MiracleLinux 7 : kernel-3.10.0-327.el7 (AXSA:2015-948:05)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2015-948:05 advisory. The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operating...

Linux Distros Unpatched Vulnerability : CVE-2025-3647

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was discovered in Moodle. Additional checks were required to ensure that users can only access cohort data they are authorized to retrieve. CVE-2025-3647...

TencentOS Server 4: redis (TSSA-2024:0037)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0037 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

CVE-2013-3647

The WebView class in the Cybozu Live application before 2.0.1 for Android allows attackers to execute arbitrary JavaScript code, and obtain sensitive information, via a crafted application that places this code into a local file associated with a file: URL. NOTE: this vulnerability exists because...

CVE-2025-3647

A flaw was discovered in Moodle. Additional checks were required to ensure that users can only access cohort data they are authorized to retrieve...

CVE-2025-3647

creationtimestamp| type| source ---|---|--- 2025-04-25 15:07:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13449 2025-04-25 17:19:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnnq76czed2r 2025-04-25 19:11:18+00:00| seen| https://t.me/cvedetector/23771...

CVE-2025-3647

Technical details about CVE-2025-3647 are not publicly available in the provided connected documents. The Moodle cohort data access flaw is described at a high level; monitor vendor advisories and updates for impact and mitigations.

CVE-2025-3647 Moodle: idor when accessing the cohorts report

A flaw was discovered in Moodle. Additional checks were required to ensure that users can only access cohort data they are authorized to retrieve...

Linux Distros Unpatched Vulnerability : CVE-2014-3647

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - arch/x86/kvm/emulate.c in the KVM subsystem in the Linux kernel through 3.17.2 does not properly perform RIP changes, which allows guest OS users to cause a...

openSUSE: Security Advisory for the Linux Kernel (Live Patch 11 for SLE 15 SP4) (SUSE-SU-2023:3647-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-3647

creationtimestamp| type| source ---|---|--- 2024-01-16 17:27:25+00:00| seen| https://t.me/ctinow/168912 2024-01-22 23:16:58+00:00| seen| https://t.me/ctinow/171531 2024-02-06 10:41:45+00:00| seen| https://t.me/ctinow/179887...

CVE-2023-3647

CVE-2023-3647 affects the IURNY by INDIGITALL WordPress plugin (pre-3.2.3). The issue is a Stored XSS due to incomplete sanitisation/escaping of certain settings, enabling high-privilege users (e.g., admins) to inject scripts even when unfiltered_html is disabled (such as in multisite). Impact ap...

Debian dla-3647 : libtrapperkeeper-webserver-jetty9-clojure - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3647 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3647-1 [email protected] https://www.debian.org/lts/security/...

Debian: Security Advisory (DSA-2345-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-3647

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none...

K13145361: Linux kernel KVM subsystem vulnerability CVE-2014-3647

Security Advisory Description arch/x86/kvm/emulate.c in the KVM subsystem in the Linux kernel through 3.17.2 does not properly perform RIP changes, which allows guest OS users to cause a denial of service guest OS crash via a crafted application. CVE-2014-3647 Impact A local user with Advanced...

SUSE CVE-2011-3647

The JSSubScriptLoader in Mozilla Firefox before 3.6.24 and Thunderbird before 3.1.6 does not properly handle XPCNativeWrappers during calls to the loadSubScript method in an add-on, which makes it easier for remote attackers to gain privileges via a crafted web site that leverages certain...

SUSE CVE-2014-3647

arch/x86/kvm/emulate.c in the KVM subsystem in the Linux kernel through 3.17.2 does not properly perform RIP changes, which allows guest OS users to cause a denial of service guest OS crash via a crafted application...

SUSE SLES15 / openSUSE 15 Security Update : redis (SUSE-SU-2022:4169-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:4169-1 advisory. - CVE-2022-3647: Fixed crash in sigsegvHandler debug function bsc1204633. Tenable has extracted the preceding description bloc...

SUSE: Security Advisory (SUSE-SU-2022:4168-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...