CVE-2022-3837 Uji Countdown < 2.3.1 - Admin+ Stored XSS

The Uji Countdown WordPress plugin before 2.3.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CISA Warns of Active Exploitation of 'PwnKit' Linux Vulnerability in the Wild

The U.S. Cybersecurity and Infrastructure Security Agency CISA this week moved to add a Linux vulnerability dubbed PwnKit to its Known Exploited Vulnerabilities Catalog, citing evidence of active exploitation. The issue, tracked as CVE-2021-4034 CVSS score: 7.8, came to light in January 2022 and...

Mageia: Security Advisory (MGASA-2018-0276)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-3837

creationtimestamp| type| source ---|---|--- 2022-01-03 18:44:27+00:00| seen| https://t.me/cibsecurity/34869...

CVE-2021-3837

openwhyd is vulnerable to Improper Authorization...

CVE-2021-3837

openwhyd is vulnerable to Improper Authorization...

CVE-2021-3837 Improper Authorization in openwhyd/openwhyd

openwhyd is vulnerable to Improper Authorization...

CVE-2021-3837

CVE-2021-3837 affects openwhyd/openwhyd with an Improper Authorization issue in the login flow. The vulnerability arises from insufficient validation of the redirect parameter, which is embedded in the login redirect HTML/JS (htmlRedirect) and can be used to trigger a reflected XSS or redirect-ba...

CVE-2020-3837

CVE-2020-3837 is an Apple memory-corruption issue fixed in iOS 13.3.1, iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, and watchOS 6.1.2, with potential to run arbitrary code with kernel privileges. Connected analysis documents reveal concrete Android exploitation research tied to this CVE fa...

CVE-2020-3837

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to execute arbitrary code with kernel privileges. Recent assessments: Assessed Attacker Value:...

Apple TV < 13.3.1 Multiple Vulnerabilities

According to its banner, the version of Apple TV on the remote device is prior to 13.3.1. It is therefore affected by multiple vulnerabilities as described in the HT210920 C Tenable Network Security, Inc. include'compat.inc'; if description scriptid133727; scriptversion"1.6";...

CVE-2020-3837

creationtimestamp| type| source ---|---|--- 2020-02-10 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/48035 2022-06-24 19:34:31+00:00| seen| https://t.me/truesecator/3099 2023-06-14 21:10:04+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-04 15:09:00+00:00| seen|...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1636)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 7 : kernel (RHSA-2019:3837)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:3837 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: hw: Machine Check Error on Page Size...

CVE-2019-3837

It was found that the netdma code in tcprecvmsg in the 2.6.32 kernel as shipped in RHEL6 is thread-unsafe. So an unprivileged multi-threaded userspace application calling recvmsg for the same network socket in parallel executed on ioatdma-enabled hardware with netdma enabled can leak the memory,...

CVE-2019-3837

It was found that the netdma code in tcprecvmsg in the 2.6.32 kernel as shipped in RHEL6 is thread-unsafe. So an unprivileged multi-threaded userspace application calling recvmsg for the same network socket in parallel executed on ioatdma-enabled hardware with netdma enabled can leak the memory,...

CVE-2019-3837

CVE-2019-3837 affects the 2.6.32 kernel as shipped in RHEL6. The net_dma code in tcp_recvmsg() is thread-unsafe, so an unprivileged multi-threaded userspace application calling recvmsg() for the same socket in parallel on ioatdma-enabled hardware with net_dma enabled can leak memory, crash the ho...

CVE-2019-3837

It was found that the netdma code in tcprecvmsg in the 2.6.32 kernel as shipped in RHEL6 is thread-unsafe. So an unprivileged multi-threaded userspace application calling recvmsg for the same network socket in parallel executed on ioatdma-enabled hardware with netdma enabled can leak the memory,...

Low: Red Hat Security Advisory: ansible security and bug fix update

An update for ansible is now available for Ansible Engine 2.7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links i...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : poppler regression (USN-3837-2)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3837-2 advisory. USN-3837-1 fixed vulnerabilities in poppler. A regression was reported regarding the previous update. This update fixes the...