CVE-2023-3847

A vulnerability classified as problematic was found in mooSocial mooDating 1.2. This vulnerability affects unknown code of the file /users of the component URL Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. VDB-235198 is the identifier assigned to...

CVE-2023-3847

MooSocial mooDating 1.2 is affected by a Cross-Site Scripting vulnerability in the URL Handler’s /users path. The root cause is improper handling/sanitization of URL parameters, enabling remote XSS and potential theft of session cookies if exploited. Connected docs indicate exploitation contexts ...

Oracle Linux 8 : kernel (ELSA-2023-3847)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-3847 advisory. - net: tls: fix possible race condition between dotlsgetsockoptconf and dotlssetsockoptconf Hangyu Hua CVE-2023-28466 Tenable has extracted the preceding...

RHEL 8 : kernel (RHSA-2023:3847)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3847 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: tls: race condition in dotlsgetsockopt...

SUSE CVE-2005-3847

The handlestopsignal function in signal.c in Linux kernel 2.6.11 up to other versions before 2.6.13 and 2.6.12.6 allows local users to cause a denial of service deadlock by sending a SIGKILL to a real-time threaded process while it is performing a core dump...

CVE-2022-3847

creationtimestamp| type| source ---|---|--- 2022-11-28 16:28:09+00:00| seen| https://t.me/cibsecurity/53571...

CVE-2022-3847

CVE-2022-3847 concerns the WordPress plugin “Showing URL in QR Code” (versions up to 0.0.1). The flaw is lack of CSRF protection when updating plugin settings plus missing sanitisation and escaping, enabling a logged-in admin/editor to inject stored XSS via CSRF. In the connected sources, multipl...

CVE-2022-3847 Showing URL in QR Code <= 0.0.1 - Stored XSS via CSRF

The Showing URL in QR Code WordPress plugin through 0.0.1 does not have CSRF check when updating its settings, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin or editor add Stored XSS payloads via a CSRF attack...

CVE-2021-3847

CVE-2021-3847 describes a local privilege escalation in the Linux kernel OverlayFS subsystem. The flaw arises in the way a user copies a capable file from a nosuid mount to another mount, enabling unauthorized execution of setuid-capable files. The confirmed impact is that a local user can escala...

CVE-2021-3847

An unauthorized access to the execution of the setuid file with capabilities flaw in the Linux kernel OverlayFS subsystem was found in the way user copying a capable file from a nosuid mount into another mount. A local user could use this flaw to escalate their privileges on the system...

CVE-2021-3847

An unauthorized access to the execution of the setuid file with capabilities flaw in the Linux kernel OverlayFS subsystem was found in the way user copying a file with capabilities from a nosuid mount into another mount. A local user could use this flaw to escalate their privileges on the system...

GLSA-202101-24 : cfitsio: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202101-24 cfitsio: Multiple vulnerabilities Multiple vulnerabilities have been discovered in cfitsio. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for detail...

About the security content of macOS Catalina 10.15.3, Security Update 2020-001 Mojave, Security Update 2020-001 High Sierra - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

CVE-2020-3847

CVE-2020-3847 affects Apple macOS CoreBluetooth. It is an out-of-bounds read that was mitigated by improved input validation. A remote attacker may be able to leak memory. The issue is fixed in macOS Catalina 10.15.3 (Security Update 2020-001 Mojave/High Sierra notes also reference the wider upda...

Apple Mac OS X Security Update (HT210919 - 02)

Apple Mac OS X is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Buffer overflow

NASA CFITSIO prior to 3.43 is affected by: Buffer Overflow. The impact is: arbitrary code execution. The component is: over 40 source code files were changed. The attack vector is: remote unauthenticated attacker. The fixed version is: 3.43. NOTE: this CVE refers to the issues not covered by...

CVE-2019-3847

CVE-2019-3847 affects Moodle up to versions 3.6.3, 3.5.5, 3.4.8 and 3.1.17. The vulnerability allows any user with the “login as other users” capability (e.g., admins/managers) to view other users’ Dashboards, but any JavaScript those users added to their Dashboard is not escaped when rendered un...

Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-3847-1)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3847-1 advisory. It was discovered that a race condition existed in the raw MIDI driver for the Linux kernel, leading to a double free vulnerability. A local attacker cou...

Ubuntu 16.04 LTS : Linux kernel (HWE) vulnerabilities (USN-3847-2)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3847-2 advisory. USN-3847-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.04 LTS. This update provides the corresponding updates for the Linux Hardware Enableme...

Ubuntu 14.04 LTS : Linux kernel (Azure) vulnerabilities (USN-3847-3)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3847-3 advisory. USN-3847-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.04 LTS. This update provides the corresponding updates for the Linux kernel for...