CVE-2011-3784

Francisco Burzi PHP-Nuke 8.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/Odyssey/theme.php and certain other files...

CVE-2009-3784

Open redirect vulnerability in Simplenews Statistics 6.x before 6.x-2.0, a module for Drupal, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CGA-WFV6-3784-PJ2P

Bulletin has no description...

Oracle Linux 8 : thunderbird (ELSA-2024-3784)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2024-3784 advisory. 115.11.0-1.0.1 - Add Oracle prefs file 115.11.0-1 - Update to 115.11.0 build2 Tenable has extracted the preceding description block directly from the...

CVE-2024-3784 Improper Neutralization of Server-Side Includes (SSI) vulnerability in WBSAirback

Vulnerability in WBSAirback 21.02.04, which involves improper neutralisation of Server-Side Includes SSI, through S3 Accounts /admin/CloudAccounts. Exploitation of this vulnerability could allow a remote user to execute arbitrary code...

CVE-2024-3784

CVE-2024-3784 affects WBSAirback 21.02.04. The vulnerability is due to improper neutralisation of Server-Side Includes (SSI) through the S3 Accounts API at /admin/CloudAccounts, which could allow a remote attacker to execute arbitrary code. Public documents describe the issue and impact but do no...

CVE-2024-3784 Improper Neutralization of Server-Side Includes (SSI) vulnerability in WBSAirback

Vulnerability in WBSAirback 21.02.04, which involves improper neutralisation of Server-Side Includes SSI, through S3 Accounts /admin/CloudAccounts. Exploitation of this vulnerability could allow a remote user to execute arbitrary code...

Debian: Security Advisory (DLA-3784-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-3784

creationtimestamp| type| source ---|---|--- 2023-10-04 20:12:05+00:00| seen| https://t.me/cibsecurity/71610...

CVE-2021-3784 Garuda Linux Improper Authorization

Garuda Linux performs an insecure user creation and authentication that allows any user to impersonate the created account. By creating users from the 'Garuda settings manager', an insecure procedure is performed that keeps the created user without an assigned password during some seconds. This...

CVE-2021-3784

Garuda Linux is affected by CVE-2021-3784 due to an insecure user creation/authentication flow: when creating a user via the Garuda Settings Manager, the process may leave the new account without a password for a brief window, enabling an attacker to authenticate as that user locally. The vulnera...

CVE-2023-3784

creationtimestamp| type| source ---|---|--- 2023-07-20 12:32:25+00:00| seen| https://t.me/cibsecurity/67030...

CVE-2023-3784

CVE-2023-3784 affects Dooblou WiFi File Explorer 1.13.3. The vulnerability is a cross-site scripting (XSS) flaw triggered by manipulating the argument search/order/download/mode in an unspecified function. It can be exploited remotely and the public exploit is reported. Public details confirm the...

CVE-2022-3784

creationtimestamp| type| source ---|---|--- 2022-10-31 23:13:36+00:00| seen| https://t.me/cibsecurity/52326...

CVE-2022-3784

CVE-2022-3784 affects Bento4 5e7bb34. The vulnerable code path is AP4_Mp4AudioDsiParser::ReadBits in Ap4Mp4AudioInfo.cpp (component mp4hls). The vulnerability is a heap-based buffer overflow, enabling remote attack, with a publicly disclosed exploit. No additional impact, vector, or patch details...

CVE-2020-3784

Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2020-3784

Adobe Photoshop CC 2019 (versions 20.0.8 and earlier) and Photoshop 2020 (versions 21.1 and earlier) are affected by a memory corruption vulnerability (CVE-2020-3784) that could allow arbitrary code execution when exploited. The connected Red Hat, NVD, and Nessus entries confirm the affected prod...

Adobe Photoshop CC 20.x < 20.0.9 / 21.x < 21.1.1 Multiple Vulnerabilities (APSB20-14)

The version of Adobe Photoshop CC or Photoshop installed on the remote Windows host is prior to 20.0.9/21.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb20-14 advisory. - Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 an...

Adobe Photoshop CC 20.x < 20.0.9 / 21.x < 21.1.1 Multiple Vulnerabilities (macOS APSB20-14)

The version of Adobe Photoshop CC or Photoshop installed on the remote macOS or Mac OS X host is prior to 20.0.9/21.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb20-14 advisory. - Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versio...

CVE-2019-3784

CVE-2019-3784 affects Cloud Foundry Stratos prior to version 2.3.0 . The issue is an insecure session that can be spoofed when hosted on Cloud Foundry with multiple instances using the default embedded SQLite database, allowing a remote authenticated attacker to switch sessions to another user sh...