Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : NLTK vulnerability (USN-5215-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5215-1 advisory. Srikantha Prathi discovered that NLTK incorrectly handled specially crafted input. An attacker could use this vulnerability to cause a...

SUSE: Security Advisory (SUSE-SU-2023:3828-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-3828

A vulnerability was found in Bug Finder Listplace Directory Listing Platform 3.0. It has been classified as problematic. This affects an unknown part of the file /listplace/user/coverPhotoUpdate of the component Photo Handler. The manipulation of the argument usercoverphoto leads to cross site...

CVE-2023-3828 Bug Finder Listplace Directory Listing Platform Photo coverPhotoUpdate cross site scripting

A vulnerability was found in Bug Finder Listplace Directory Listing Platform 3.0. It has been classified as problematic. This affects an unknown part of the file /listplace/user/coverPhotoUpdate of the component Photo Handler. The manipulation of the argument usercoverphoto leads to cross site...

CVE-2023-3828

CVE-2023-3828 concerns Bug Finder Listplace Directory Listing Platform 3.0. Affected component: Photo Handler, specifically the function handling the file portion at /listplace/user/coverPhotoUpdate. The vulnerability arises from manipulating the argument user_cover_photo, enabling cross-site scr...

Ubuntu: Security Advisory (USN-5215-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-3828

creationtimestamp| type| source ---|---|--- 2022-11-28 16:27:59+00:00| seen| https://t.me/cibsecurity/53563...

CVE-2022-3828 Video Thumbnails <= 2.12.3 - Admin+ Stored XSS

The Video Thumbnails WordPress plugin through 2.12.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2022-3828 Video Thumbnails <= 2.12.3 - Admin+ Stored XSS

The Video Thumbnails WordPress plugin through 2.12.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2022-3828

Video Thumbnails WordPress plugin (≤ version 2.12.3) contains a stored XSS vulnerability due to unsanitized/uncleaned settings, exploitable by high-privilege users (e.g., admins) even when unfiltered_html is disallowed. Affected component: plugin settings. Impact: stored XSS with potential for ad...

CVE-2022-40100

The CVE-2022-40100 entry concerns Tenda i9, affected in version 1.0.0.8(3828). A command injection vulnerability exists in the FormexeCommand function. The issue is rated with an NV D/CVSS3.1 base score 9.8 (CRITICAL) , with network access required and no authentication/UI interaction, and potent...

Tenda i9 缓冲区错误漏洞

Tenda i9 is a ceiling-mountable wireless access point from Tenda China. A security vulnerability exists in Tenda i9 v1.0.0.83828, which stems from a buffer overflow in the formWifiMacFilterGet method...

OESA-2022-1565 ansible security update

Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred t...

Mageia: Security Advisory (MGASA-2019-0114)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

advanced-text-processing (>=0.2.0 <=0.2.1), alibaba-suanfa (=1.0.0) +258 more potentially affected by CVE-2021-3828 via nltk (>=2.0.4 <=3.6.3)

nltk PYPI version =2.0.4, =0.2.0, =1.0.0, =1.3.1, =1.6.0, =0.4.1, =0.1.0b1, =0.0.37, =0.1.2, =0.0.6, =0.1.0, =0.6.14, =0.0.1, =0.0.14 and more Source cves: CVE-2021-3828 Source advisory: OSV:GHSA-2WW3-FXVQ-293J...

CVE-2021-3828

creationtimestamp| type| source ---|---|--- 2021-09-27 16:34:57+00:00| seen| https://t.me/cibsecurity/29457...

CVE-2021-3828

nltk is vulnerable to Inefficient Regular Expression Complexity...

DEBIAN-CVE-2021-3828

nltk is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3828

nltk is vulnerable to Inefficient Regular Expression Complexity...

advanced-text-processing (>=0.2.0 <=0.2.1), alibaba-suanfa (=1.0.0) +258 more potentially affected by CVE-2021-3828 via nltk (>=2.0.4 <=3.6.3)

nltk PYPI version =2.0.4, =0.2.0, =1.0.0, =1.3.1, =1.6.0, =0.4.1, =0.1.0b1, =0.0.37, =0.1.2, =0.0.6, =0.1.0, =0.6.14, =0.0.1, =0.0.14 and more Source cves: CVE-2021-3828 Source advisory: OSV:PYSEC-2021-356...