CVE-2021-3763

Affected software: Red Hat AMQ Broker management console (7.8). Vulnerability: information disclosure due to incorrect checks of role bindings; an existing user may access limited data that should be restricted. Impact: primarily confidentiality; no direct integrity impact reported. Root cause: r...

CVE-2021-3763

A flaw was found in the Red Hat AMQ Broker management console in version 7.8 where an existing user is able to access some limited information even when the role the user is assigned to should not be allow access to the management console. The main impact is to confidentiality as this flaw means...

SUSE: Security Advisory (SUSE-SU-2020:3763-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-3763

creationtimestamp| type| source ---|---|--- 2020-12-20 22:01:03+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/832...

CVE-2020-3763

Adobe Acrobat and Reader are affected by CVE-2020-3763, a privilege-escalation vulnerability in which successful exploitation could allow arbitrary file system write. The entry covers multiple affected versions (e.g., 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2015.006.30508 and earl...

Adobe Reader < 2015.006.30510 / 2020.006.20034 Multiple Vulnerabilities (APSB20-05)

The version of Adobe Reader installed on the remote Windows host is a version prior to 2015.006.30510 or 2020.006.20034. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier,...

Adobe Acrobat < 2015.006.30510 / 2020.006.20034 Multiple Vulnerabilities (APSB20-05) (macOS)

The version of Adobe Acrobat installed on the remote macOS host is a version prior to 2015.006.30510 or 2020.006.20034. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, a...

CVE-2018-3763

In Nextcloud Calendar before 1.5.8 and 1.6.1, a missing sanitization of search results for an autocomplete field could lead to a stored XSS requiring user-interaction. The missing sanitization only affected group names, hence malicious search results could only be crafted by privileged users like...

CVE-2018-3763

Nextcloud Calendar versions prior to 1.5.8 and 1.6.1 contain a stored XSS in the calendar autocomplete search results for group names. The vulnerability arises from missing sanitization of search results, and exploitation is limited to privileged users (admins/group admins) crafting malicious res...

CVE-2017-3763

Lenovo XClarity Administrator (LXCA) prior to version 1.3.2 contains an information-disclosure vulnerability (CVE-2017-3763). Local LXCA account data is stored in a local LDAP database on the LXCA image; passwords and password histories are stored encoded rather than hashed, potentially allowing ...

Attacker with Access to LXCA Filesystem Could Access Local LXCA Account Credentials and LXCA Authenticated Command Injection - us

Lenovo Security Advisory: LEN-16333 Potential Impact: An attacker who obtains access to the location where the LXCA file system is stored could access credentials of local LXCA accounts and Privilege escalation by an authenticated user Severity: Medium to High Scope of Impact: Lenovo Specific CVE...

[SECURITY] [DSA 3763-1] pdns-recursor security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3763-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 13, 2017 https://www.debian.org/security/faq -...

Debian: Security Advisory (DSA-3763-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Design/Logic Flaw

net/proxy/proxyservice.cc in the Proxy Auto-Config PAC feature in Google Chrome before 52.0.2743.82 does not ensure that URL information is restricted to a scheme, host, and port, which allows remote attackers to discover credentials by operating a server with a PAC script, a related issue to...

CVE-2016-3763

net/PacProxySelector.java in the Proxy Auto-Config PAC feature in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not ensure that URL information is restricted to a scheme, host, and port, which allows remote attackers to discover credentials by...

CVE-2016-3763

The CVE-2016-3763 entry concerns Android and its PAC (Proxy Auto-Config) feature. The vulnerable component is net/PacProxySelector.java used by PAC, where URL information is not restricted to scheme/host/port as required. This allows a remote attacker controlling a PAC script server to discover c...

CVE-2015-3763

CVE-2015-3763 affects Safari/WebKit on iOS prior to 8.4.1. A crafted webpage can generate numerous JavaScript alert messages, causing a denial of service (apparent browser lock). Apple addressed this in iOS 8.4.1 by throttling alerts. The referenced entry describes a remote, client-side DoS via a...

Oracle Endeca Server createDataStore Remote Command Execution - Ver2 (CVE-2013-3763)

A command execution vulnerability exists in Oracle Endeca Server. The vulnerability is due to the controlSoapBinding web service exposing the createDataStore method which contains a flaw that allows for the injection of arbitrary commands. A remote, unauthenticated attacker could exploit this...

Oracle Endeca Server Remote Command Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

Oracle Endeca Server createDataStore Remote Command Execution (CVE-2013-3763)

A command execution vulnerability exists in Oracle Endeca Server. The vulnerability is due to the controlSoapBinding web service exposing the createDataStore method which contains a flaw that allows for the injection of arbitrary commands. A remote, unauthenticated attacker could exploit this...