CVE-2026-3407

creationtimestamp| type| source ---|---|--- 2026-03-02 03:58:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg2egamv3g2u...

CVE-2026-3407 YosysHQ yosys BLIF File rtlil.h set heap-based overflow

A vulnerability was determined in YosysHQ yosys up to 0.62. This affects the function Yosys::RTLIL::Const::set of the file kernel/rtlil.h of the component BLIF File Parser. This manipulation causes heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has...

Linux Distros Unpatched Vulnerability : CVE-2025-3407

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Nothings stb up to f056911. It has been declared as critical. Affected by this vulnerability is the function...

CVE-2024-3407

The WP Prayer WordPress plugin through 2.0.9 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

CVE-2023-3407

The Subscribe2 plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 10.40. This is due to missing or incorrect nonce validation when sending test emails. This makes it possible for unauthenticated attackers to send test emails with custom content to...

CVE-2013-3407

The web interface in Cisco Server Provisioner 6.4.0 Patch 5-1301292331 and earlier does not require authentication for unspecified pages, which allows remote attackers to obtain sensitive information via a direct request, aka Bug ID CSCug65664...

CVE-2012-3407

plow has local buffer overflow vulnerability...

CVE-2025-3407

A flaw was found in stb. This vulnerability allows an out-of-bounds read via manipulation of the hcount or vcount arguments. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and...

CVE-2025-3407

creationtimestamp| type| source ---|---|--- 2025-04-08 05:17:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmbpwo2pgz2c 2025-04-08 07:01:28+00:00| seen| Telegram/GhCcQwP6QnMjxsfMJ8qz6Pxy9JaPQ-Bi2BXFCcmddlxOyKI 2025-04-08 08:08:02+00:00| seen| https://t.me/cvedetector/22385...

CVE-2025-3407

A vulnerability was found in Nothings stb up to f056911. It has been declared as critical. Affected by this vulnerability is the function stbhwbuildtilesetfromimage. The manipulation of the argument hcount/vcount leads to out-of-bounds read. The attack can be launched remotely. This product takes...

Oracle Linux 9 : freetype (ELSA-2025-3407)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-3407 advisory. - Fix for CVE-2025-27363 out-of-bound write vulnerability Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Linux Distros Unpatched Vulnerability : CVE-2015-3407

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Module::Signature before 0.74 allows remote attackers to bypass signature verification for files via a signature file that does not list the files. CVE-2015-340...

RHEL 7 : perl-module-signature (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - perl-Module-Signature: unsigned files interpreted as signed in some circumstances CVE-2015-3406 -...

CVE-2024-3407 WP Prayer <= 2.0.9 - Arbitrary Prayer Deletion via CSRF

The WP Prayer WordPress plugin through 2.0.9 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

CVE-2012-3407

creationtimestamp| type| source ---|---|--- 2024-02-26 13:11:17+00:00| seen| https://t.me/ctinow/193296...

MAL-2024-483 Malicious code in wlwz-2312-3407 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 289b4cc309df0a8780d6a52907756eda6d717dd2e981b91da12a7ca30eea2148 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-3407 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 289b4cc309df0a8780d6a52907756eda6d717dd2e981b91da12a7ca30eea2148 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-3407

creationtimestamp| type| source ---|---|--- 2023-09-01 20:15:22+00:00| seen| https://t.me/cibsecurity/69671...

CVE-2022-3407

The CVE-2022-3407 entry describes a bug in Motorola smartphones where, when USB-tethered to a host PC and sharing mobile data, originating a call on the device can cause the modem to reset, resulting in a failed call and potentially preventing emergency dialing. The issue is triggered in scenario...

CVE-2023-3407

CVE-2023-3407 affects the Subscribe2 WordPress plugin (versions up to 10.40). The issue is CSRF due to missing or incorrect nonce validation when sending test emails, enabling unauthenticated attackers to trigger test emails with custom content by tricking an administrator into performing an acti...