CVE-2021-3728 Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3728

The provided documents confirm CVE-2021-3728 affects the open-source project firefly-iii and is described as a Cross‑Site Request Forgery (CSRF) vulnerability. Concrete details in the connected documents show the issue is labeled as CSRF across multiple sources (Red Hat, OSV, GitHub advisories, C...

Adobe FrameMaker 2019 < 15.0.5 (2019.0.5) Arbitrary Code Execution (APSB20-04)

The version of Adobe FrameMaker installed on the remote Windows host is prior to Adobe FrameMaker 2019 15.0.5. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb20-04 advisory. - Adobe Framemaker versions 2019.0.4 and below have a memory corruption vulnerability...

CVE-2020-3728

Adobe FrameMaker 2019.0.4 and earlier versions are affected by an out-of-bounds write vulnerability (CVE-2020-3728). The flaw could enable arbitrary code execution when processing content, as described across multiple sources (NVD/Adobe advisories). Red Hat and ZDI references corroborate a remote...

CVE-2019-3728

RSA BSAFE Crypto-C Micro Edition versions from 4.0.0.0 before 4.0.5.4 and from 4.1.0 before 4.1.4, RSA BSAFE Micro Edition Suite versions from 4.0.0 before 4.0.13 and from 4.1.0 before 4.4 and RSA Crypto-C versions from 6.0.0 through 6.4. are vulnerable to an out-of-bounds read vulnerability when...

CVE-2019-3728

Dell BSAFE Crypto-C Crypto-C and Micro Edition family (Crypto-C RSA 6.4; Crypto-C Micro Edition 4.x; Micro Edition Suite 4.x) are affected by CVE-2019-3728 due to an out-of-bounds read in ASN.1 decoding (_A_DecodeType/_A_DecodeElement) caused by integer overflow/underflow when parsing certain ASN...

Ubuntu: Security Advisory (USN-3728-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-3728-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: A security vulnerability has been identified in Node.js hoek shipped with Data Science Experience Local

Summary Node.js hoek is shipped as a component of Data Science Experience Local. Information about a security vulnerability affecting Node.js hoek has been published in a security bulletin. Vulnerability Details Please consult the security bulletins: CVE-2018-3728 for vulnerability details and...

Ubuntu 14.04 LTS : ClamAV vulnerabilities (USN-3728-2)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3728-2 advisory. USN-3728-1 fixed several vulnerabilities in libmspack. In Ubuntu 14.04 libmspack is included into ClamAV. This update provides the corresponding update f...

Ubuntu 16.04 LTS / 18.04 LTS : libmspack vulnerabilities (USN-3728-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3728-1 advisory. Hanno Bck discovered that libmspack incorrectly handled certain CHM files. An attacker could possibly use this issue to cause a denial of...

RHEL 7 : Red Hat Mobile Application Platform 4.6.0 (RHSA-2018:1263)

Red Hat Mobile Application Platform 4.6.0 release - RPMs Red Hat Mobile Application Platform RHMAP 4.6 is delivered as a set of container images. In addition to the images, several components are delivered as RPMs : OpenShift templates used to deploy an RHMAP Core and MBaaS The fh-system-dump-too...

Moderate: Red Hat Security Advisory: Red Hat Mobile Application Platform 4.6.0 release - RPMs

Red Hat Mobile Application Platform 4.6.0 release - RPMs Red Hat Mobile Application Platform RHMAP 4.6 is delivered as a set of container images. In addition to the images, several components are delivered as RPMs: OpenShift templates used to deploy an RHMAP Core and MBaaS The fh-system-dump-tool...

Moderate: Red Hat Security Advisory: Red Hat Mobile Application Platform 4.6.0 Release - Container Images

Red Hat Mobile Application Platform 4.6.0 Release - Container Images Red Hat Mobile Application Platform RHMAP 4.6.0 consists of three main components: Core - development and management of apps occurs in the RHMAP Core, which can be installed either in an on-premise installation of OpenShift...

CVE-2018-3728

hoek node module before 4.2.0 and 5.0.x before 5.0.3 suffers from a Modification of Assumed-Immutable Data MAID vulnerability via 'merge' and 'applyToDefaults' functions, which allows a malicious user to modify the prototype of "Object" via proto, causing the addition or modification of an existi...

CVE-2018-3728

hoek node module before 4.2.0 and 5.0.x before 5.0.3 suffers from a Modification of Assumed-Immutable Data MAID vulnerability via 'merge' and 'applyToDefaults' functions, which allows a malicious user to modify the prototype of "Object" via proto, causing the addition or modification of an existi...

CVE-2018-3728

CVE-2018-3728 affects the hoek npm package. It is vulnerable to prototype pollution via the merge and applyToDefaults utilities, allowing an attacker to modify Object.prototype through proto and corrupt properties on all objects. Affected versions are hoek before 4.2.0 and 5.0.x before 5.0.3. Rem...

CVE-2010-3728

...

CVE-2010-3728

CVE-2010-3728 is rejected/not used as a vulnerability entry.

Debian: Security Advisory (DSA-3728-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...