CVE-2010-3887

The Limit Mail feature in the Parental Controls functionality in Mail on Apple Mac OS X does not properly enforce the correspondence whitelist, which allows remote attackers to bypass intended access restrictions and conduct e-mail communication by leveraging knowledge of a child's e-mail address...

CVE-2025-3887 GStreamer H265 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

GStreamer H265 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may...

CVE-2025-3887

CVE-2025-3887 affects the GStreamer Gst-plugins-bad1.0 H.265 codec parser. The flaw is a stack-based buffer overflow caused by insufficient validation of user-supplied data length before copying to a fixed-length buffer in the H.265 slice header parsing. This can lead to remote code execution in ...

CVE-2025-3887

creationtimestamp| type| source ---|---|--- 2025-04-30 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-267/ 2025-05-22 01:43:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17227 2025-05-22 05:05:26+00:00| seen|...

CVE-2019-3887 affecting package kernel for versions less than 6.6.35.1-4

CVE-2019-3887 affecting package kernel for versions less than 6.6.35.1-4. A patched version of the package is available...

CVE-2024-3887 Royal Elementor Addons and Templates <= 1.3.974 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form Builder Widget

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Form Builder widget in all versions up to, and including, 1.3.974 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

WordPress Royal Elementor Addons Plugin <= 1.3.974 is vulnerable to Cross Site Scripting (XSS)

Software Royal Elementor Addons Type Plugin Vulnerable versions = 1.3.974 Fixed in 1.3.975 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-3887 Patch priority Low CVSS severity Low 6.5 Developer WProyal PSID d2ab33ccd3b4 Credits Tim Coen Ngô Thiên An...

Google Chrome < 107.0.5304.106 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 107.0.5304.106. It is, therefore, affected by multiple vulnerabilities as referenced in the 202211stable-channel-update-for-desktop advisory. - Heap buffer overflow in Crashpad in Google Chrome on Android prior to...

CVE-2023-3887

creationtimestamp| type| source ---|---|--- 2023-07-25 12:28:17+00:00| seen| https://t.me/cibsecurity/67222...

CVE-2023-3887

A vulnerability was found in Campcodes Beauty Salon Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/search-appointment.php. The manipulation of the argument searchdata leads to cross site scripting. The atta...

CVE-2023-3887

CVE-2023-3887 affects Campcodes Beauty Salon Management System 1.0. A cross-site scripting vulnerability exists in /admin/search-appointment.php via the searchdata parameter. The issue can be triggered remotely and public exploit information has been disclosed (VDB-235249). Connected sources desc...

CVE-2023-3887 Campcodes Beauty Salon Management System search-appointment.php cross site scripting

A vulnerability was found in Campcodes Beauty Salon Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/search-appointment.php. The manipulation of the argument searchdata leads to cross site scripting. The atta...

Security fix for the ALT Linux 10 package yandex-browser-stable version 23.1.2.1033-alt1

23.1.2.1033-alt1 built April 4, 2023 Yandex Browser Team in task 317282 March 20, 2023 Yandex Browser Team - browser updated to 23.1.2 + High CVE-2022-4436: Use after free in Blink Media. + High CVE-2022-4437: Use after free in Mojo IPC. + High CVE-2022-4438: Use after free in Blink Frames. + Hig...

SUSE CVE-2009-3887

ytnef has directory traversal...

OPENSUSE-SU-2022:10201-1 Security update for chromium

This update for chromium fixes the following issues: - Chromium 107.0.5304.110 boo1205221 CVE-2022-3885: Use after free in V8 CVE-2022-3886: Use after free in Speech Recognition CVE-2022-3887: Use after free in Web Workers CVE-2022-3888: Use after free in WebCodecs CVE-2022-3889: Type Confusion i...

Debian DSA-5275-1 : chromium - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5275 advisory. - Use after free in V8 in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium...

[SECURITY] [DSA 5275-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5275-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 10, 2022 https://www.debian.org/security/faq -...

Chromium: CVE-2022-3887 Use after free in Web Workers

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

KLA20048 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Heap buffer overflow vulnerability in Crashpad can be...

Microsoft Edge (Chromium) < 107.0.1418.42 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 107.0.1418.42. It is, therefore, affected by multiple vulnerabilities as referenced in the November 10, 2022 advisory. - Use after free in V8 in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to...