93 matches found
Foxit PDF Editor < 13.2.3 Multiple Vulnerabilities
According to its version, the Foxit PDF Editor application previously named Foxit PhantomPDF installed on the remote Windows host is prior to 13.2.3. It is, therefore affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on the...
Foxit Reader List Box Calculate Array Use-After-Free Vulnerability
Talos Vulnerability Report TALOS-2026-2365 Foxit Reader List Box Calculate Array Use-After-Free Vulnerability March 31, 2026 CVE Number CVE-2026-3779 SUMMARY A use-after-free vulnerability exists in the way Foxit Reader handles an Array object. A specially crafted JavaScript code inside a malicio...
CVE-2026-3779
creationtimestamp| type| source ---|---|--- 2026-03-30 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0382/ 2026-03-31 14:45:09+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mieg3rhqh224 2026-04-01 02:24:41+00:00| seen|...
Linux Distros Unpatched Vulnerability : CVE-2021-3779
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A malicious MySQL server can request local file content from a client using ruby-mysql prior to version 2.10.0 without explicit authorization from the user. Thi...
CGA-9GFM-MQ58-3779
Bulletin has no description...
CVE-2023-3779
The Essential Addons For Elementor plugin for WordPress is vulnerable to unauthenticated API key disclosure in versions up to, and including, 5.8.1 due to the plugin adding the API key to the source code of any page running the MailChimp block. This makes it possible for unauthenticated attackers...
CVE-2011-3779
PhpHostBot 2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by admin/createacct.php and certain other files...
CVE-2025-3779 Personizely <= 0.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via widgetId Parameter
The Personizely plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘widgetId’ parameter in all versions up to, and including, 0.10 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access a...
CVE-2025-3779 Personizely <= 0.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via widgetId Parameter
The Personizely plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘widgetId’ parameter in all versions up to, and including, 0.10 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access a...
CVE-2025-3779
The CVE CVE-2025-3779 affects the WordPress Personizely plugin (
WordPress Personizely plugin <= 0.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via widgetId Parameter vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via widgetId Parameter vulnerability discovered by Peter Thaleikis in WordPress Plugin Personizely versions = 0.10...
CVE-2024-3779
creationtimestamp| type| source ---|---|--- 2024-07-16 12:05:27+00:00| seen| https://t.me/cvedetector/923...
CVE-2024-3779 Denial of Service in ESET products for Windows
Denial of service vulnerability present shortly after product installation or upgrade, potentially allowed an attacker to render ESET’s security product inoperable, provided non-default preconditions were met...
CVE-2024-3779 Denial of Service in ESET products for Windows
Denial of service vulnerability present shortly after product installation or upgrade, potentially allowed an attacker to render ESET’s security product inoperable, provided non-default preconditions were met...
CVE-2023-3779
creationtimestamp| type| source ---|---|--- 2023-07-20 12:27:24+00:00| seen| https://t.me/cibsecurity/67029...
CVE-2023-3779
The Essential Addons For Elementor plugin for WordPress is vulnerable to unauthenticated API key disclosure in versions up to, and including, 5.8.1 due to the plugin adding the API key to the source code of any page running the MailChimp block. This makes it possible for unauthenticated attackers...
CVE-2023-3779
The CVE-2023-3779 entry affects the WordPress plugin “Essential Addons for Elementor” (WPDeveloper) for WordPress, indicating that versions up to and including 5.8.1 disclose MailChimp API keys via source code added to pages using the MailChimp block. Root cause: unauthenticated disclosure of API...
WordPress Essential Addons for Elementor Plugin <= 5.8.1 is vulnerable to Sensitive Data Exposure
Software Essential Addons for Elementor Type Plugin Vulnerable versions = 5.8.1 Fixed in 5.8.2 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-3779 Patch priority Low CVSS severity Low 5.3 Developer WPDeveloper PSID 58ea62fe2478 Credits Ulyses Saicha...
K01934914: Ruby-MySQL vulnerability CVE-2021-3779
Security Advisory Description A malicious MySQL server can request local file content from a client using ruby-mysql prior to version 2.10.0 without explicit authorization from the user. This issue was resolved in version 2.10.0 and later. CVE-2021-3779 Impact There is no impact; F5 products are...