107 matches found
Microsoft Edge (Chromium) < 114.0.1901.183 / 115.0.1901.183 Multiple Vulnerabilities
The version of Microsoft Edge installed on the remote Windows host is prior to 114.0.1901.183 / 115.0.1901.183. It is, therefore, affected by multiple vulnerabilities as referenced in the July 21, 2023 advisory. - Microsoft Edge Chromium-based Spoofing Vulnerability CVE-2023-35392 - Microsoft Edg...
[SECURITY] [DSA 5456-1] chromium security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5456-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 20, 2023 https://www.debian.org/security/faq -...
SUSE CVE-2023-3734
Inappropriate implementation in Picture In Picture in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to potentially spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Medium...
CVE-2022-3734
CVE-2022-3734 affects a Windows port/ fork of Redis using dbghelp.dll, enabling an uncontrolled search path due to a code issue. The vulnerability appears exploitable remotely and is labeled critical; however, the official Redis release is not affected, and the real existence of this vulnerabilit...
CVE-2021-3734
creationtimestamp| type| source ---|---|--- 2021-08-26 16:26:45+00:00| seen| https://t.me/cibsecurity/27897...
CVE-2021-3734
CVE-2021-3734 concerns YOURLS and is described in multiple sources as a vulnerability due to improper restriction of rendered UI layers or frames (clickjacking). The core issue is lack of frame restrictions, allowing an attacker to embed the application in an iframe and potentially trick users in...
CVE-2021-3734 Improper Restriction of Rendered UI Layers or Frames in yourls/yourls
yourls is vulnerable to Improper Restriction of Rendered UI Layers or Frames...
RHEL 8 : httpd:2.4 (RHSA-2020:3734)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:3734 advisory. The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: Push diary crash on...
Adobe FrameMaker 2019 < 15.0.5 (2019.0.5) Arbitrary Code Execution (APSB20-04)
The version of Adobe FrameMaker installed on the remote Windows host is prior to Adobe FrameMaker 2019 15.0.5. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb20-04 advisory. - Adobe Framemaker versions 2019.0.4 and below have a memory corruption vulnerability...
CVE-2020-3734
CVE-2020-3734 affects Adobe FrameMaker 2019.x on Windows, specifically 2019.0.4 and earlier, with a buffer error vulnerability that could lead to arbitrary code execution. The associated advisories note a patch released in 2019.0.5 (APS B20-04) and describe multiple FrameMaker flaws addressed in ...
CVE-2020-3734
Adobe Framemaker versions 2019.0.4 and below have a buffer error vulnerability. Successful exploitation could lead to arbitrary code execution...
Ubuntu 16.04 LTS : OpenJDK 8 vulnerability (USN-3734-1)
The remote Ubuntu 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3734-1 advisory. It was discovered that the PatternSyntaxException class in OpenJDK did not properly validate arguments passed to it. An attacker could use this to possibly...
Ubuntu: Security Advisory (USN-3734-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2018-3734
CVE-2018-3734 describes a path traversal vulnerability in the Node.js module stattric/stattic (pre-0.3.0) due to lack of path validation. The issue allows a remote attacker to read arbitrary files by manipulating the requested path, as the module may append "/index.html" for requests with no exte...
CVE-2013-3734
The CVE-2013-3734 vulnerability affects the Embedded Jopr component of JBoss Application Server, where the cleartext datasource password is included in unspecified HTML responses. Root cause: passwords are exposed in later responses (even if masked in the UI) or in the HTML source, enabling infor...
CVE-2017-3734
CVE-2017-3734 is explicitly rejected and not an active vulnerability entry.
CVE-2016-3734
Cross-site request forgery CSRF vulnerability in markposts.php in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13 and earlier allows remote attackers to hijack the authentication of users for requests that marks forum posts as read...
CVE-2016-3734
Cross-site request forgery CSRF vulnerability in markposts.php in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13 and earlier allows remote attackers to hijack the authentication of users for requests that marks forum posts as read...
CVE-2016-3734
Cross-site request forgery CSRF vulnerability in markposts.php in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13 and earlier allows remote attackers to hijack the authentication of users for requests that marks forum posts as read...