CVE-2022-3921 Listingo < 3.2.7 - Unauthenticated Arbitrary File Upload

The Listingo WordPress theme before 3.2.7 does not validate files to be uploaded via an AJAX action available to unauthenticated users, which could allow them to upload arbitrary files and lead to RCE...

CVE-2022-3921

CVE-2022-3921 affects the Listingo WordPress theme prior to version 3.2.7. The vulnerability arises because an AJAX upload action is accessible to unauthenticated users and does not validate uploaded files, permitting arbitrary file uploads and potentially remote code execution (RCE). Public writ...

CVE-2021-3921

creationtimestamp| type| source ---|---|--- 2021-11-13 12:39:54+00:00| seen| https://t.me/cibsecurity/32369...

CVE-2021-3921

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3921

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3921

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3921 Cross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3921

CVE-2021-3921 affects firefly-iii. Multiple sources document a Cross-Site Request Forgery (CSRF) vulnerability in firefly-iii that can cause a logged-in user to be logged out via a forged request example (via a GET/ANY login-logout flow). The Huntr entry specifically describes an attacker logging...

CVE-2017-3921

CVE-2017-3921 is rejected/not used; this entry does not represent an active vulnerability.

CVE-2017-3921

...

SUSE: Security Advisory (SUSE-SU-2018:3921-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-3921 Unisoon UltraLog Express - Sensitive Data Exposure

UltraLog Express device management software stores user’s information in cleartext. Any user can obtain accounts information through a specific page...

CVE-2020-3921 Unisoon UltraLog Express - Sensitive Data Exposure

UltraLog Express device management software stores user’s information in cleartext. Any user can obtain accounts information through a specific page...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : XMLTooling vulnerability (USN-3921-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3921-1 advisory. It was discovered that XMLTooling incorrectly handled certain XML files with invalid data. An attacker could use this issue to cause...

CVE-2019-3921

The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to a stack buffer overflow via crafted HTTP POST request sent by a remote, authenticated attacker to /GponForm/usbForm?script/. An attacker can leverage this vulnerability to potentially execute arbitrary cod...

CVE-2019-3921

The CVE-2019-3921 vulnerability affects the Alcatel-Lucent I-240W-Q GPON ONT running firmware 3FE54567BOZJ19. A stack buffer overflow can be triggered by a crafted HTTP POST to /GponForm/usb_Form?script/, allowing a remote, authenticated attacker to potentially execute arbitrary code. The availab...

SUSE SLES11 Security Update : java-1_7_1-ibm (SUSE-SU-2018:3921-1)

java-171-ibm was updated to Java 7.1 Service Refresh 4 Fix Pack 35 bsc1116574 : Consumability - IJ10515 AIX JAVA 7.1.3.10 GENERAL PROTECTION FAULT WHEN ATTEMPTING TO USE HEALTH CENTER API Class Libraries - IJ10934 CVE-2018-13785 - IJ10935 CVE-2018-3136 - IJ10895 CVE-2018-3139 - IJ10932...

CVE-2018-3921

Photoline 20.54 contains a PSD-parsing memory corruption vulnerability (CVE-2018-3921) in the PSD blending channels path that can cause a stack-based overflow and potentially allow code execution. The Talos analysis explains that the blending channel length is read from the image and used to driv...

Solaris 10 (sparc) : 116648-25

Web Server 6.1: Sun ONE Web Server 6.1 Patch WS61SP13. Date this patch was last updated by Sun : Sep/20/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Debian DSA-3921-1 : enigmail - security update

In DSA 3918 Thunderbird was upgraded to the latest ESR series. This update upgrades Enigmail, the OpenPGP extention for Thunderbird, to version 1.9.8.1 to restore full compatibility. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...