Rocky Linux 8 : virt:rhel and virt-devel:rhel (RLSA-2023:3822)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2023:3822 advisory. - A vulnerability was found in libvirt. This security flaw ouccers due to repeatedly querying an SR-IOV PCI device's capabilities that exposes a memory leak caus...

BELL-CVE-2019-3822 CVE-2019-3822 does not affect BellSoft software

Bulletin has no description...

CVE-2023-3822

creationtimestamp| type| source ---|---|--- 2023-07-21 18:23:41+00:00| seen| https://t.me/cibsecurity/67099...

CVE-2023-3822 Cross-site Scripting (XSS) - Reflected in pimcore/pimcore

Cross-site Scripting XSS - Reflected in GitHub repository pimcore/pimcore prior to 10.6.4...

CVE-2023-3822 Cross-site Scripting (XSS) - Reflected in pimcore/pimcore

Cross-site Scripting XSS - Reflected in GitHub repository pimcore/pimcore prior to 10.6.4...

CVE-2023-3822

CVE-2023-3822 is a reflected Cross-site Scripting (XSS) vulnerability in pimcore/pimcore prior to 10.6.4. The connected PT-2023-4079 entry indicates the issue affects pimcore/pimcore versions before 10.6.4 and recommends upgrading to 10.6.4 or later; exploitation is noted as possible via a PoC in...

CVE-2023-3822 Cross-site Scripting (XSS) - Reflected in pimcore/pimcore

Cross-site Scripting XSS - Reflected in GitHub repository pimcore/pimcore prior to 10.6.4...

RHEL 8 : virt:rhel and virt-devel:rhel (RHSA-2023:3822)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3822 advisory. Kernel-based Virtual Machine KVM offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packag...

K84141449: MySQL vulnerabilities CVE-2019-2830, CVE-2019-2834, and CVE-2019-3822

Security Advisory Description CVE-2019-2830 Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Optimizer. Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple...

SUSE CVE-2019-3822

libcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow. The function creating an outgoing NTLM type-3 header lib/vauth/ntlm.c:Curlauthcreatentlmtype3message, generates the request HTTP header contents based on previously received data. The check that exists ...

CVE-2022-3822

creationtimestamp| type| source ---|---|--- 2022-11-28 16:27:53+00:00| seen| https://t.me/cibsecurity/53560...

CVE-2022-3822

CVE-2022-3822 affects the Donations via PayPal WordPress plugin (pre-1.9.9). The issue is due to insufficient sanitising/escaping of some settings, enabling stored XSS by highly privileged users (e.g., admins) even when unfiltered_html is disallowed, notably in multisite setups. Connected sources...

CVE-2022-3822 Donations via PayPal < 1.9.9 - Admin+ Stored XSS

The Donations via PayPal WordPress plugin before 1.9.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

Ubuntu: Security Advisory (USN-3822-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-3822

creationtimestamp| type| source ---|---|--- 2021-09-27 16:34:55+00:00| seen| https://t.me/cibsecurity/29456...

CVE-2021-3822

jsoneditor is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3822

jsoneditor is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3822

jsoneditor is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3822

The CVE-2021-3822 entry concerns jsoneditor (josdejong/jsoneditor), where the getInnerText function uses an inefficient regex for trimmedValue, creating potential Regular Expression Denial of Service (ReDoS). Multiple connected sources corroborate a ReDoS risk affecting jsoneditor, with reference...

SUSE: Security Advisory (SUSE-SU-2019:0339-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...