CVE-2020-3784

Adobe Photoshop CC 2019 (versions 20.0.8 and earlier) and Photoshop 2020 (versions 21.1 and earlier) are affected by a memory corruption vulnerability (CVE-2020-3784) that could allow arbitrary code execution when exploited. The connected Red Hat, NVD, and Nessus entries confirm the affected prod...

Adobe Photoshop CC 20.x < 20.0.9 / 21.x < 21.1.1 Multiple Vulnerabilities (macOS APSB20-14)

The version of Adobe Photoshop CC or Photoshop installed on the remote macOS or Mac OS X host is prior to 20.0.9/21.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb20-14 advisory. - Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versio...

Adobe Photoshop CC 20.x < 20.0.9 / 21.x < 21.1.1 Multiple Vulnerabilities (APSB20-14)

The version of Adobe Photoshop CC or Photoshop installed on the remote Windows host is prior to 20.0.9/21.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb20-14 advisory. - Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 an...

CVE-2019-3784

CVE-2019-3784 affects Cloud Foundry Stratos prior to version 2.3.0 . The issue is an insecure session that can be spoofed when hosted on Cloud Foundry with multiple instances using the default embedded SQLite database, allowing a remote authenticated attacker to switch sessions to another user sh...

CVE-2019-3784

Cloud Foundry Stratos, versions prior to 2.3.0, contains an insecure session that can be spoofed. When deployed on cloud foundry with multiple instances using the default embedded SQLite database, a remote authenticated malicious user can switch sessions to another user with the same session id...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : AppArmor update (USN-3784-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3784-1 advisory. As a security improvement, this update adjusts the private-files abstraction to disallow writing to thumbnailer configuration files...

@drubin/garden-cli (>=0.8.0-rc10, <=0.8.0-rc8), eysi-garden-test (>=0.8.1-ci-test, <=0.8.1-ci-test-3) +5 more potentially affected by CVE-2018-3784 via cryo (>=0.0.5, <=0.0.6)

cryo NPM version =0.0.5, =0.8.0-rc10, =0.8.1-ci-test, =0.0.1, =0.1.0-alpha.0e685d62, =0.1.1, =0.1.2 Source cves: CVE-2018-3784 Source advisory: OSV:GHSA-38F5-GHC2-FCMV...

CVE-2018-3784

creationtimestamp| type| source ---|---|--- 2018-08-21 17:02:43+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-38f5-ghc2-fcmv...

CVE-2018-3784

A code injection in cryo 0.0.6 allows an attacker to arbitrarily execute code due to insecure implementation of deserialization...

CVE-2018-3784

CVE-2018-3784 affects cryo, a Node.js module for JSON-like serialization. The root cause is insecure deserialization, allowing an attacker to craft payloads (e.g., via proto manipulation or serialized functions) that can lead to arbitrary code execution. Several sources (NVD, CNVD, PRION, OSV) de...

CVE-2017-3784

...

CVE-2017-3784

CVE-2017-3784 is rejected/not active per the description; this CVE ID does not represent an active vulnerability entry.

CVE-2016-3784

...

CVE-2016-3784

CVE-2016-3784 entry is rejected/not used and does not represent an active vulnerability entry.

litv.tv XSS vulnerability

Vulnerable URL: https://www.litv.tv/search/search.do?searchinput=searchinput%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E&cfwaftk=065929002t7GnPsgV3pcSXYu6uDlX-GR9C8 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:|...

Cisco Adaptive Security Appliances Software Security Bypass Vulnerability

Cisco Adaptive Security Appliances ASA, Adaptive Security Appliances Software is a set of operating systems running in firewalls from the U.S. company Cisco Cisco. A security vulnerability exists in the Border Gateway Protocol BGP Bidirectional Forwarding Detection BFD implementation in Cisco ASA...

Debian DSA-3784-1 : viewvc - security update

Thomas Gerbet discovered that viewvc, a web interface for CVS and Subversion repositories, did not properly sanitize user input. This problem resulted in a potential Cross-Site Scripting vulnerability. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

Debian Security Advisory DSA 3784-1 (viewvc - security update)

Thomas Gerbet discovered that viewvc, a web interface for CVS and Subversion repositories, did not properly sanitize user input. This problem resulted in a potential Cross-Site Scripting vulnerability. OpenVAS Vulnerability Test $Id: deb3784.nasl 6607 2017-07-07 12:04:25Z cfischer $ Auto-generate...

Debian: Security Advisory (DSA-3784-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

APPLE-SA-2015-10-15-1 Keynote 6.6, Pages 5.6, Numbers 3.6, and iWork for iOS 2.6

APPLE-SA-2015-10-15-1 Keynote 6.6, Pages 5.6, Numbers 3.6, and iWork for iOS 2.6 Keynote 6.6, Pages 5.6, Numbers 3.6, and iWork for iOS 2.6 are now available which address the following: Keynote, Pages, and Numbers Available for: OS X Yosemite v10.10.4 or later, iOS 8.4 or later Impact: Opening a...