GHSA-X94W-CG8G-G593 vulnerabilities

Vulnerabilities for packages: libssh...

Amazon Linux 2 : glib2, --advisory ALAS2-2026-3803 (ALAS-2026-3803)

The version of glib2 installed on the remote host is prior to 2.56.1-9. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3803 advisory. A flaw was found in GLib. A state confusion issue exists in gdbusnodeinfonewforxml in the gio/gdbusintrospection.c file when...

CVE-2021-3803 vulnerabilities

Vulnerabilities for packages: py3-captum, arangodb...

ROOT-APP-NPM-CVE-2021-3803 CVE-2021-3803 in @rootio/nth-check - Patched by Root

Root has patched CVE-2021-3803 in the @rootio/nth-check package for Root:npm. Multiple fixed versions available...

CVE-2026-3803

A vulnerability was identified in Tenda i3 1.0.0.62204. This affects the function formWifiMacFilterGet of the file /goform/WifiMacFilterGet. The manipulation of the argument index leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly availab...

CVE-2026-3803

creationtimestamp| type| source ---|---|--- 2026-03-09 05:16:08+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3803...

MiracleLinux 4 : thunderbird-60.6.1-1.AXS4 (AXSA:2019-3803:01)

The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2019-3803:01 advisory. Security Fix - Thunderbird PAC Proxy Auto -ConfigurationPAC PAC CVE-2018-18506 - CVE-2019-9788, CVE-2019-9790, CVE-2019-9791, CVE-2019-9792,...

DoS (Denial of Service) Third-Party Dependency in Bitbucket Data Center and Server - CVE-2021-3803

This High severity vulnerability known as CVE-2021-3803 was introduced in 1.0.2, 8.19.0, 8.19.1, 8.19.2, 8.19.3, 8.19.4, 8.19.5, 8.19.6, 8.19.7, 8.19.8, 8.19.9, 8.19.10, 8.19.11, 8.19.12, 8.19.13, 8.19.14, 8.19.15 of Bitbucket Data Center and Server. This vulnerability with a CVSS Score of 7.5 an...

CVE-2011-3803

SugarCRM 6.1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/Sugar5/layoututils.php and certain other files...

CVE-2025-3803

creationtimestamp| type| source ---|---|--- 2025-04-19 16:02:36+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12586 2025-04-19 16:09:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln6ji7obr42u 2025-04-19 16:28:54+00:00| seen|...

CVE-2025-3803 Tenda W12/i24 httpd cgiSysScheduleRebootSet stack-based overflow

A vulnerability was found in Tenda W12 and i24 3.0.0.42887/3.0.0.53644. It has been rated as critical. This issue affects the function cgiSysScheduleRebootSet of the file /bin/httpd. The manipulation of the argument rebootDate leads to stack-based buffer overflow. The attack may be initiated...

Cisco IP Phone 7920 SNMP Information Disclosure (CVE-2005-3803)

Cisco IP Phone VoIP 7920 1.08 contains certain hard-coded fixed public and private SNMP community strings that cannot be changed, which allows remote attackers to obtain sensitive information. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for mor...

CVE-2024-3803 Vesystem Cloud Desktop fileupload.php unrestricted upload

A vulnerability classified as critical was found in Vesystem Cloud Desktop up to 20240408. This vulnerability affects unknown code of the file /Public/webuploader/0.1.5/server/fileupload.php. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely...

CVE-2024-3803

CVE-2024-3803 affects Vesystem Cloud Desktop up to 20240408. The vulnerability resides in /Public/webuploader/0.1.5/server/fileupload.php, where manipulating the file parameter enables an unrestricted upload. The issue is exploitable remotely and the exploit has been publicly disclosed. Affected ...

Malicious code in wlwz-2312-3803 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10a553f09c3a8b2bd4c55f1f95ad0c6633854ebcda41552162699a8bf2f714ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in wlwz-2312-3803

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Security Bulletin: IBM QRadar User Behavior Analytics is vulnerable to components with known vulnerabilities

Summary IBM QRadar User Behavior Analytics contains vulnerable packages/components and that may be identified and potentially exploited. The packages have been updated in the latest release and the vulnerabilities identified in the CVEs have been addressed. Please follow the instructions in the...

CVE-2023-3803

creationtimestamp| type| source ---|---|--- 2023-07-21 07:33:12+00:00| seen| https://t.me/cibsecurity/67068...

CVE-2023-3803 Chengdu Flash Flood Disaster Monitoring and Warning System File Name ImageStationDataService.asmx random values

A vulnerability classified as problematic has been found in Chengdu Flash Flood Disaster Monitoring and Warning System 2.0. This affects an unknown part of the file /Service/ImageStationDataService.asmx of the component File Name Handler. The manipulation leads to insufficiently random values. Th...

CVE-2023-3803

CVE-2023-3803 affects Chengdu Flash Flood Disaster Monitoring and Warning System 2.0, specifically the File Name Handler component and the /Service/ImageStationDataService.asmx file. The root cause is a flaw that leads to insufficiently random values. Documented attack complexity is high and expl...