108 matches found
@abhishekbarve/react-components (>=1.0.1 <=1.0.8), @adpush/start (>=1.87.15 <=1.87.16) +148 more potentially affected by unknown CVE via @tanstack/router-generator (>=1.10.0 <=1.166.42)
@tanstack/router-generator NPM version =1.10.0, =1.0.1, =1.87.15, =0.1.0, =0.0.2-canary.11, =1.0.0, =0.0.1, =0.5.2, =0.1.1, =0.0.4, =0.1.0, =1.0.0, =0.2.0, =0.2.0, =0.2.12 - @dauphaihau/react-template =1.0.0 and more Source cves: unknown CVE Source advisory: OSV:MAL-2026-3476...
MINI-C542-F837-3476
Bulletin has no description...
CVE-2026-3476
creationtimestamp| type| source ---|---|--- 2026-03-16 17:22:42+00:00| seen| https://mastodon.social/ap/users/115755483699003887/statuses/116240003901832432...
CVE-2025-20692
In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418040; Issue ID: MSV-3476...
CVE-2024-3476
The Side Menu Lite WordPress plugin before 4.2.1 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting buttons via CSRF attacks...
CVE-2012-3476
Multiple cross-site scripting XSS vulnerabilities in 1 application/views/admin/layout.php and 2 themes/default/views/header.php in the Ushahidi Platform before 2.5 allow remote authenticated users to inject arbitrary web script or HTML via vectors related to a site name...
CVE-2025-3476
Incorrect Authorization vulnerability in OpenText™ Operations Bridge Manager. The vulnerability could allows privilege escalation by authenticated users.This issue affects Operations Bridge Manager: 2023.05, 23.4, 24.2, 24.4...
CVE-2025-3476
creationtimestamp| type| source ---|---|--- 2025-05-07 19:22:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15395 2025-05-07 19:54:03+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114468299910999808 2025-05-07 21:26:00+00:00| seen|...
CVE-2025-3476
Incorrect Authorization vulnerability in OpenText™ Operations Bridge Manager. The vulnerability could allows privilege escalation by authenticated users.This issue affects Operations Bridge Manager: 2023.05, 23.4, 24.2, 24.4...
CVE-2025-3476
CVE-2025-3476 targets OpenText Operations Bridge Manager with an Incorrect Authorization flaw that could allow privilege escalation by authenticated users. Affected versions include 2023.05, 23.4, 24.2, and 24.4. Root cause and impact: improper authorization controls enable elevated access for an...
CVE-2025-3476
Incorrect Authorization vulnerability in OpenText™ Operations Bridge Manager. The vulnerability could allows privilege escalation by authenticated users.This issue affects Operations Bridge Manager: 2023.05, 23.4, 24.2, 24.4...
Linux Distros Unpatched Vulnerability : CVE-2021-3476
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in OpenEXR's B44 uncompression functionality in versions before 3.0.0-beta. An attacker who is able to submit a crafted file to OpenEXR could...
CGA-3476-4C5V-XQX4
Bulletin has no description...
CVE-2024-3476 Side Menu Lite < 4.2.1 - Menu Deletion via CSRF
The Side Menu Lite WordPress plugin before 4.2.1 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting buttons via CSRF attacks...
WordPress Side Menu Lite Plugin < 4.2.1 is vulnerable to Cross Site Request Forgery (CSRF)
Software Side Menu Lite Type Plugin Vulnerable versions 4.2.1 Fixed in 4.2.1 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-3476 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 570b701cebb0 Credits Bob Matyas Required...
Rocky Linux 8 : squid:4 (RLSA-2019:3476)
The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2019:3476 advisory. - The cachemgr.cgi web module of Squid through 4.7 has XSS via the username or auth parameter. CVE-2019-13345 Note that Nessus has not tested for this issue but...
Oracle Linux 8 : squid:4 (ELSA-2019-3476)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-3476 advisory. - The cachemgr.cgi web module of Squid through 4.7 has XSS via the username or auth parameter. CVE-2019-13345 Note that Nessus has not tested for this issue but...
CVE-2023-3476
creationtimestamp| type| source ---|---|--- 2023-06-30 12:15:17+00:00| seen| https://t.me/cibsecurity/65783...
CVE-2023-3476
CVE-2023-3476 affects SimplePHPscripts GuestBook Script 2.2, specifically the preview.php component of the URL Parameter Handler. The issue is described as a cross-site scripting vulnerability that can be triggered remotely via the affected URL handling logic. The root cause centers on improper h...
Debian dla-3236 : libopenexr-dev - security update
The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3236 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3236-1 [email protected]...