CVE-2021-3745

flatcore-cms is vulnerable to Unrestricted Upload of File with Dangerous Type...

CVE-2021-3745

flatcore-cms is vulnerable to Unrestricted Upload of File with Dangerous Type...

CVE-2021-3745 Unrestricted Upload of File with Dangerous Type in flatcore/flatcore-cms

flatcore-cms is vulnerable to Unrestricted Upload of File with Dangerous Type...

CVE-2021-3745

CVE-2021-3745 affects flatcore-cms and stems from an unrestricted file upload in the gallery upload path (files.upload_gallery.php). The provided PoC demonstrates uploading a PHP payload and then requesting the generated file to obtain a shell, indicating potential remote code execution with admi...

CVE-2020-3745

Adobe Acrobat and Reader are affected by a use-after-free vulnerability (CVE-2020-3745) that could allow arbitrary code execution. The CVE is part of a broader set of issues in APSB20-05 affecting versions prior to 2015.006.30510 and 2020.006.20034 (e.g., 2019.021.20061 and earlier, 2017.011.3015...

Adobe Reader < 2015.006.30510 / 2020.006.20034 Multiple Vulnerabilities (APSB20-05)

The version of Adobe Reader installed on the remote Windows host is a version prior to 2015.006.30510 or 2020.006.20034. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier,...

Adobe Acrobat < 2015.006.30510 / 2020.006.20034 Multiple Vulnerabilities (APSB20-05) (macOS)

The version of Adobe Acrobat installed on the remote macOS host is a version prior to 2015.006.30510 or 2020.006.20034. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, a...

CVE-2019-3745

The CVE-2019-3745 issue affects Dell Encryption Enterprise prior to 10.4.0 and Dell Endpoint Security Suite Enterprise prior to 2.4.0. It is exploitable only during product installation by an administrator. A local authenticated low-privilege user could stage a malicious DLL in the installer's se...

CVE-2019-3745

The vulnerability is limited to the installers of Dell Encryption Enterprise versions prior to 10.4.0 and Dell Endpoint Security Suite Enterprise versions prior to 2.4.0. This issue is exploitable only during the installation of the product by an administrator. A local authenticated low privilege...

Ubuntu: Security Advisory (USN-3745-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-3742

CVE-2018-3742 is rejected/not used; refer to CVE-2018-3745 for the active entry.

CVE-2018-3745

atob 2.0.3 and earlier allocates uninitialized Buffers when number is passed in input on Node.js 4.x and below...

CVE-2018-3745

CVE-2018-3745 describes an information disclosure/DoS risk in the atob Node.js module (versions 2.0.3 and earlier) caused by allocating uninitialized Buffers when a number is provided as input on Node.js 4.x and earlier. The vulnerability affects the atob module itself and is due to uninitialized...

CVE-2018-3745

atob 2.0.3 and earlier allocates uninitialized Buffers when number is passed in input on Node.js 4.x and below...

CVE-2017-3745

Lenovo XClarity Administrator (LXCA) before 1.3.0 exposes password information for users who previously authenticated to LXCA’s internal LDAP when service data is downloaded. A non-administrative user could access credentials for accounts including administrative/service accounts with privileges,...

Lenovo XClarity Administrator Credential Disclosure - us

Lenovo Security Advisory: LEN-13671 Potential Impact: Disclosure of credentials to a non-administrative user Severity: High Scope of Impact: Lenovo Specific CVE Identifier: CVE-2017-3745 Summary Description: During an internal assessment, a vulnerability was identified in Lenovo XClarity...

Lenovo XClarity Administrator Credential Disclosure - Lenovo Support US

No description provided...

Debian DSA-3745-1 : squid3 - security update

Saulius Lapinskas from Lithuanian State Social Insurance Fund Board discovered that Squid3, a fully featured web proxy cache, does not properly process responses to If-None-Modified HTTP conditional requests, leading to client-specific Cookie data being leaked to other clients. A remote attacker...

Debian Security Advisory DSA 3745-1 (squid3 - security update)

Saulius Lapinskas from Lithuanian State Social Insurance Fund Board discovered that Squid3, a fully featured web proxy cache, does not properly process responses to If-None-Modified HTTP conditional requests, leading to client-specific Cookie data being leaked to other clients. A remote attacker...

Debian: Security Advisory (DSA-3745-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...