199 matches found
MiracleLinux 7 : openssl-1.0.2k-12.el7 (AXSA:2018-2937:01)
The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2018-2937:01 advisory. openssl: bnsqrx8xinternal carry bug on x8664 CVE-2017-3736 openssl: Read/write after SSL object in error state CVE-2017-3737 openssl: rsaz1024mulavx...
Linux Distros Unpatched Vulnerability : CVE-2015-3738
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or...
CVE-2011-3738
Feng Office 1.7.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by public/upgrade/templates/layout.php and certain other files...
CVE-2025-3738
Vulnerability in Drupal Google Optimize.This issue affects Google Optimize:...
CVE-2025-3738
creationtimestamp| type| source ---|---|--- 2025-04-16 20:14:16+00:00| seen| https://t.me/cvedetector/23128 2025-04-17 19:58:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12337...
CVE-2025-3738
Vulnerability in Drupal Google Optimize.This issue affects Google Optimize:...
CVE-2025-3738
Technical details about CVE-2025-3738 are not publicly provided in the supplied documents. Monitor for updates from Drupal SA-Contrib-2025-039 and related advisories.
CVE-2024-3738
A vulnerability classified as critical has been found in cym1102 nginxWebUI up to 3.9.9. This affects the function handlePath of the file /adminPage/conf/saveCmd. The manipulation of the argument nginxPath leads to improper certificate validation. It is possible to initiate the attack remotely. T...
CVE-2021-3738 affecting package samba 4.12.5-7
CVE-2021-3738 affecting package samba 4.12.5-7. No patch is available currently...
CVE-2021-3738 affecting package samba for versions less than 4.18.3-1
CVE-2021-3738 affecting package samba for versions less than 4.18.3-1. An upgraded version of the package is available that resolves this issue...
CVE-2024-3738
CVE-2024-3738 affects cym1102 nginxWebUI up to version 3.9.9. The vulnerability lies in the handlePath function of /adminPage/conf/saveCmd, where manipulating the nginxPath argument leads to improper certificate validation. The issue enables remote exploitation and the exploit has been disclosed ...
CVE-2024-3738 cym1102 nginxWebUI saveCmd handlePath certificate validation
A vulnerability classified as critical has been found in cym1102 nginxWebUI up to 3.9.9. This affects the function handlePath of the file /adminPage/conf/saveCmd. The manipulation of the argument nginxPath leads to improper certificate validation. It is possible to initiate the attack remotely. T...
openSUSE: Security Advisory for chromium (openSUSE-SU-2023:0193-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-3738
Inappropriate implementation in Autofill in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to obfuscate security UI via a crafted HTML page. Chromium security severity: Medium...
Chromium: CVE-2023-3738 Inappropriate implementation in Autofill
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Edge (Chromium) < 114.0.1901.183 / 115.0.1901.183 Multiple Vulnerabilities
The version of Microsoft Edge installed on the remote Windows host is prior to 114.0.1901.183 / 115.0.1901.183. It is, therefore, affected by multiple vulnerabilities as referenced in the July 21, 2023 advisory. - Microsoft Edge Chromium-based Spoofing Vulnerability CVE-2023-35392 - Microsoft Edg...
KLA51267 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, spoof user interface, gain privileges. Below is a complete list of vulnerabilities: 1. Implementation vulnerability in Web API Permission...
[SECURITY] [DSA 5456-1] chromium security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5456-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 20, 2023 https://www.debian.org/security/faq -...
Security Bulletin: Multiple security vulnerabilities have been identified in Open SSL, which is shipped with IBM Tivoli Network Manager IP Edition (CVE-2017-3737, CVE-2017-3738).
Summary Open SSL is shipped with IBM Tivoli Network Manager IP Edition version 3.9. Information about security vulnerabilities affecting Open SSL has been published here. Vulnerability Details CVEID: CVE-2017-3737 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information,...
Wago Multiple Products Missing Authentication for Critical Function (CVE-2022-3738)
The vulnerability allows a remote unauthenticated attacker to download a backup file, if one exists. That backup file might contain sensitive information like credentials and cryptographic material. A valid user has to create a backup after the last reboot for this attack to be successfull. This...