Amazon Linux 2 : perl-YAML-Syck, --advisory ALAS2-2026-3837 (ALAS-2026-3837)

The version of perl-YAML-Syck installed on the remote host is prior to 1.27-3. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3837 advisory. YAML::Syck versions before 1.47 for Perl allow a use-after-free and double-free via an anchor node freed while still...

GHSA-3837-HMFH-32C2 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-3837

An authenticated attacker can persist crafted values in multiple field types and trigger client-side script execution when another user opens the affected document in Desk. The vulnerable formatter implementations interpolate stored values into raw HTML attributes and element content without...

CVE-2026-3837

CVE-2026-3837 – Frappe Framework 16.10.0 : An authenticated attacker can store crafted values in multiple field formatters and cause client-side script execution when another user opens the affected document in Desk. The issue arises because the vulnerable formatters interpolate stored values int...

CGA-MR3P-M2XF-3837

Bulletin has no description...

GO-2025-3837 Hashicorp Vault has Privilege Escalation Vulnerability in github.com/hashicorp/vault

Hashicorp Vault has Privilege Escalation Vulnerability in github.com/hashicorp/vault...

RHSA-2024:3837

creationtimestamp| type| source ---|---|--- 2025-07-05 03:15:11+00:00| seen| Telegram/xz2mmH5nmIWrLJp0VXaeukJpqyU7ikcVL-1Te4VH0IBdQ0 2025-08-03 06:50:40+00:00| seen| Telegram/kR0M1VfOWtTJanh-8ZUzu0Y5NJjZYBx0dZa5c6WLbE9rw4...

CVE-2023-3837

A vulnerability classified as problematic has been found in DedeBIZ 6.2.10. Affected is an unknown function of the file /admin/syssqlquery.php. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be use...

CVE-2025-3837

An improper input validation vulnerability is identified in the End of Life EOL OVA based connect component which is deployed for installation purposes in the customer internal network. This EOL component was deprecated in September 2023 with end of support extended till January 2024. Under certa...

CVE-2025-3837

creationtimestamp| type| source ---|---|--- 2025-04-21 10:05:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12638 2025-04-21 11:45:02+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114375780092492583 2025-04-21 12:54:46+00:00| seen|...

CVE-2025-3837 Improper Input Validation vulnerability in the End of Life (EOL) OVA based connect component

An improper input validation vulnerability is identified in the End of Life EOL OVA based connect component which is deployed for installation purposes in the customer internal network. This EOL component was deprecated in September 2023 with end of support extended till January 2024. Under certa...

CVE-2025-3837 Improper Input Validation vulnerability in the End of Life (EOL) OVA based connect component

An improper input validation vulnerability is identified in the End of Life EOL OVA based connect component which is deployed for installation purposes in the customer internal network. This EOL component was deprecated in September 2023 with end of support extended till January 2024. Under certa...

CVE-2025-3837

CVE-2025-3837 affects the End of Life (EOL) Saviynt OVA Connect component used for installation in internal networks. Vulnerability: improper input validation allows manipulation of a request parameter to inject a code execution payload, enabling remote code execution on the hosting infrastructur...

Linux Distros Unpatched Vulnerability : CVE-2024-3837

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in QUIC in Google Chrome prior to 124.0.6367.60 allowed a remote attacker who had compromised the renderer process to potentially exploit heap...

Linux Distros Unpatched Vulnerability : CVE-2019-3837

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - It was found that the netdma code in tcprecvmsg in the 2.6.32 kernel as shipped in RHEL6 is thread- unsafe. So an unprivileged multi-threaded userspace...

Linux Distros Unpatched Vulnerability : CVE-2010-3837

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service server crash via a prepared...

Oracle Linux 9 : 389-ds-base (ELSA-2024-3837)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-3837 advisory. 2.4.5-8 - Bump version to 2.4.5-8 - Fix License tag 2.4.5-7 - Bump version to 2.4.5-7 - Resolves: RHEL-34819 - redhat-ds:11/389-ds-base: Malformed...

openSUSE 15 Security Update : opera (openSUSE-SU-2024:0156-1)

The remote openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2024:0156-1 advisory. Update to 110.0.5130.64 CHR-9748 Update Chromium on desktop-stable-124-5130 to 124.0.6367.243 DNA-116317 Create outline or shadow around emojis o...

openSUSE Security Advisory (openSUSE-SU-2024:0128-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important: Red Hat Security Advisory: rhc-worker-script security and enhancement update

An update for rhc-worker-script is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...