PYSEC-2026-3708

Apache Airflow's Task SDK rebuilt a Callback object from serialized data by re-running its constructor, which imports the module named by the stored callback path. Because SyncCallback is itself an Airflow class it passes the default alloweddeserializationclasses allow-list, so tightening that...

ECHO-0ED0-3708-CDE9 Kernel vulnerabilities are irrelevant in container environments.

Bulletin has no description...

CVE-2026-3708

creationtimestamp| type| source ---|---|--- 2026-03-08 04:16:32+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3708...

EUVD-2026-3708

Malicious code in spellcheckpy PyPI...

EUVD-2021-26990

Malware in sbrugna...

CVE-2021-3708

D-Link router DSL-2750U with firmware vME1.16 or prior versions is vulnerable to OS command injection. An unauthenticated attacker on the local network may exploit this, with CVE-2021-3707, to execute any OS commands on the vulnerable device...

CVE-2009-3708

Stack-based buffer overflow in the Meta Content Optimizer in Konae Technologies Alleycode HTML Editor 2.21 allows user-assisted remote attackers to execute arbitrary code via a long value in a 1 description or 2 keyword META tag. NOTE: the provenance of this information is unknown; the details ar...

CVE-2025-3708

creationtimestamp| type| source ---|---|--- 2025-05-02 04:15:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14440 2025-05-02 06:00:38+00:00| seen| Telegram/iYh3KCKDOJhhtXUlLXzKQ0urfXGfuEgjBYvrs8SISUYckP4 2025-05-02 07:34:36+00:00| seen| https://t.me/cvedetector/24313 2025-05-02...

CVE-2025-3708

CVE-2025-3708 affects the Le-show medical practice management system from Le-yan. The connected documents describe a SQL injection vulnerability that allows unauthenticated remote attackers to read, modify, and delete database contents. CNNVD notes affected versions include V3.0.25 and earlier; o...

openSUSE: Security Advisory for the Linux Kernel (Live Patch 3 for SLE 15 SP6) (SUSE-SU-2024:3708-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-3708

A condition exists in lighttpd version prior to 1.4.51 whereby a remote attacker can craft an http request which could result in multiple outcomes: 1. cause lighttpd to access freed memory in which case the process lighttpd is running in could be terminated or other non-deterministic behavior cou...

openSUSE: Security Advisory for python39 (SUSE-SU-2023:3708-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MAL-2024-511 Malicious code in wlwz-2312-3708 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc6fc47a2dcce93df310ec5813c39993ce73a5e2949117a7a179b84f11700468 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-3708 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc6fc47a2dcce93df310ec5813c39993ce73a5e2949117a7a179b84f11700468 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Rocky Linux 8 : mariadb:10.3 (RLSA-2019:3708)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2019:3708 advisory. - Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: InnoDB. Supported versions that are affected are 5.7.24 and prior and 8.0.13...

Oracle Linux 8 : mariadb:10.3 (ELSA-2019-3708)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-3708 advisory. - Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Privileges. Supported versions that are affected are 5.6....

CVE-2023-3708

creationtimestamp| type| source ---|---|--- 2023-07-18 07:25:56+00:00| seen| https://t.me/cibsecurity/66879...

CVE-2023-3708

CVE-2023-3708 : Several WordPress themes by DeoThemes are vulnerable to Reflected Cross-Site Scripting via breadcrumbs in multiple versions due to insufficient input sanitization and output escaping. The issue allows unauthenticated attackers to inject arbitrary scripts into pages that may run wh...

SUSE CVE-2010-3708

The serialization implementation in JBoss Drools in Red Hat JBoss Enterprise Application Platform aka JBoss EAP or JBEAP 4.3 before 4.3.0.CP09 and JBoss Enterprise SOA Platform 4.2 and 4.3 supports the embedding of class files, which allows remote attackers to execute arbitrary code via a crafted...

CVE-2022-3708

creationtimestamp| type| source ---|---|--- 2022-10-28 22:29:42+00:00| seen| https://t.me/cibsecurity/52248 2025-05-05 13:19:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14851...