CVE-2020-3787

CVE-2020-3787 affects Adobe Photoshop CC 2019 (versions 20.0.8 and earlier) and Photoshop 2020 (versions 21.1 and earlier). The issue is a memory corruption vulnerability that could allow arbitrary code execution when exploited. Remediation per APSB20-14 is to update to Photoshop CC 2019 version ...

Adobe Photoshop CC 20.x < 20.0.9 / 21.x < 21.1.1 Multiple Vulnerabilities (macOS APSB20-14)

The version of Adobe Photoshop CC or Photoshop installed on the remote macOS or Mac OS X host is prior to 20.0.9/21.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb20-14 advisory. - Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versio...

Adobe Photoshop CC 20.x < 20.0.9 / 21.x < 21.1.1 Multiple Vulnerabilities (APSB20-14)

The version of Adobe Photoshop CC or Photoshop installed on the remote Windows host is prior to 20.0.9/21.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb20-14 advisory. - Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 an...

CVE-2019-3787

Cloud Foundry UAA vulnerability CVE-2019-3787 affects UAA releases prior to v73.0.0. When a user email is not provided or the username lacks an @, UAA falls back to appending unknown.org to the email, which means password-recovery emails can be sent to an owned domain. This creates a potential ta...

CVE-2019-3787 UAA defaults email address to an insecure domain

Cloud Foundry UAA, versions prior to 73.0.0, falls back to appending “unknown.org” to a user's email address when one is not provided and the user name does not contain an @ character. This domain is held by a private company, which leads to attack vectors including password recovery emails sent ...

h-include (=1.0.0), hinclude (>=1.0.1 <=1.1.0) +3 more potentially affected by CVE-2018-3787 via simplehttpserver (>=0.0.6 <=0.1.1)

simplehttpserver NPM version =0.0.6, =1.0.1, =0.0.1, =0.0.2 Source cves: CVE-2018-3787 Source advisory: OSV:GHSA-GPVJ-Q7FP-JCCH...

CVE-2018-3787

The CVE-2018-3787 vulnerability affects the Python-based simplehttpserver project. Affected versions are prior to 0.2.1, where the server concatenates the requested URL path to the web root, enabling path traversal and the listing of arbitrary server files. Impact described across multiple source...

CVE-2018-3787

Path traversal in simplehttpserver v0.2.1 allows listing any file on the server...

CVE-2017-3787

This CVE entry is rejected/not used.

CVE-2017-3787

...

CVE-2016-3787

CVE-2016-3787 entry is rejected/not used; this ID does not represent an active vulnerability.

CVE-2016-3787

...

Debian DSA-3787-1 : tomcat7 - security update

It was discovered that a programming error in the processing of HTTPS requests in the Apache Tomcat servlet and JSP engine may result in denial of service via an infinite loop. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extract...

Debian Security Advisory DSA 3787-1 (tomcat7 - security update)

It was discovered that a programming error in the processing of HTTPS requests in the Apache Tomcat servlet and JSP engine may result in denial of service via an infinite loop. OpenVAS Vulnerability Test $Id: deb3787.nasl 8972 2018-02-28 07:02:10Z cfischer $ Auto-generated from advisory DSA 3787-...

canalblog.com XSS vulnerability

Vulnerable URL: http://www.canalblog.com/search/posts/xss" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3787 VIP website status:| Yes Check canalblog.com SSL connection:| Grade: ...

CVE-2015-3787

The vulnerability CVE-2015-3787 affects the Bluetooth subsystem in Apple OS X prior to 10.10.5 , enabling a remote attacker to cause a denial of service via malformed Bluetooth ACL packets. The issue is addressed in OS X 10.10.5 with the corresponding security update. Public references indicate t...

Oracle Solaris Critical Patch Update : july2013_SRU1_4

This Solaris system is missing necessary patches to address a critical security update : - Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: Kernel. Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability allows successful...

CVE-2014-3787

CVE-2014-3787 affects SAP NetWeaver 7.20 and earlier. Multiple connected sources confirm that remote attackers can read arbitrary SAP Central User Administration (SAP CUA) tables via unspecified vectors. The CVSS estimate in NVD indicates a network-accessible, low-complexity漏洞 with partial confid...

CVE-2013-3787

CVE-2013-3787 concerns an unspecified vulnerability in Oracle Solaris 10 and 11 affecting the Kernel. The connected Nessus/SOLARIS plugin notes a vulnerability in the Solaris Kernel that enables difficult-to-exploit, unauthenticated remote network attacks via SCTP, potentially causing partial den...

CVE-2011-3787

CVE-2011-3787 affects phpScheduleIt 1.2.12. An information-disclosure flaw exists where remote attackers can obtain sensitive data by requesting a .php file directly, with the installation path leaked in an error message (demonstrated by templates/schedule.template.php and related files). The vul...