152 matches found
CVE-2025-3887
creationtimestamp| type| source ---|---|--- 2025-04-30 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-267/ 2025-05-22 01:43:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17227 2025-05-22 05:05:26+00:00| seen|...
CVE-2019-3887 affecting package kernel for versions less than 6.6.35.1-4
CVE-2019-3887 affecting package kernel for versions less than 6.6.35.1-4. A patched version of the package is available...
CVE-2024-3887 Royal Elementor Addons and Templates <= 1.3.974 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form Builder Widget
The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Form Builder widget in all versions up to, and including, 1.3.974 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
WordPress Royal Elementor Addons Plugin <= 1.3.974 is vulnerable to Cross Site Scripting (XSS)
Software Royal Elementor Addons Type Plugin Vulnerable versions = 1.3.974 Fixed in 1.3.975 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-3887 Patch priority Low CVSS severity Low 6.5 Developer WProyal PSID d2ab33ccd3b4 Credits Tim Coen Ngô Thiên An...
Google Chrome < 107.0.5304.106 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 107.0.5304.106. It is, therefore, affected by multiple vulnerabilities as referenced in the 202211stable-channel-update-for-desktop advisory. - Heap buffer overflow in Crashpad in Google Chrome on Android prior to...
CVE-2023-3887
creationtimestamp| type| source ---|---|--- 2023-07-25 12:28:17+00:00| seen| https://t.me/cibsecurity/67222...
CVE-2023-3887
A vulnerability was found in Campcodes Beauty Salon Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/search-appointment.php. The manipulation of the argument searchdata leads to cross site scripting. The atta...
CVE-2023-3887 Campcodes Beauty Salon Management System search-appointment.php cross site scripting
A vulnerability was found in Campcodes Beauty Salon Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/search-appointment.php. The manipulation of the argument searchdata leads to cross site scripting. The atta...
CVE-2023-3887
CVE-2023-3887 affects Campcodes Beauty Salon Management System 1.0. A cross-site scripting vulnerability exists in /admin/search-appointment.php via the searchdata parameter. The issue can be triggered remotely and public exploit information has been disclosed (VDB-235249). Connected sources desc...
Security fix for the ALT Linux 10 package yandex-browser-stable version 23.1.2.1033-alt1
23.1.2.1033-alt1 built April 4, 2023 Yandex Browser Team in task 317282 March 20, 2023 Yandex Browser Team - browser updated to 23.1.2 + High CVE-2022-4436: Use after free in Blink Media. + High CVE-2022-4437: Use after free in Mojo IPC. + High CVE-2022-4438: Use after free in Blink Frames. + Hig...
SUSE CVE-2009-3887
ytnef has directory traversal...
OPENSUSE-SU-2022:10201-1 Security update for chromium
This update for chromium fixes the following issues: - Chromium 107.0.5304.110 boo1205221 CVE-2022-3885: Use after free in V8 CVE-2022-3886: Use after free in Speech Recognition CVE-2022-3887: Use after free in Web Workers CVE-2022-3888: Use after free in WebCodecs CVE-2022-3889: Type Confusion i...
Debian DSA-5275-1 : chromium - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5275 advisory. - Use after free in V8 in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium...
[SECURITY] [DSA 5275-1] chromium security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5275-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 10, 2022 https://www.debian.org/security/faq -...
Chromium: CVE-2022-3887 Use after free in Web Workers
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
KLA20048 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Heap buffer overflow vulnerability in Crashpad can be...
Microsoft Edge (Chromium) < 107.0.1418.42 Multiple Vulnerabilities
The version of Microsoft Edge installed on the remote Windows host is prior to 107.0.1418.42. It is, therefore, affected by multiple vulnerabilities as referenced in the November 10, 2022 advisory. - Use after free in V8 in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to...
CVE-2022-3887
creationtimestamp| type| source ---|---|--- 2022-11-09 07:35:44+00:00| seen| https://t.me/cibsecurity/52701...
UBUNTU-CVE-2022-3887
Use after free in Web Workers in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2022-3887
Use after free in Web Workers in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...