57 matches found
ROOT-APP-NPM-GHSA-H3JJ-5F3V-3685 GHSA-h3jj-5f3v-3685 in n8n - Patched by Root
Root has patched GHSA-h3jj-5f3v-3685 in the n8n package for Root:npm. Multiple fixed versions available...
LGPwn
LGPwn LG Root 利用 作者： [email protected] 特别鸣谢： Juggie，感谢他指出更新包中一个奇怪的二进制文件（spritebud），这引导我发现了这个漏洞。 主题： Sprite Software 的备份软件中的竞态条件，该软件由 OEM 预装于 LG Android 设备上。 CVE ID： CVE-2013-3685 影响： 本地可利用的漏洞，只需极少的设备用户交互即可导致以 root 用户身份执行代码。在特定情况下，可以在设备用户不知情的情况下利用此漏洞。 产品： "Backup" "spritebud" 厂商： Sprite...
MINI-3732-3685-RR3C
Bulletin has no description...
Linux Distros Unpatched Vulnerability : CVE-2012-3685
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application...
CVE-2020-3685
Pointer variable which is freed is not cleared can result in memory corruption and leads to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdrago...
CVE-2011-3685
Tembria Server Monitor before 6.0.5 Build 2252 uses a substitution cipher to encrypt application credentials, which allows local users to obtain sensitive information by leveraging read access to 1 authentication.dat or 2 XML files in the Exports directory...
CVE-2025-3685
creationtimestamp| type| source ---|---|--- 2025-04-16 11:57:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12018 2025-04-16 13:31:17+00:00| seen| https://t.me/cvedetector/23069...
CVE-2025-3685
A vulnerability classified as critical has been found in code-projects Patient Record Management System 1.0. Affected is an unknown function of the file /editfpatient.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has bee...
openSUSE: Security Advisory for the Linux Kernel (Live Patch 44 for SLE 15 SP3) (SUSE-SU-2024:3685-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CGA-3685-HGJF-4WJG
Bulletin has no description...
CVE-2024-3685
A vulnerability, which was classified as critical, was found in DedeCMS 5.7.112-UTF8. Affected is an unknown function of the file stepselectmain.php. The manipulation of the argument ids leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...
CVE-2024-3685 DedeCMS stepselect_main.php sql injection
A vulnerability, which was classified as critical, was found in DedeCMS 5.7.112-UTF8. Affected is an unknown function of the file stepselectmain.php. The manipulation of the argument ids leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...
CVE-2019-3685
creationtimestamp| type| source ---|---|--- 2024-02-04 08:37:04+00:00| seen| https://t.me/ctinow/178722...
Debian: Security Advisory (DLA-3685-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-3685
A vulnerability was found in Nesote Inout Search Engine AI Edition 1.1. It has been classified as problematic. This affects an unknown part of the file /index.php. The manipulation of the argument page leads to cross site scripting. It is possible to initiate the attack remotely. The associated...
CVE-2023-3685
CVE-2023-3685 affects Nesote Inout Search Engine AI Edition 1.1. The vulnerability is an XSS in an unknown part of /index.php, caused by manipulation of the page parameter, enabling a remote attack. Exploitation status is not detailed in the provided documents; several sources corroborate the iss...
Hitachi Energy MicroSCADA System Data Manager SDM600
1. EXECUTIVE SUMMARY CVSS v3 9.9 ATTENTION: Exploitable remotely/low attack complexity Vendor: Hitachi Energy Equipment: MicroSCADA System Data Manager SDM600 Vulnerabilities: Unrestricted Upload of File with Dangerous Type, Improper Authorization, Improper Resource Shutdown or Release, Improper...
CVE-2022-3685 SDM600 software privilege level
A vulnerability exists in the SDM600 software. The software operates at a privilege level that is higher than the minimum level required. An attacker who successfully exploits this vulnerability can escalate privileges. This issue affects: All SDM600 versions prior to version 1.3.0. List of CPEs:...
CVE-2022-3685
CVE-2022-3685 affects Hitachi Energy SDM600 software prior to 1.3.0. The root cause is operation at a privilege level higher than required, enabling privilege escalation. Affected versions include SDM600 up to 1.3.0 (various 1.2.x builds and 1.0/1.1). Remediation provided in the sources is to upg...