116 matches found
GHSA-5QJQ-93H5-HRGP pypdf: Possible large memory usage for wrong image dimensions
Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires loading images where the declared size values are much too large compared to the actual data. Patches This has been fixed in pypdf==6.14.0. Workarounds If you cannot upgrade yet, consid...
MINI-2JQQ-G947-3888
Bulletin has no description...
MINI-3888-X5GC-WX5R
Bulletin has no description...
Exploit for CVE-2026-3888
No d...
Exploit for CVE-2026-3888
CVE-2026-3888-P...
Debian: Security Advisory (DSA-6170-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian dsa-6170 : golang-github-snapcore-snapd-dev - security update
The remote Debian 12 / 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6170 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6170-1 [email protected] https://www.debian.org/security/...
Exploit for CVE-2026-3888
No d...
CVE-2026-3888
creationtimestamp| type| source ---|---|--- 2026-03-17 19:24:31+00:00| seen| https://t.me/ctinow/247297 2026-03-17 20:01:23+00:00| seen| https://bsky.app/profile/Ubuntu.activitypub.awakari.com.ap.brid.gy/post/3mhbrae5mtr62 2026-03-17 20:33:25+00:00| seen|...
DEBIAN-CVE-2026-3888
Local privilege escalation in snapd on Linux allows local attackers to get root privilege by re-creating snap's private /tmp directory when systemd-tmpfiles is configured to automatically clean up this directory. This issue affects Ubuntu 16.04 LTS, 18.04 LTS, 20.04 LTS, 22.04 LTS, and 24.04 LTS...
CVE-2026-3888 Local Privilege Escalation in snapd
Local privilege escalation in snapd on Linux allows local attackers to get root privilege by re-creating snap's private /tmp directory when systemd-tmpfiles is configured to automatically clean up this directory. This issue affects Ubuntu 16.04 LTS, 18.04 LTS, 20.04 LTS, 22.04 LTS, and 24.04 LTS...
Linux Distros Unpatched Vulnerability : CVE-2026-3888
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Local privilege escalation in snapd on Linux allows local attackers to get root privilege by re-creating snap's private /tmp directory when systemd-tmpfiles is...
MINI-3888-WJJR-Q4G2
Bulletin has no description...
EUVD-2026-3888
Dell PowerScale OneFS versions prior to 9.13.0.0 contains an improper restriction of excessive authentication attempts vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access...
GO-2025-3888 Helm May Panic Due To Incorrect YAML Content in helm.sh/helm
Helm May Panic Due To Incorrect YAML Content in helm.sh/helm...
CVE-2020-3888
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4. A maliciously crafted page may interfere with other web contexts...
CVE-2025-3888
creationtimestamp| type| source ---|---|--- 2025-05-17 13:08:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpemg4qn3p2w...
CVE-2025-3888
The Jupiter X Core plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File inclusion in all versions up to, and including, 4.8.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access an...
CVE-2025-3888
CVE-2025-3888 — Jupiter X Core (WordPress) stored XSS via inline SVG . The vulnerability affects Jupiter X Core versions up to and including 4.8.12, caused by insufficient input sanitization and output escaping for SVG content. An authenticated attacker with Contributor-level access or higher can...
CVE-2025-3888 Jupiterx Core <= 4.8.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Inline SVG
The Jupiter X Core plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File inclusion in all versions up to, and including, 4.8.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access an...