213 matches found
CVE-2023-3776 affecting package kernel for versions less than 5.15.122.1-2
CVE-2023-3776 affecting package kernel for versions less than 5.15.122.1-2. A patched version of the package is available...
Important: kernel
Issue Overview: A use-after-free vulnerability in the Linux kernel's net/sched: clsu32 component can be exploited to achieve local privilege escalation. If tcfchangeindev fails, u32setparms will immediately return an error after incrementing or decrementing the reference counter in tcfbindfilter...
BELL-CVE-2023-3776 CVE-2023-3776 does not affect BellSoft software
Bulletin has no description...
CVE-2023-3776
CVE-2023-3776: A use-after-free in Linux kernel net/sched cls_fw can lead to local privilege escalation if an attacker controls the reference counter in tcf_bind_filter and frees the object by setting the counter to zero. The issue stems from fw_set_parms() returning after reference counter adjus...
CVE-2023-3776 Use-after-free in Linux kernel's net/sched: cls_fw component
A use-after-free vulnerability in the Linux kernel's net/sched: clsfw component can be exploited to achieve local privilege escalation. If tcfchangeindev fails, fwsetparms will immediately return an error after incrementing or decrementing the reference counter in tcfbindfilter. If an attacker ca...
CVE-2023-3776 Use-after-free in Linux kernel's net/sched: cls_fw component
A use-after-free vulnerability in the Linux kernel's net/sched: clsfw component can be exploited to achieve local privilege escalation. If tcfchangeindev fails, fwsetparms will immediately return an error after incrementing or decrementing the reference counter in tcfbindfilter. If an attacker ca...
SUSE CVE-2018-3776
Improper input validator in Nextcloud Server prior to 12.0.3 and 11.0.5 could lead to an attacker's actions not being logged in the audit log...
CVE-2022-3776
The CVE-2022-3776 entry concerns the WordPress plugin Restaurant Menu – Food Ordering System – Table Reservation. A CSRF flaw arises from missing or incorrect nonce validation in AJAX actions (e.g., forms_action, set_option, chosen_options) in versions up to and including 2.3.1. This allows unaut...
CVE-2021-3776
creationtimestamp| type| source ---|---|--- 2021-11-13 12:39:55+00:00| seen| https://t.me/cibsecurity/32370...
CVE-2021-3776
showdoc is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3776 Cross-Site Request Forgery (CSRF) in star7th/showdoc
showdoc is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3776
CVE-2021-3776 corresponds to a CSRF vulnerability in the open-source tool ShowDoc. Multiple connected sources (CNVD-2021-89160, RH/CVE-2021-3776, OSV, CNVD/CNNVD, CVE listings) corroborate that ShowDoc is vulnerable to CSRF, stemming from insufficient filtering/restriction of cookies in the softw...
Adobe Photoshop CC 20.x < 20.0.9 / 21.x < 21.1.1 Multiple Vulnerabilities (macOS APSB20-14)
The version of Adobe Photoshop CC or Photoshop installed on the remote macOS or Mac OS X host is prior to 20.0.9/21.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb20-14 advisory. - Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versio...
Adobe Photoshop CC 20.x < 20.0.9 / 21.x < 21.1.1 Multiple Vulnerabilities (APSB20-14)
The version of Adobe Photoshop CC or Photoshop installed on the remote Windows host is prior to 20.0.9/21.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb20-14 advisory. - Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 an...
CVE-2019-3776
Vulnerability summary (CVE-2019-3776) : Pivotal Operations Manager is affected by a reflected cross-site scripting vulnerability in several versions (2.1.x before 2.1.20, 2.2.x before 2.2.16, 2.3.x before 2.3.10, 2.4.x before 2.4.3). Impact (as described) : A remote attacker who can lure a user t...
Ubuntu 14.04 LTS : Linux kernel (Xenial HWE) vulnerabilities (USN-3776-2)
The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3776-2 advisory. USN-3776-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enableme...
Ubuntu: Security Advisory (USN-3776-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2018-3776
Improper input validator in Nextcloud Server prior to 12.0.3 and 11.0.5 could lead to an attacker's actions not being logged in the audit log...
CVE-2018-3776
CVE-2018-3776 affects Nextcloud Server; an improper input validator in affected versions prior to 12.0.3 and 11.0.5 could allow an attacker’s actions to bypass audit-logging. The vulnerability is documented across multiple sources (including Red Hat and OpenVAS feeds) and is described as a loggin...
CVE-2017-3776
Lenovo Help Android mobile app versions earlier than 6.1.2.0327 allowed information to be transmitted over an HTTP channel, permitting others observing the channel to potentially see this information...