93 matches found
CVE-2021-3783 Cross-site Scripting (XSS) - Reflected in yourls/yourls
yourls is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-3783
CVE-2021-3783 concerns the open‑source short URL platform YOURLS, with a reported vulnerability of Cross-site Scripting (XSS) due to improper input neutralization during web page generation. The available connected documents consistently identify the affected component as yourls/yourls and descri...
SUSE: Security Advisory (SUSE-SU-2013:1529-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2013:1390-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-3783
CVE-2020-3783 affects Adobe Photoshop CC 2019 (versions 20.0.8 and earlier) and Photoshop 2020 (versions 21.1 and earlier). The issue is a heap corruption vulnerability that could allow arbitrary code execution on successful exploitation. Remediation/mitigation: update to Photoshop CC 2019 20.0.9...
Adobe Photoshop CC 20.x < 20.0.9 / 21.x < 21.1.1 Multiple Vulnerabilities (macOS APSB20-14)
The version of Adobe Photoshop CC or Photoshop installed on the remote macOS or Mac OS X host is prior to 20.0.9/21.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb20-14 advisory. - Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versio...
Adobe Photoshop CC 20.x < 20.0.9 / 21.x < 21.1.1 Multiple Vulnerabilities (APSB20-14)
The version of Adobe Photoshop CC or Photoshop installed on the remote Windows host is prior to 20.0.9/21.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb20-14 advisory. - Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 an...
CVE-2019-3783
The CVE-2019-3783 entry affects Cloud Foundry Stratos prior to 2.3.0, where a public default session store secret can be brute-forced to hijack another user’s Stratos session and act on their behalf. Root cause: use of a public default session secret in deployed Stratos instances. Impact: attacke...
CVE-2019-3783 Cloud Foundry Stratos Deploys With Public Default Session Store Secret
Cloud Foundry Stratos, versions prior to 2.3.0, deploys with a public default session store secret. A malicious user with default session store secret can brute force another user's current Stratos session, and act on behalf of that user...
CVE-2019-3783
Cloud Foundry Stratos, versions prior to 2.3.0, deploys with a public default session store secret. A malicious user with default session store secret can brute force another user's current Stratos session, and act on behalf of that user...
Ubuntu: Security Advisory (USN-3783-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 18.04 LTS : Apache HTTP Server vulnerabilities (USN-3783-1)
The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3783-1 advisory. Robert Swiecki discovered that the Apache HTTP Server HTTP/2 module incorrectly destroyed certain streams. A remote attacker could possibly use this issu...
CVE-2018-3783
A privilege escalation detected in flintcms versions = 1.1.9 allows account takeover due to blind MongoDB injection in password reset...
CVE-2018-3783
CVE-2018-3783 applies to FlintCMS. Several advisories confirm a privilege escalation vulnerability in FlintCMS versions
CVE-2017-3783
CVE-2017-3783 is rejected/not used per the Initial Description.
CVE-2016-3783
CVE-2016-3783 is a rejected entry and not an active vulnerability.
Debian DSA-3783-1 : php5 - security update
Several issues have been discovered in PHP, a widely-used open source general-purpose scripting language. - CVE-2016-10158 Loading a TIFF or JPEG malicious file can lead to a Denial-of-Service attack when the EXIF header is being parsed. - CVE-2016-10159 Loading a malicious phar archive can cause...
