DEBIAN-CVE-2026-3706

A vulnerability was determined in mkj Dropbear up to 2025.89. Impacted is the function unpackneg of the file src/curve25519.c of the component S Range Check. This manipulation causes improper verification of cryptographic signature. The attack can be initiated remotely. The attack is considered t...

CVE-2026-3706

A vulnerability was determined in mkj Dropbear up to 2025.89. Impacted is the function unpackneg of the file src/curve25519.c of the component S Range Check. This manipulation causes improper verification of cryptographic signature. The attack can be initiated remotely. The attack is considered t...

CVE-2026-3706 mkj Dropbear S Range Check curve25519.c unpackneg signature verification

A vulnerability was determined in mkj Dropbear up to 2025.89. Impacted is the function unpackneg of the file src/curve25519.c of the component S Range Check. This manipulation causes improper verification of cryptographic signature. The attack can be initiated remotely. The attack is considered t...

CVE-2026-3706

creationtimestamp| type| source ---|---|--- 2026-03-08 04:16:31+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3706...

Linux Distros Unpatched Vulnerability : CVE-2026-3706

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was determined in mkj Dropbear up to 2025.89. Impacted is the function unpackneg of the file src/curve25519.c of the component S Range Check. Th...

MiracleLinux 8 : java-17-openjdk-17.0.4.0.8-2.el8 (AXSA:2022-3706:04)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-3706:04 advisory. OpenJDK: integer truncation issue in Xalan-J JAXP, 8285407 CVE-2022-34169 OpenJDK: class compilation issue Hotspot, 8281859 CVE-2022-21540 OpenJDK:...

Linux Distros Unpatched Vulnerability : CVE-2012-3706

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit, as used in Apple iTunes before 10.7, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application...

Linux Distros Unpatched Vulnerability : CVE-2022-3706

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper authorization in GitLab CE/EE affecting all versions from 7.14 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows a user retrying a...

CVE-2023-3706

The ActivityPub WordPress plugin before 1.0.0 does not ensure that post titles to be displayed are public and belong to the plugin, allowing any authenticated user, such as subscriber to retrieve the title of arbitrary post such as draft and private via an IDOR vector...

CVE-2021-3706

adminlte is vulnerable to Sensitive Cookie Without 'HttpOnly' Flag...

CVE-2011-3706

ATutor 2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by users/toolsettings.inc.php and certain other files...

CVE-2025-3706

The eHRMS from 104 Corporation has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks...

CVE-2025-3706

creationtimestamp| type| source ---|---|--- 2025-04-28 03:10:47+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13652 2025-04-28 03:45:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lntu45ozdh2y 2025-04-28 07:22:20+00:00| seen| https://t.me/cvedetector/23880...

CVE-2025-3706 104 Corporation eHRMS - Reflected Cross-Site Scripting

The eHRMS from 104 Corporation has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks...

Linux Distros Unpatched Vulnerability : CVE-2014-3706

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ovirt-engine, as used in Red Hat MRG 3, allows man-in-the-middle attackers to spoof servers by leveraging failure to verify key attributes in vdsm X.509...

Debian dla-3706 : netatalk - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3706 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3706-1 [email protected] https://www.debian.org/lts/security/...

openSUSE: Security Advisory for the Linux Kernel (Live Patch 7 for SLE 15 SP5) (SUSE-SU-2024:3706-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-3706 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in OpenGnsys

Information exposure vulnerability in OpenGnsys affecting version 1.1.1d Espeto. This vulnerability allows an attacker to view a php backup file controlaccess.php-LAST where database credentials are stored...

Malicious code in wlwz-2312-3706 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 277f6cbcf742c600ba5c4d0ef9f84954cf4c36df62fae1427bba408fb6a09366 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-509 Malicious code in wlwz-2312-3706 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 277f6cbcf742c600ba5c4d0ef9f84954cf4c36df62fae1427bba408fb6a09366 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...