CVE-2023-3716

CVE-2023-3716 describes an SQL injection vulnerability in Oduyo Online Collection Software prior to version 1.0.1. The issue arises from improper neutralization of special elements in SQL commands, allowing an attacker to manipulate queries. Affected component is the Online Collection Software (v...

Debian: Security Advisory (DLA-484-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-3716

creationtimestamp| type| source ---|---|--- 2022-10-27 14:28:18+00:00| seen| https://t.me/cibsecurity/52137...

ALSA-2022:1759 Moderate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update

Kernel-based Virtual Machine KVM offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the...

virt:rhel and virt-devel:rhel security, bug fix, and enhancement update

An update is available for libguestfs, libnbd, libtpms, libguestfs-winsupport, nbdkit, supermin, libiscsi, hivex, libvirt, netcf, perl-Sys-Virt, seabios, qemu-kvm, swtpm, virt-v2v, sgabios, libvirt-dbus, libvirt-python. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS...

CVE-2021-3716

CVE-2021-3716 affects nbdkit; root cause is improper caching of plaintext state across the STARTTLS boundary. A man-in-the-middle could inject a plaintext NBD_OPT_STRUCTURED_REPLY before proxying client data to the server, potentially causing the client to terminate the NBD session. The primary i...

RHEL 8 : virt:av and virt-devel:av (RHSA-2022:0397)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:0397 advisory. The Advanced Virtualization module provides the user-space component for running virtual machines that use KVM in environments managed by Re...

Mageia: Security Advisory (MGASA-2016-0188)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2016:1260-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-3716

Magento 2.x and 1.x versions listed (2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, 1.9.4.3 and earlier) are affected by a deserialization of untrusted data vulnerability that can lead to arbitrary code execution. Root cause is deserialization of untrusted data in the Magento codeba...

CVE-2020-3716

creationtimestamp| type| source ---|---|--- 2020-01-29 17:05:45+00:00| seen| https://t.me/informationsecuritychannel/34541...

Critical Flaws in Magento e-Commerce Platform Allow Code-Execution

Critical vulnerabilities in Adobe’s Magento e-commerce platform – a favorite target of the Magecart cybergang – could lead to arbitrary code execution. Adobe issued patches on Tuesday as part of its overall release of the Magento 2.3.4 upgrade, giving the fixes a “priority 2” rating. In Adobe...

Huawei EulerOS: Security Advisory for ImageMagick (EulerOS-SA-2016-1021)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-3716

CVE-2019-3716 affects RSA Archer prior to 6.5 SP2. An authenticated local attacker who can access RSA Archer log files may obtain the database connection password because it is logged in plaintext, enabling use in further attacks. Affected product is Dell EMC RSA Archer (enterprise IT governance/...

h-include (=1.0.0), hinclude (>=1.0.1 <=1.1.0) +2 more potentially affected by CVE-2018-3716 via simplehttpserver (=0.0.6)

simplehttpserver NPM version =0.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on simplehttpserver and may be impacted: - h-include =1.0.0 - hinclude =1.0.1, =0.0.1, =0.0.2 Source cves: CVE-2018-3716 Source advisory: OSV:GHSA-JRHJ-2J3Q-XF3V...

Ubuntu 16.04 LTS : Dnsmasq update (USN-3716-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3716-1 advisory. This update adds the latest DNSSEC validation trust anchor required for the upcoming Root Zone KSK Rollover. Tenable has extracted the preceding description block...

CVE-2018-3716

CVE-2018-3716 affects the simplehttpserver Node.js module. The vulnerability is a stored XSS in directory listings caused by lack of validation/sanitization of file names fed into HTML output. Exploitation requires an attacker-controlled filename in the listing; the XSS payload is reflected in th...

GLSA-201611-21 : ImageMagick: Multiple vulnerabilities (ImageTragick)

The remote host is affected by the vulnerability described in GLSA-201611-21 ImageMagick: Multiple vulnerabilities Multiple vulnerabilities have been discovered in ImageMagick. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly execute...

Debian DSA-3716-1 : firefox-esr - security update

Multiple security issues have been found in the Mozilla Firefox web browser: Multiple memory safety errors, buffer overflows and other implementation errors may lead to the execution of arbitrary code or bypass of the same-origin policy. Also, a man-in-the-middle attack in the addon update...

Amazon Linux: Security Advisory (ALAS-2016-699)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...