CVE-2024-3855

In certain cases the JIT incorrectly optimized MSubstr operations, which led to out-of-bounds reads. This vulnerability affects Firefox 125...

KLA65639 Multiple vulnerabilities in Mozilla Firefox

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to cause denial of service, perform cross-site scripting attack, spoof user interface, bypass security restrictions, execute arbitrary code, obtain sensitive information. Below is a complete...

Ubuntu 16.04 ESM : libssh2 vulnerabilities (USN-5308-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5308-1 advisory. It was discovered that libssh2 mishandled certain input. If libssh2 were used to connect to a malicious or compromised SSH server, a remote,...

BELL-CVE-2019-3855 CVE-2019-3855 does not affect BellSoft software

Bulletin has no description...

CVE-2023-3855

creationtimestamp| type| source ---|---|--- 2023-07-24 07:25:46+00:00| seen| https://t.me/cibsecurity/67136...

CVE-2023-3855

CVE-2023-3855 affects phpscriptpoint JobSeeker 1.5. The vulnerability exists in an unknown function within /search-result.php, where manipulating the kw, lc, ct, cp, or p parameters triggers cross-site scripting. Exploitation can be remote. Public references consistently describe a cross-site scr...

CVE-2021-3855

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Liman Central Management System Liman MYS HTTP/Controllers, CronMail, Jobs modules allows Command Injection. This issue affects Liman Central Management System: from 1.7.0 before 1.8.3-462...

CVE-2021-3855

Liman Central Management System (Liman MYS) is affected by CVE-2021-3855. The vulnerability lies in an improper neutralization of special elements enabling a Command Injection in the system’s HTTP/Controllers, CronMail, and Jobs modules. Affected versions are 1.7.0 up to 1.8.3-462. The reports in...

CVE-2021-3855 Command Injection in Liman Central Management System

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Liman Central Management System Liman MYS HTTP/Controllers, CronMail, Jobs modules allows Command Injection. This issue affects Liman Central Management System: from 1.7.0 before 1.8.3-462...

SUSE CVE-2019-3855

An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server...

Ubuntu: Security Advisory (USN-5308-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-3855

creationtimestamp| type| source ---|---|--- 2023-01-10 02:28:06+00:00| seen| https://t.me/cibsecurity/56195 2025-04-09 18:48:00+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11129...

CVE-2022-3855 404 to Start <= 1.6.1 - Admin+ Stored XSS

The 404 to Start WordPress plugin through 1.6.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2022-3855

The CVE-2022-3855 entry concerns the WordPress plugin “404 to Start” (versions ≤ 1.6.1). The vulnerability arises because the plugin does not sufficiently sanitize/escape certain settings, enabling stored cross-site scripting (XSS) by high-privilege users (e.g., admins), even when unfiltered_html...

SUSE: Security Advisory (SUSE-SU-2019:13982-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2012:0553-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2020:3551-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-3855

CVE-2020-3855 is an Apple macOS access issue where a malicious application could overwrite arbitrary files. It is addressed by the macOS Catalina 10.15.3 release and Security Update 2020-001 for Mojave and High Sierra. The description indicates improved access restrictions as the fix. Practical t...

libssh2 security update

1.8.0-4 - fix integer overflow in SSHMSGDISCONNECT logic CVE-2019-17498 1.8.0-3 - sanitize public header file detected by rpmdiff 1.8.0-2 - fix integer overflow in keyboard interactive handling that allows out-of-bounds writes CVE-2019-3863 - fix out-of-bounds memory comparison with specially...

libssh2 < 1.8.1 Integer Overflow Vulnerability.

An integer overflow condition exists in libssh2 before 1.8.1 due to the way packets are read from the server. An authenticated, local attacker can exploit this if they have already compromised an SSH server. The attacker may be able to execute code on the system of users who connect to the SSH...