93 matches found
CVE-2025-3783
A vulnerability classified as critical was found in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-product.php. The manipulation of the argument Avatar leads to unrestricted upload. The attack can be...
CVE-2025-3783
creationtimestamp| type| source ---|---|--- 2025-04-18 05:58:43+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12390...
CVE-2025-3783 SourceCodester Web-based Pharmacy Product Management System add-product.php unrestricted upload
A vulnerability classified as critical was found in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-product.php. The manipulation of the argument Avatar leads to unrestricted upload. The attack can be...
openSUSE: Security Advisory for the Linux Kernel (Live Patch 41 for SLE 15 SP3) (SUSE-SU-2024:3783-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Rocky Linux 8 : firefox (RLSA-2024:3783)
The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:3783 advisory. firefox: Arbitrary JavaScript execution in PDF.js CVE-2024-4367 firefox: IndexedDB files retained in private browsing mode CVE-2024-4767 firefox:...
Oracle Linux 8 : firefox (ELSA-2024-3783)
The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2024-3783 advisory. 115.11.0-1.0.1 - Add firefox-oracle-default-prefs.js and remove the corresponding OpenELA file 115.11.0-1 - Update to 115.11.0 build1 Tenable has...
CVE-2024-3783
WBSAirback 21.02.04 Backup Agents contains a path traversal vulnerability that a low-privilege user can exploit to download files from the system. Affected component: path handling in WBSAirback; impact is confidentiality breach. No remediation details are provided in the supplied documents.
CVE-2024-3783 Path Traversal vulnerability in WBSAirback
The Backup Agents section in WBSAirback 21.02.04 is affected by a Path Traversal vulnerability, allowing a user with low privileges to download files from the system...
CVE-2024-3783 Path Traversal vulnerability in WBSAirback
The Backup Agents section in WBSAirback 21.02.04 is affected by a Path Traversal vulnerability, allowing a user with low privileges to download files from the system...
Debian dla-3783 : expat - security update
The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3783 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3783-1 [email protected] https://www.debian.org/lts/security/...
CVE-2023-3783
creationtimestamp| type| source ---|---|--- 2023-07-20 12:32:26+00:00| seen| https://t.me/cibsecurity/67031...
CVE-2023-3783
Webile 1.0.1 has a cross-site scripting vulnerability in the HTTP POST Request Handler, triggered by manipulating the new_file_name/c argument. This is a remote-authenticated? issue as per description (attack can be launched remotely) with public exploit disclosure. The root cause is an input han...
MariaDB 10.0.0 < 10.0.4 Multiple Vulnerabilities
The version of MariaDB installed on the remote host is prior to 10.0.4. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.0.4 advisory. - Unspecified vulnerability in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect...
@automatacontrols/automata-thermostat (>=1.0.7 <=1.0.12), @clysema/node-red-contrib-ui-week-schedule (>=0.1.0 <=0.1.4) +30 more potentially affected by CVE-2022-3783 via node-red-dashboard (>=2.13.2 <=3.1.7)
node-red-dashboard NPM version =2.13.2, =1.0.7, =0.1.0, =0.0.1, =1.0.0, =2.0.0, =0.3.0, =0.0.5, =1.0.5-alpha.11, =2.5.0, =0.0.3, =1.2.0, =0.5.1, =0.8.0 - mtr-dashboard =0.0.1 and more Source cves: CVE-2022-3783 Source advisory: OSV:GHSA-VRV9-3X3W-FFXW...
CVE-2022-3783
creationtimestamp| type| source ---|---|--- 2022-10-31 23:13:28+00:00| seen| https://t.me/cibsecurity/52321...
CVE-2022-3783 node-red-dashboard ui_text Format ui-component-ctrl.js cross site scripting
A vulnerability, which was classified as problematic, has been found in node-red-dashboard. This issue affects some unknown processing of the file components/ui-component/ui-component-ctrl.js of the component uitext Format Handler. The manipulation leads to cross site scripting. The attack may be...
CVE-2022-3783
The CVE-2022-3783 issue affects node-red-dashboard, specifically the ui_text Format Handler’s file components/ui-component/ui-component-ctrl.js. The vulnerability enables cross-site scripting (XSS) and could be exploited remotely. Public references indicate a patch exists (patch SHA 9305d1a82f19b...
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : telnet (SUSE-SU-2022:3783-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:3783-1 advisory. - CVE-2022-39028: Fixed NULL pointer dereference in telnetd bsc1203759. Tenable has extracted the precedi...
