CVE-2022-3604

creationtimestamp| type| source ---|---|--- 2024-01-24 19:16:40+00:00| seen| https://t.me/ctinow/173010 2024-02-06 11:41:06+00:00| seen| https://t.me/ctinow/179924 2025-06-11 17:34:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18094...

CVE-2022-3604

The Contact Form Entries WordPress plugin before 1.3.0 does not validate data when its output in a CSV file, which could lead to CSV injection...

CVE-2022-3604

The Contact Form Entries WordPress plugin before 1.3.0 does not validate data when its output in a CSV file, which could lead to CSV injection...

CVE-2022-3604 Contact Form Entries < 1.3.0 - CSV Injection

The Contact Form Entries WordPress plugin before 1.3.0 does not validate data when its output in a CSV file, which could lead to CSV injection...

CVE-2022-3604

CVE-2022-3604 affects the WordPress plugin Contact Form Entries prior to version 1.3.0. The issue is that data exported to CSV is not validated, which can lead to CSV injection via the exported file. A PoC demonstrates crafting a CSV lead value like =5+5 that, when opened in a spreadsheet, can ex...

CVE-2023-3604

creationtimestamp| type| source ---|---|--- 2023-08-21 20:41:16+00:00| seen| https://t.me/cibsecurity/68900...

CVE-2023-3604

CVE-2023-3604 affects the Change WP Admin Login WordPress plugin prior to version 1.1.4. The vulnerability arises from disclosing the URL of the hidden login page when a crafted URL is accessed, bypassing the plugin’s protection mechanism. Impact, as stated in multiple sources, is that an unauthe...

WordPress Change wp-admin login Plugin < 1.1.4 is vulnerable to Bypass Vulnerability

Software Change wp-admin login Type Plugin Vulnerable versions 1.1.4 Fixed in 1.1.4 OWASP Top 10 A5: Security Misconfiguration Classification Bypass Vulnerability CVE CVE-2023-3604 Patch priority Medium CVSS severity Medium 5.3 Developer Claim ownership PSID f402f5411a8e Credits Muhamad Arsyad...

Out-of-bounds

LibTIFF 4.4.0 has an out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c:3604, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit cfbb883b...

CVE-2017-3604 affecting package libdb for versions less than 5.3.28-7

CVE-2017-3604 affecting package libdb for versions less than 5.3.28-7. A patched version of the package is available...

Mageia: Security Advisory (MGASA-2014-0551)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for qemu (openSUSE-SU-2021:3604-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2017-3604 affecting package libdb 5.3.28-6

CVE-2017-3604 affecting package libdb 5.3.28-6. A patched version of the package is available...

CVE-2021-3604

creationtimestamp| type| source ---|---|--- 2021-06-18 18:12:04+00:00| seen| https://t.me/cibsecurity/25554...

CVE-2021-3604

Secure 8 Evalos does not validate user input data correctly, allowing a remote attacker to perform a Blind SQL Injection. An attacker could exploit this vulnerability in order to extract information of users and administrator accounts stored in the database...

CVE-2021-3604

CVE-2021-3604 affects Primion Secure 8 (Evalos); root cause is improper validation of user input data that enables a blind SQL injection. This allows a remote attacker to extract information from the database, including user and administrator accounts. The provided documents do not specify a reme...

Cisco Webex Meetings Arbitrary Code Execution Vulnerabilities (cisco-sa-webex-nbr-NOS6FQ24) (deprecated)

This plugin has been deprecated as it's a duplicate of cisco-sa-webex-nbr-NOS6FQ24.nasl plugin ID 142880 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2021/03/19. Deprecated by cisco-sa-webex-nbr-NOS6FQ24.nasl include'compat.inc'; if description scriptid142879; scriptversion"1.7";...

CVE-2020-3604

Cisco Webex Network Recording Player for Windows and Cisco Webex Player for Windows are affected by ARF/WRF parsing vulnerabilities (CVE-2020-3604). The issue stems from insufficient validation of Webex recording elements, enabling an attacker to execute arbitrary code when a user opens a malicio...

CVE-2019-3604

CVE-2019-3604 is a Cross-Site Request Forgery vulnerability in McAfee ePO (legacy) Cloud. The connected documents describe that unauthenticated users could perform unintended ePO actions by leveraging an authenticated user’s session, via unspecified vectors. The exact vulnerable component/version...

Trend Micro Control Manager sCloudService GetPassword SQL Injection (CVE-2018-3604)

An SQL injection vulnerability exists in the Trend Micro Control Manager. The vulnerability is due to improper validation of user-supplied input on SOAP sCloudService requests invoking the GetPassword method. Successful exploitation of the vulnerability could allow the attacker to execute arbitra...