qt6 (SUSE-SU-2023:3380-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
WordPress Customizer Export/Import Plugin < 0.9.5 PHP Object Injection Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wpbeaverbuilder:customizerexport%2fimport"; if description...
CVE-2023-3380
WAVLINK WN579X3 routers are affected by a Remote Command Execution vulnerability in the Ping Test component (/cgi-bin/adm.cgi) via the pingIp parameter. The issue allows unauthenticated remote command injection and can enable an attacker to compromise the router and potentially intercept traffic....
CVE-2022-3380
The CVE-2022-3380 entry concerns the WordPress plugin Customizer Export/Import, affected versions prior to 0.9.5. The vulnerability arises from unserializing the content of an imported file, enabling PHP object injection if an admin imports a malicious file and a gadget chain is present on the bl...
CVE-2022-3380 Customizer Export/Import < 0.9.5 - Admin+ PHP Objection Injection
The Customizer Export/Import WordPress plugin before 0.9.5 unserializes the content of an imported file, which could lead to PHP object injection issues when an admin imports intentionally or not a malicious file and a suitable gadget chain is present on the blog...
CVE-2022-3380 Customizer Export/Import < 0.9.5 - Admin+ PHP Objection Injection
The Customizer Export/Import WordPress plugin before 0.9.5 unserializes the content of an imported file, which could lead to PHP object injection issues when an admin imports intentionally or not a malicious file and a suitable gadget chain is present on the blog...
CVE-2021-3380
creationtimestamp| type| source ---|---|--- 2021-11-10 20:36:44+00:00| seen| https://t.me/cibsecurity/32193...
CVE-2021-3380
CVE-2021-3380 is an IDOR vulnerability in the ICREM H8 SSRMS Print Invoice functionality. The root cause is insecure direct object reference, allowing disclosure of sensitive information. The description is confirmed across multiple sources (NVD, RH, CVE list, CNNVD). No concrete patch/version re...
RHEL 8 : kpatch-patch (RHSA-2021:3380)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:3380 advisory. This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel...
SUSE: Security Advisory (SUSE-SU-2020:3380-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLED15 / SLES15 Security Update : wpa_supplicant (SUSE-SU-2020:3380-1) (KRACK)
This update for wpasupplicant fixes the following issues : Security issue fixed : CVE-2019-16275: Fixed an AP mode PMF disconnection protection bypass bsc1150934. Non-security issues fixed : Enable SAE support jscSLE-14992. Limit P2PDEVICE name to appropriate ifname size. Fix wicked wlan bsc11569...