121 matches found
CVE-2026-3718
creationtimestamp| type| source ---|---|--- 2026-05-14 10:32:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mlsmht3m3r2u 2026-05-14 11:19:14+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mlsp444dup2x...
MiracleLinux 7 : podman-1.6.4-36.el7 (AXSA:2022-3718:02)
The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-3718:02 advisory. podman: Security regression of CVE-2020-8945 due to source code management issue CVE-2022-2738 podman: Security regression of CVE-2020-14370 due to...
CVE-2025-3718
creationtimestamp| type| source ---|---|--- 2025-10-07 13:48:23+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115333195472561898...
EUVD-2015-3718
Malware in sbrugna...
CVE-2021-3718
A denial of service vulnerability was reported in some ThinkPad models that could cause a system to crash when the Enhanced Biometrics setting is enabled in BIOS...
CVE-2020-3718
Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlier have a security bypass vulnerability. Successful exploitation could lead to arbitrary code execution...
CVE-2011-3718
CMS Made Simple CMSMS 1.9.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/TinyMCE/TinyMCE.module.php and certain other files. NOTE: this might overlap CVE-2007-5444...
Linux Distros Unpatched Vulnerability : CVE-2013-3718
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - evince is missing a check on number of pages which can lead to a segmentation fault CVE-2013-3718 Note that Nessus relies on the presence of the package as...
Linux Distros Unpatched Vulnerability : CVE-2016-3718
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The 1 HTTP and 2 FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery SSRF attacks via...
Linux Distros Unpatched Vulnerability : CVE-2010-3718
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Tomcat 7.0.0 through 7.0.3, 6.0.x, and 5.5.x, when running within a SecurityManager, does not make the ServletContext attribute read-only, which allows...
CVE-2024-3718
creationtimestamp| type| source ---|---|--- 2025-02-06 02:40:18+00:00| seen| Telegram/TPJoNAr3ObrK2XRul1UjZFbB-gcwUkKA9OzDvKTkDspY8WH...
RHSA-2024:3718
creationtimestamp| type| source ---|---|--- 2025-01-13 21:12:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1393 2025-02-25 08:25:24+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5260 2025-11-24 22:38:21+00:00| seen| https://gist.github.com/anik120/b6fd06c8b70780d542697c63135a086e...
RHEL 5 : evince (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - poppler: Null pointer dereference in the JPXStream::readUByte function CVE-2017-9083 - evince is missing ...
CVE-2024-3718
The The Plus Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several of the plugin's widgets all versions up to, and including, 5.5.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2024-3718 The Plus Addons for Elementor <= 5.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Progress Bar, Header Meta Content, Scroll Navigation, Pricing Table, & Flip Box
The The Plus Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several of the plugin's widgets all versions up to, and including, 5.5.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2024-3718 The Plus Addons for Elementor <= 5.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Progress Bar, Header Meta Content, Scroll Navigation, Pricing Table, & Flip Box
The The Plus Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several of the plugin's widgets all versions up to, and including, 5.5.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
WordPress The Plus Addons for Elementor Page Builder Lite Plugin <= 5.5.4 is vulnerable to Cross Site Scripting (XSS)
Software The Plus Addons for Elementor Page Builder Lite Type Plugin Vulnerable versions = 5.5.4 Fixed in 5.5.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-3718 Patch priority Low CVSS severity Low 6.5 Developer POSIMYTH Innovations PSID...
CVE-2013-3718
creationtimestamp| type| source ---|---|--- 2024-02-01 15:16:31+00:00| seen| https://t.me/ctinow/177600...
CVE-2022-3718 affecting package exiv2 for versions less than 0.28.0-1
CVE-2022-3718 affecting package exiv2 for versions less than 0.28.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2023-3718
An authenticated command injection vulnerability exists in the AOS-CX command line interface. Successful exploitation of this vulnerability results in the ability to execute arbitrary commands on the underlying operating system as a privileged user on the affected switch. This allows an attacker ...