Ubuntu: Security Advisory (USN-3766-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

@graphprotocol/payments (>=0.0.2-next.a995f4b.40, <=0.1.0), @graphprotocol/receipts (>=0.0.2-next.a995f4b.40, <=0.1.0) +2 more potentially affected by CVE-2021-3766 via objection (>=2.1.2, <=2.2.14)

objection NPM version =2.1.2, =0.0.2-next.a995f4b.40, =0.0.2-next.a995f4b.40, =0.0.2, =0.2.0, =1.25.2 Source cves: CVE-2021-3766 Source advisory: OSV:GHSA-R659-8XFP-J327...

CVE-2021-3766

creationtimestamp| type| source ---|---|--- 2021-09-06 16:40:40+00:00| seen| https://t.me/cibsecurity/28294...

CVE-2021-3766

objection.js is vulnerable to Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution'...

CVE-2021-3766

objection.js is vulnerable to Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution'...

CVE-2021-3766 Prototype Pollution in vincit/objection.js

objection.js is vulnerable to Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution'...

CVE-2021-3766

CVE-2021-3766 : A prototype pollution vulnerability in objection.js (vincit/objection.js) allows improper modification of Object.prototype attributes. Affected versions prior to 2.2.16 are vulnerable; the issue is patched in 2.2.16. Impact details in connected records indicate high/critical sever...

CVE-2020-3766

Adobe Genuine Integrity Service (Windows) versions 6.4 and earlier are affected by an insecure file permissions vulnerability. The flaw stems from improper permissions on a resource used by the service, enabling local privilege escalation (from a low-privilege user to SYSTEM) when exploited. The ...

hoteldesartistes.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1015295 Security Researcher g0bl1nsec Helped patch 3766 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting hoteldesartistes.com...

evechambrot.hautetfort.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1008878 Security Researcher g0bl1nsec Helped patch 3766 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting evechambrot.hautetfort.co...

CVE-2019-3766

Dell EMC ECS versions prior to 3.4.0.0 contain an improper restriction of excessive authentication attempts vulnerability. An unauthenticated remote attacker may potentially perform a password brute-force attack to gain access to the targeted accounts...

CVE-2019-3766

Dell EMC ECS CVE-2019-3766 affects Dell EMC ECS versions prior to 3.4.0.0 and is due to an improper restriction of excessive authentication attempts. An unauthenticated remote attacker could perform a password brute-force to gain access to targeted accounts. The vulnerability is rated HIGH/CRITIC...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : PHP vulnerabilities (USN-3766-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3766-1 advisory. It was discovered that PHP incorrectly handled restarting certain child processes when php-fpm is used. A remote attacker could...

CVE-2018-3766

The CVE-2018-3766 issue affects the buttle module for Node.js, where versions

Debian Security Advisory DSA 3766-1 (mapserver - security update)

It was discovered that mapserver, a CGI-based framework for Internet map services, was vulnerable to a stack-based overflow. This issue allowed a remote user to crash the service, or potentially execute arbitrary code. OpenVAS Vulnerability Test $Id: deb3766.nasl 6607 2017-07-07 12:04:25Z cfische...

CVE-2016-3766

MPEG4Extractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not check whether memory allocation succeeds, which allows remote attackers to cause a denial of service device hang or reboot via a crafted file...

CVE-2016-3766

CVE-2016-3766 affects MPEG4Extractor.cpp in libstagefright within Android MediaServer. The vulnerability arises because memory allocation success is not checked, enabling a crafted media file to cause a denial of service (device hang or reboot). Affected Android lines include 4.x up to 4.4.4, 5.0...

CVE-2016-3766

MPEG4Extractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not check whether memory allocation succeeds, which allows remote attackers to cause a denial of service device hang or reboot via a crafted file...

CVE-2015-3766

CVE-2015-3766 affects the Apple kernel on iOS before 8.4.1 and OS X before 10.10.5. The issue stems from improper restrictions on the mach_port_space_info interface, which could allow a crafted app to obtain sensitive memory-layout information. Apple addressed this by disabling the mach_port_spac...

openSUSE Security Update : MozillaFirefox (MozillaFirefox-3688)

Mozilla Firefox was updated to update 3.6.13 fixing several security issues. MFSA 2010-74: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certa...