UBUNTU-CVE-2024-3855

In certain cases the JIT incorrectly optimized MSubstr operations, which led to out-of-bounds reads. This vulnerability affects Firefox 125...

CVE-2024-3855

CVE-2024-3855 is a Firefox vulnerability where the JIT optimizer incorrectly handled MSubstr, causing out-of-bounds reads in affected builds. The issue affects Firefox versions older than 125. The cited sources (Mozilla bug 1885828 and MFSA advisory MFSA2024-18) describe the root cause in JIT str...

CVE-2024-3855

In certain cases the JIT incorrectly optimized MSubstr operations, which led to out-of-bounds reads. This vulnerability affects Firefox 125...

KLA65639 Multiple vulnerabilities in Mozilla Firefox

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to cause denial of service, perform cross-site scripting attack, spoof user interface, bypass security restrictions, execute arbitrary code, obtain sensitive information. Below is a complete...

Ubuntu 16.04 ESM : libssh2 vulnerabilities (USN-5308-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5308-1 advisory. It was discovered that libssh2 mishandled certain input. If libssh2 were used to connect to a malicious or compromised SSH server, a remote,...

BELL-CVE-2019-3855 CVE-2019-3855 does not affect BellSoft software

Bulletin has no description...

CVE-2023-3855

creationtimestamp| type| source ---|---|--- 2023-07-24 07:25:46+00:00| seen| https://t.me/cibsecurity/67136...

CVE-2023-3855

CVE-2023-3855 affects phpscriptpoint JobSeeker 1.5. The vulnerability exists in an unknown function within /search-result.php, where manipulating the kw, lc, ct, cp, or p parameters triggers cross-site scripting. Exploitation can be remote. Public references consistently describe a cross-site scr...

CVE-2021-3855

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Liman Central Management System Liman MYS HTTP/Controllers, CronMail, Jobs modules allows Command Injection. This issue affects Liman Central Management System: from 1.7.0 before 1.8.3-462...

CVE-2021-3855 Command Injection in Liman Central Management System

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Liman Central Management System Liman MYS HTTP/Controllers, CronMail, Jobs modules allows Command Injection. This issue affects Liman Central Management System: from 1.7.0 before 1.8.3-462...

CVE-2021-3855

Liman Central Management System (Liman MYS) is affected by CVE-2021-3855. The vulnerability lies in an improper neutralization of special elements enabling a Command Injection in the system’s HTTP/Controllers, CronMail, and Jobs modules. Affected versions are 1.7.0 up to 1.8.3-462. The reports in...

SUSE CVE-2019-3855

An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server...

Ubuntu: Security Advisory (USN-5308-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-3855

creationtimestamp| type| source ---|---|--- 2023-01-10 02:28:06+00:00| seen| https://t.me/cibsecurity/56195 2025-04-09 18:48:00+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11129...

CVE-2022-3855

The CVE-2022-3855 entry concerns the WordPress plugin “404 to Start” (versions ≤ 1.6.1). The vulnerability arises because the plugin does not sufficiently sanitize/escape certain settings, enabling stored cross-site scripting (XSS) by high-privilege users (e.g., admins), even when unfiltered_html...

CVE-2022-3855 404 to Start <= 1.6.1 - Admin+ Stored XSS

The 404 to Start WordPress plugin through 1.6.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

SUSE: Security Advisory (SUSE-SU-2019:13982-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2012:0553-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2020:3551-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-3855

CVE-2020-3855 is an Apple macOS access issue where a malicious application could overwrite arbitrary files. It is addressed by the macOS Catalina 10.15.3 release and Security Update 2020-001 for Mojave and High Sierra. The description indicates improved access restrictions as the fix. Practical t...