180 matches found
MINI-3848-H9V9-J75W
Bulletin has no description...
CGA-WFX3-3848-P6G2
Bulletin has no description...
MINI-3848-V5XX-WGJ7
Bulletin has no description...
Linux Distros Unpatched Vulnerability : CVE-2026-3848
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.11 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowe...
UBUNTU-CVE-2026-3848
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.11 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user to make unintended internal requests through proxy environments under certain conditions due to improper input...
CVE-2026-3848
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.11 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an authenticated user to make unintended internal requests through proxy environments under certain conditions due to improper input...
CVE-2026-3848
creationtimestamp| type| source ---|---|--- 2026-03-11 15:16:47+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3848 2026-03-12 14:15:25+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mgull4qogo2n 2026-03-12 16:00:00+00:00| seen|...
EUVD-2026-3848
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows PHP Local File Inclusion.This issue affects My auctions allegro: from n/a through = 3.6.33...
GO-2025-3848 HashiCorp Vault ldap auth method may not have correctly enforced MFA in github.com/hashicorp/vault
HashiCorp Vault ldap auth method may not have correctly enforced MFA in github.com/hashicorp/vault...
CVE-2025-3848
Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2025-25171. Reason: This candidate is a reservation duplicate of CVE-2025-25171. Notes: All CVE users should reference CVE-2025-25171 instead of this candidate. All references and descriptions in this candidate have been...
CVE-2025-3848
creationtimestamp| type| source ---|---|--- 2025-07-02 04:12:18+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/20094...
CVE-2023-3848
A vulnerability, which was classified as problematic, has been found in mooSocial mooDating 1.2. This issue affects some unknown processing of the file /users/view of the component URL Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The associated...
CVE-2021-3848
An arbitrary file creation by privilege escalation vulnerability in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1, and Worry-Free Business Security Services could allow a local attacker to create an arbitrary file with higher privileges that could lead to a...
Linux Distros Unpatched Vulnerability : CVE-2018-3848
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the ffghbn function in NASA CFITSIO 3.42, specially crafted images parsed via the library can cause a stack-based buffer overflow overwriting arbitrary data...
GHSA-MJCW-R3MG-3848 vulnerabilities
Vulnerabilities for packages: firefox...
CVE-2024-3848
creationtimestamp| type| source ---|---|--- 2024-11-30 13:48:14+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-3848.yaml 2026-10-28 21:00:26+00:00| exploited|...
Debian dla-3848 : elpa-org - security update
The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3848 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3848-1 [email protected] https://www.debian.org/lts/security/...
auf (>=1.0.0, <=2.0.1), auto-mlflow (1.0.0) +21 more potentially affected by CVE-2024-3848 via mlflow (>=2.9.2, <=2.11.3)
mlflow PYPI version =2.9.2, =1.0.0, =0.0.40.post1, =1.2.0, =0.9.21, =0.0.10, =0.1.0, =0.1.1, =0.1.2, =1.2.7, =0.1.0, =1.0.0, =2.9.2, =1.8.2, =1.8.5 - mlops-utils 0.0.1 and more Source cves: CVE-2024-3848 Source advisory: GHSA-RFQQ-WQ6W-72JM...
CVE-2024-3848
A path traversal vulnerability exists in mlflow/mlflow version 2.11.0, identified as a bypass for the previously addressed CVE-2023-6909. The vulnerability arises from the application's handling of artifact URLs, where a '' character can be used to insert a path into the fragment, effectively...