@atlas.js/objection (>=0.1.0 <=3.0.0), @betaquick/fccc-db (=1.0.0) +152 more potentially affected by CVE-2021-3766 via objection (>=0.2.8 <=2.2.14)

objection NPM version =0.2.8, =0.1.0, =1.1.0, =0.8.1, =0.3.0, =0.1.0, =4.0.9, =2.0.4, =3.0.0, =0.1.0, =0.0.3, =0.2.2, =2.1.7, =3.1.10 - @lionhat/lib =1.0.0 and more Source cves: CVE-2021-3766 Source advisory: OSV:GHSA-R659-8XFP-J327...

CVE-2021-3766

creationtimestamp| type| source ---|---|--- 2021-09-06 16:40:40+00:00| seen| https://t.me/cibsecurity/28294...

CVE-2021-3766

objection.js is vulnerable to Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution'...

CVE-2021-3766

objection.js is vulnerable to Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution'...

CVE-2021-3766

CVE-2021-3766 : A prototype pollution vulnerability in objection.js (vincit/objection.js) allows improper modification of Object.prototype attributes. Affected versions prior to 2.2.16 are vulnerable; the issue is patched in 2.2.16. Impact details in connected records indicate high/critical sever...

CVE-2021-3766 Prototype Pollution in vincit/objection.js

objection.js is vulnerable to Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution'...

CVE-2020-3766

Adobe Genuine Integrity Service (Windows) versions 6.4 and earlier are affected by an insecure file permissions vulnerability. The flaw stems from improper permissions on a resource used by the service, enabling local privilege escalation (from a low-privilege user to SYSTEM) when exploited. The ...

hoteldesartistes.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1015295 Security Researcher g0bl1nsec Helped patch 3766 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting hoteldesartistes.com...

evechambrot.hautetfort.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1008878 Security Researcher g0bl1nsec Helped patch 3766 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting evechambrot.hautetfort.co...

CVE-2019-3766

Dell EMC ECS versions prior to 3.4.0.0 contain an improper restriction of excessive authentication attempts vulnerability. An unauthenticated remote attacker may potentially perform a password brute-force attack to gain access to the targeted accounts...

CVE-2019-3766

Dell EMC ECS CVE-2019-3766 affects Dell EMC ECS versions prior to 3.4.0.0 and is due to an improper restriction of excessive authentication attempts. An unauthenticated remote attacker could perform a password brute-force to gain access to targeted accounts. The vulnerability is rated HIGH/CRITIC...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : PHP vulnerabilities (USN-3766-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3766-1 advisory. It was discovered that PHP incorrectly handled restarting certain child processes when php-fpm is used. A remote attacker could...

CVE-2018-3766

The CVE-2018-3766 issue affects the buttle module for Node.js, where versions

Debian Security Advisory DSA 3766-1 (mapserver - security update)

It was discovered that mapserver, a CGI-based framework for Internet map services, was vulnerable to a stack-based overflow. This issue allowed a remote user to crash the service, or potentially execute arbitrary code. OpenVAS Vulnerability Test $Id: deb3766.nasl 6607 2017-07-07 12:04:25Z cfische...

CVE-2016-3766

MPEG4Extractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not check whether memory allocation succeeds, which allows remote attackers to cause a denial of service device hang or reboot via a crafted file...

CVE-2016-3766

CVE-2016-3766 affects MPEG4Extractor.cpp in libstagefright within Android MediaServer. The vulnerability arises because memory allocation success is not checked, enabling a crafted media file to cause a denial of service (device hang or reboot). Affected Android lines include 4.x up to 4.4.4, 5.0...

CVE-2016-3766

MPEG4Extractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not check whether memory allocation succeeds, which allows remote attackers to cause a denial of service device hang or reboot via a crafted file...

CVE-2015-3766

CVE-2015-3766 affects the Apple kernel on iOS before 8.4.1 and OS X before 10.10.5. The issue stems from improper restrictions on the mach_port_space_info interface, which could allow a crafted app to obtain sensitive memory-layout information. Apple addressed this by disabling the mach_port_spac...

openSUSE Security Update : MozillaFirefox (MozillaFirefox-3688)

Mozilla Firefox was updated to update 3.6.13 fixing several security issues. MFSA 2010-74: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certa...

CVE-2013-3766

CVE-2013-3766 affects Oracle Primavera P6 Enterprise Project Portfolio Management within Oracle Primavera Products Suite 8.1–8.3. The vulnerability is described as an unspecified issue that allows remote authenticated users to affect integrity via unknown vectors related to Web Access. Root cause...