GO-2025-3409 vulnerabilities

Vulnerabilities for packages: zot...

dbgpt-app (0.8.0rc1), dbgpt-client (>=0.7.0rc0, <=0.8.2) +2 more potentially affected by CVE-2026-3409 via dbgpt (0.8.2)

dbgpt PYPI version 0.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on dbgpt and may be impacted: - dbgpt-app 0.8.0rc1 - dbgpt-client =0.7.0rc0, =0.7.0rc0, =0.8.0rc1, =0.8.2 Source cves: CVE-2026-3409 Source advisory: SNYK:PYTHON-DBGPT-15426547...

CVE-2026-3409

creationtimestamp| type| source ---|---|--- 2026-03-02 04:19:34+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116157656223119395 2026-03-02 08:01:03+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mg2ryism3p2n 2026-03-02 08:09:45+00:00| seen|...

EUVD-2026-3409

Multiple reflected cross-site scripting xss vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger these vulnerabilities.This...

Linux Distros Unpatched Vulnerability : CVE-2025-3409

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability classified as critical has been found in Nothings stb up to f056911. This affects the function stbincludestring. The manipulation of the argumen...

CVE-2025-20685

The MediaTek wlan AP driver is vulnerable to an out of bounds write caused by an incorrect bounds check. This flaw could allow a remote attacker to achieve code execution from a proximal or adjacent network without requiring additional privileges or user interaction. While the documents do not sp...

CVE-2025-3409

A flaw was found in stb. This vulnerability allows remote attackers to cause a stack-based buffer overflow via manipulation of the pathtoincludes argument. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security...

CVE-2025-3409

A vulnerability classified as critical has been found in Nothings stb up to f056911. This affects the function stbincludestring. The manipulation of the argument pathtoincludes leads to stack-based buffer overflow. It is possible to initiate the attack remotely. This product does not use...

UBUNTU-CVE-2025-3409

A vulnerability classified as critical has been found in Nothings stb up to f056911. This affects the function stbincludestring. The manipulation of the argument pathtoincludes leads to stack-based buffer overflow. It is possible to initiate the attack remotely. This product does not use...

CVE-2025-3409

creationtimestamp| type| source ---|---|--- 2025-04-08 04:46:34+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10844 2025-04-08 07:01:28+00:00| seen| Telegram/GhCcQwP6QnMjxsfMJ8qz6Pxy9JaPQ-Bi2BXFCcmddlxOyKI 2025-04-08 09:48:31+00:00| seen| https://t.me/cvedetector/22398...

CVE-2025-3409 Nothings stb stb_include_string stack-based overflow

A vulnerability classified as critical has been found in Nothings stb up to f056911. This affects the function stbincludestring. The manipulation of the argument pathtoincludes leads to stack-based buffer overflow. It is possible to initiate the attack remotely. This product does not use...

Linux Distros Unpatched Vulnerability : CVE-2015-3409

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Untrusted search path vulnerability in Module::Signature before 0.75 allows local users to gain privileges via a Trojan horse module under the current working...

Linux Distros Unpatched Vulnerability : CVE-2010-3409

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-1824. Reason: This candidate is a duplicate of CVE-2010-1824. Notes: All CVE users shoul...

CVE-2007-3409

creationtimestamp| type| source ---|---|--- 2025-01-17 14:56:46+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2134...

CVE-2023-3409 Bricks <= 1.8.1 - Cross-Site Request Forgery via reset_settings

The Bricks theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.8.1. This is due to missing or incorrect nonce validation on the 'resetsettings' function. This makes it possible for unauthenticated attackers to reset the theme's settings via a forged...

RHCOS 4 : OpenShift Container Platform 4.12.20 (RHSA-2023:3409)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3409 advisory. - golang: html/template: improper handling of JavaScript whitespace CVE-2023-24540 Note that Nessus has not tested for this issue but has...

BELL-CVE-2021-3409 CVE-2021-3409 does not affect BellSoft software

Bulletin has no description...

SUSE: Security Advisory (SUSE-SU-2023:0761-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-3362-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-264-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...