229 matches found
Format string
A Format String vulnerability exists in DrayTek Vigor 2960 = 1.5.1.3, DrayTek Vigor 3900 = 1.5.1.3, and DrayTek Vigor 300B = 1.5.1.3 in the mainfunction.cgi file via a crafted HTTP message containing malformed QUERY STRING, which could let a remote malicious user execute arbitrary code...
Mageia: Security Advisory (MGASA-2019-0221)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
WinVerifyTrust Signature Validation Vulnerability
Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windows 10 and Windows 11. While the forma...
KLA12432 RCE vulnerability in Microsoft Products (ESU)
Remote code execution vulnerability was found in Microsoft Products Extended Security Update. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2013-3900 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Windows...
CVE-2013-3900
creationtimestamp| type| source ---|---|--- 2021-11-23 11:27:03+00:00| published-proof-of-concept| https://t.me/cKure/8191 2022-01-05 12:37:10+00:00| seen| MISP/a8009d56-7dab-4b65-a6ee-3caf2773c960 2022-01-24 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=725 2023-06-10...
CVE-2021-3900
creationtimestamp| type| source ---|---|--- 2021-10-27 22:16:41+00:00| seen| https://t.me/cibsecurity/31320...
CVE-2021-3900
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3900
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3900
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3900 Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii
firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3900
CVE-2021-3900 affects firefly-iii and is described in connected sources as a Cross-Site Request Forgery (CSRF) vulnerability. The core issue is that a request could be forged by a logged-in user to perform unwanted actions. Some sources provide a specific exploit scenario: an attacker could, via ...
SUSE: Security Advisory (SUSE-SU-2021:3206-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2021:3192-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Unbreakable Enterprise kernel security update
4.1.12-124.54.6.1 - fs/namespace.c: fix mountpoint reference counter race Piotr Krysiuk Orabug: 33369433 CVE-2020-12114 CVE-2020-12114 - btrfs: only search for leftinfo if there is no rightinfo in trymergefreespace Josef Bacik Orabug: 33369414 CVE-2019-19448 CVE-2019-19448 - cfg80211: wext: avoid...
Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2021-9459)
The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9459 advisory. - fs/namespace.c: fix mountpoint reference counter race Piotr Krysiuk Orabug: 33369433 CVE-2020-12114 CVE-2020-12114 - btrfs: only search for...
The vulnerability of the WebUI interface of Vigor3900 / Vigor2960 / Vigor300B routers allows a hacker to execute arbitrary code with root privileges.
The vulnerability of the WebUI interface of Vigor3900/Vigor2960/Vigor300B routers lies in the lack of measures taken to neutralize special elements used in operating system teams. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with root privileges...
PT-2021-8205 · Draytek · Draytek Vigor300B +2
Name of the Vulnerable Software and Affected Versions: DrayTek Vigor 2960 version 1.5.1.3 DrayTek Vigor 3900 version 1.5.1.3 DrayTek Vigor 300B version 1.5.1.3 Description: A Remote Command Injection issue exists in the mainfunction.cgi script of the DrayTek Vigor web interface due to inadequate...
PT-2021-8206 · Draytek · Draytek Vigor300B +2
Name of the Vulnerable Software and Affected Versions: DrayTek Vigor 2960 versions 1.5.1.3 and earlier DrayTek Vigor 3900 versions 1.5.1.3 and earlier DrayTek Vigor 300B versions 1.5.1.3 and earlier Description: The issue is related to a Format String vulnerability in the mainfunction.cgi file of...