FreeBSD : Gitlab -- vulnerabilities (e2fb85ce-9a3c-11ee-af26-001b217b3468)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the e2fb85ce-9a3c-11ee-af26-001b217b3468 advisory. - Gitlab reports: Smartcard authentication allows impersonation of arbitrary user using user's...

Exploit for Cross-site Scripting in Monsterinsights

CVE-2022-3904 CVE-2022-3904 MonsterInsights 8.9.1 - Store...

SUSE CVE-2011-3904

Use-after-free vulnerability in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to bidirectional text aka bidi handling...

CVE-2022-3904

creationtimestamp| type| source ---|---|--- 2023-01-16 18:24:03+00:00| seen| Telegram/YxCJ1TzP29wRe3vGQrbHUsMmKfhfCQf2PLjtXC5IhkTw-BY 2026-07-29 12:00:15+00:00| seen| https://t.me/CVEhub/16860 2026-07-30 00:00:35+00:00| seen| https://t.me/CVEhub/16860 2026-07-31 00:00:41+00:00|...

CVE-2022-3904

CVE-2022-3904 affects the WordPress MonsterInsights plugin. Versions prior to 8.9.1 fail to sanitize/escape page titles in the top posts/pages section, enabling an unauthenticated attacker to inject arbitrary web scripts into titles by spoofing requests to Google Analytics. The vulnerability is d...

Ubuntu: Security Advisory (USN-1093-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-3904

creationtimestamp| type| source ---|---|--- 2021-10-28 02:16:26+00:00| seen| https://t.me/cibsecurity/31339...

CVE-2021-3904

grav is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-3904

grav is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-3904 Cross-site Scripting (XSS) - Stored in getgrav/grav

grav is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-3904

CVE-2021-3904 affects Grav (getgrav/grav) and is a Cross-Site Scripting vulnerability caused by improper input neutralization during web page generation. Multiple sources (including GHSA, Red Hat, NVD, OSV, and CVE CVELIST entries) describe it as XSS with Grav versions prior to 1.7.24 being affec...

Moderate: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

CVE-2017-3904

CVE-2017-3904 is rejected/not used per the Initial Description.

CVE-2020-3904

CVE-2020-3904 is a memory-corruption vulnerability in AppleGraphicsControl on macOS Catalina (prior to 10.15.4) that could allow a malicious, locally executing app to gain kernel privileges. The issue is fixed in macOS Catalina 10.15.4; Apple’s security content confirms the kernel-priviliege impa...

macOS 10.15.x < 10.15.4 / 10.14.x < 10.14.6 Security Update 2020-002 / 10.13.x < 10.13.6 Security Update 2020-002

The remote host is running a version of macOS / Mac OS X that is 10.13.x prior to 10.13.6 Security Update 2020-002, 10.14.x prior to 10.14.6 Security Update 2020-002, or 10.15.x prior to 10.15.4. It is, therefore, affected by multiple vulnerabilities : - Insufficient control flow in certain data...

vReliable Datagram Sockets (RDS) rds_page_copy_user Privilege Escalation Exploit

This Metasploit module exploits a vulnerability in the rdspagecopyuser function in net/rds/page.c RDS in Linux kernel versions 2.6.30 to 2.6.36-rc8 to execute code as root CVE-2010-3904. This module has been tested successfully on Fedora 13 i686 kernel version 2.6.33.3-85.fc13.i686.PAE and Ubuntu...

vReliable Datagram Sockets (RDS) rds_page_copy_user Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Reliable Datagram Sockets RDS rdspagecopyuser Privilege Escalation', 'Description' = %q This module exploits a vulnerability in the rdspagecopyus...

Ubuntu 18.04 LTS : NVIDIA graphics drivers vulnerability (USN-3904-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3904-1 advisory. It was discovered that the NVIDIA graphics drivers incorrectly handled the GPU performance counters. A local attacker could possibly use this issue to access the...

CVE-2018-3904

An exploitable buffer overflow vulnerability exists in the camera 'update' feature of video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The video-core process incorrectly extracts fields from a user-controlled JSON payload, leading to a buffer overflow on...

CVE-2018-3904

CVE-2018-3904 is a buffer overflow in Samsung SmartThings Hub STH-ETH-250, triggered by user-controlled JSON in the video-core HTTP server when handling PATCH /cameras/ requests. The vulnerable code copies a parameter value (url or state) into a 512-byte stack buffer using memcpy with length deri...