115 matches found
EUVD-2026-3829
Missing Authorization vulnerability in Brecht WP Recipe Maker wp-recipe-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Recipe Maker: from n/a through = 10.2.4...
GO-2025-3829 Moby firewalld reload removes bridge network isolation in github.com/docker/docker
Moby firewalld reload removes bridge network isolation in github.com/docker/docker...
CVE-2023-3829
A vulnerability was found in Bug Finder ICOGenie 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /user/ticket/create of the component Support Ticket Handler. The manipulation of the argument message leads to cross site scripting. The attack can be...
CVE-2022-3829
The Font Awesome 4 Menus WordPress plugin through 4.7.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2021-3829
openwhyd is vulnerable to URL Redirection to Untrusted Site...
CVE-2020-3829
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to gain elevated privileges...
Alibaba Cloud Linux 3 : 0008: gnutls (ALINUX3-SA-2021:0008)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2021:0008 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2019-3829: A vulnerability was found i...
CVE-2025-3829
A vulnerability was found in PHPGurukul Men Salon Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/sales-reports-detail.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to launch the attack...
CVE-2025-3829 PHPGurukul Men Salon Management System sales-reports-detail.php sql injection
A vulnerability was found in PHPGurukul Men Salon Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/sales-reports-detail.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to launch the attack...
CVE-2025-3829
creationtimestamp| type| source ---|---|--- 2025-04-19 21:56:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114366860108376362 2025-04-20 17:02:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12618 2025-04-20 18:48:53+00:00| seen|...
CVE-2024-3829
qdrant/qdrant version 1.9.0-dev is vulnerable to arbitrary file read and write during the snapshot recovery process. Attackers can exploit this vulnerability by manipulating snapshot files to include symlinks, leading to arbitrary file read by adding a symlink that points to a desired file on the...
openSUSE: Security Advisory for the Linux Kernel RT (Live Patch 10 for SLE 15 SP5) (SUSE-SU-2024:3829-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DLA-3829-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian dla-3829 : libmilter-dev - security update
The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3829 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3829-2 [email protected] https://www.debian.org/lts/security/...
aana (>=0.2.1 <=0.2.2.2), ace-context-engineering (>=0.1.3 <=0.1.4) +749 more potentially affected by CVE-2024-3829 via qdrant-client (>=0.10.3 <=1.8.2)
qdrant-client PYPI version =0.10.3, =0.2.1, =0.1.3, =1.0.0, =0.8.1, =0.13.0, =0.4.0, =1.0.0b251001, =0.1.1, =0.0.1, =0.2.0, =0.3.0 and more Source cves: CVE-2024-3829 Source advisory: OSV:GHSA-7M75-X27W-R52R...
CVE-2024-3829
qdrant/qdrant version 1.9.0-dev is vulnerable to arbitrary file read and write during the snapshot recovery process. Attackers can exploit this vulnerability by manipulating snapshot files to include symlinks, leading to arbitrary file read by adding a symlink that points to a desired file on the...
CVE-2024-3829
CVE-2024-3829 affects qdrant/qdrant 1.9.0-dev. The root cause is arbitrary file read/write during the snapshot recovery process via manipulated snapshot files containing symlinks, enabling an attacker to read arbitrary files and write payloads in the snapshot directory. The issue is fixed in vers...
CVE-2022-3829
creationtimestamp| type| source ---|---|--- 2024-01-23 17:16:49+00:00| seen| https://t.me/ctinow/172131 2024-02-06 10:11:20+00:00| seen| https://t.me/ctinow/179873...
CVE-2022-3829
The Font Awesome 4 Menus WordPress plugin through 4.7.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2022-3829 Font Awesome 4 Menus <= 4.7.0 - Admin+ Stored XSS
The Font Awesome 4 Menus WordPress plugin through 4.7.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...