CVE-2022-3758

CVE-2022-3758 affects GitLab releases with multiple version ranges: 15.5–15.7.7, 15.8–15.8.3, and 15.9–15.9.1. The issue stems from improper permissions checks that allow an unauthorised user to read, add or edit a user’s private snippet. The impact is limited to read/edit exposure of private sni...

CVE-2022-3758

Removed by vendor...

FreeBSD : Gitlab -- Multiple Vulnerabilities (f7c5b3a9-b9fb-11ed-99c6-001b217b3468)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the f7c5b3a9-b9fb-11ed-99c6-001b217b3468 advisory. - An issue has been discovered in GitLab affecting all versions starting from 10.0 to 15.7.8,...

GitLab 15.5 < 15.7.8 / 15.8 < 15.8.4 / 15.9 < 15.9.2 (CVE-2022-3758)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab affecting all versions starting from 15.5 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. Due to...

CVE-2021-3758

creationtimestamp| type| source ---|---|--- 2021-09-02 16:36:06+00:00| seen| https://t.me/cibsecurity/28211...

CVE-2021-3758

bookstack is vulnerable to Server-Side Request Forgery SSRF...

CVE-2021-3758 Server-Side Request Forgery (SSRF) in bookstackapp/bookstack

bookstack is vulnerable to Server-Side Request Forgery SSRF...

CVE-2021-3758

CVE-2021-3758 affects BookStack (bookstackapp/bookstack). The vulnerability is an SSRF flaw in how a page exported to PDF handles HTML content (e.g., an tag referencing external resources). The PoC shows server-side requests triggered during PDF export, enabling access to internal resources from...

CVE-2020-3758

CVE-2020-3758 applies to Magento: affected versions include 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlier. The issue is a stored cross-site scripting vulnerability that could lead to sensitive information disclosure. Multiple connected records confirm the sa...

RHEL 7 : patch (RHSA-2019:3758)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:3758 advisory. The patch program applies diff files to originals. The diff command is used to compare an original to a changed file. Diff lists the changes...

CVE-2019-3758

CVE-2019-3758 affects RSA Archer prior to 6.6 P2 (6.6.0.2). The root cause is improper authentication that enables sysadmins to create user accounts with insufficient credentials, allowing unauthenticated attackers to gain unauthorized access to the system using those accounts. Exploitation detai...

USN-3758-1: libx11 vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Canonical Ubuntu 18.04 Description Tobias Stoeckmann discovered that libx11 incorrectly handled certain images. An attacker could possibly use this issue to access sensitive information CVE-2016-7942 Tobias Stoeckman...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : libx11 vulnerabilities (USN-3758-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3758-1 advisory. Tobias Stoeckmann discovered that libx11 incorrectly handled certain images. An attacker could possibly use this issue to access...

CVE-2018-3758

CVE-2018-3758 affects the express-cart Node.js module (pre-1.1.7). The vulnerability is an unrestricted file upload via the module’s upload functionality. A privileged user can supply an attacker-controlled path and upload arbitrary files (no path/type/size validation), potentially gaining access...

CVE-2017-3758

CVE-2017-3758 affects Lenovo Service Framework (LSF) Android components. The vulnerability stems from improper access controls in Android components within LSF, allowing remote code execution. Public sources detail that LSF is an Android framework used to receive push notifications on Lenovo devi...

Debian Security Advisory DSA 3758-1 (bind9 - security update)

Several denial-of-service vulnerabilities assertion failures were discovered in BIND, a DNS server implementation. CVE-2016-9131 A crafted upstream response to an ANY query could cause an assertion failure. CVE-2016-9147 A crafted upstream response with self-contradicting DNSSEC data could cause ...

Debian: Security Advisory (DSA-3758-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-3758

CVE-2016-3758 affects Android’s DexClassLoader (libdex/OptInvocation.cpp). The issue is described as multiple buffer overflows that allow attackers to gain privileges via a crafted application providing a long filename. Affected are Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1...

CVE-2015-3758

UIKit WebView in Apple iOS before 8.4.1 allows attackers to bypass an intended user-confirmation requirement and initiate arbitrary FaceTime calls via an app that provides a crafted URL...

CVE-2015-3758

CVE-2015-3758 affects UIKit WebView in iOS prior to 8.4.1. The vulnerability lets an attacker bypass the user-confirmation requirement and initiate a FaceTime call via an app supplying a crafted URL, due to parsing/validation issues in WebView URL handling. Impact: potential unauthorized FaceTime...