CVE-2023-3937

Cross site scripting vulnerability in web portal in Snow Software License Manager from version 9.0.0 up to and including 9.30.1 on Windows allows an authenticated user with high privileges to trigger cross site scripting attack via the web browser...

CVE-2023-3937

Cross site scripting vulnerability in web portal in Snow Software License Manager from version 9.0.0 up to and including 9.30.1 on Windows allows an authenticated user with high privileges to trigger cross site scripting attack via the web browser...

CVE-2023-3937

Snow Software License Manager (web portal) versions 9.0.0–9.30.1 on Windows are affected by a cross-site scripting vulnerability. An authenticated user with high privileges can trigger XSS via the web browser; the issue originates in the web portal and affects the stated versions. Exploitation de...

CVE-2023-3937 Cross site scripting vulnerabilities in Snow License Manager

Cross site scripting vulnerability in web portal in Snow Software License Manager from version 9.0.0 up to and including 9.30.1 on Windows allows an authenticated user with high privileges to trigger cross site scripting attack via the web browser...

CVE-2022-3937 Easy Video Player < 1.2.2.3 - Contributor+ Stored XSS

The Easy Video Player WordPress plugin before 1.2.2.3 does not sanitize and escapes some parameters, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks...

CVE-2022-3937

CVE-2022-3937 affects the Easy Video Player WordPress plugin prior to 1.2.2.3. The root cause is insufficient sanitization/escaping of certain parameters, enabling a user with as low as Contributor to perform Cross-Site Scripting (XSS). The vulnerability can impact pages where the plugin processe...

CVE-2021-3937

...

CVE-2021-3937

CVE-2021-3937 entry is rejected/not used and does not represent an active vulnerability.

CVE-2017-3937

...

CVE-2017-3937

This CVE entry is rejected/not used per the initial description.

CVE-2020-3937

SQL Injection in SysJust Syuan-Gu-Da-Shih, versions before 20191223, allowing attackers to perform unwanted SQL queries and access arbitrary file in the database...

CVE-2020-3937 SysJust Syuan-Gu-Da-Shih-SQL injection

SQL Injection in SysJust Syuan-Gu-Da-Shih, versions before 20191223, allowing attackers to perform unwanted SQL queries and access arbitrary file in the database...

CVE-2020-3937

The CVE-2020-3937 entry concerns a SQL injection vulnerability in SysJust Syuan-Gu-Da-Shih for versions before 20191223. The underlying issue is unsafely constructed SQL queries that allow an attacker to perform arbitrary SQL queries and access arbitrary files within the database. Impact details ...

CVE-2013-3937

creationtimestamp| type| source ---|---|--- 2020-01-02 22:49:13+00:00| seen| https://t.me/cibsecurity/8966...

CVE-2013-3937

CVE-2013-3937 is a heap-based buffer overflow in XnView's xnview.exe prior to 2.13 that allows remote attackers to execute arbitrary code via the biBitCount field in a BMP file. Affected product: XnView (Windows). Root cause: inadequate bounds checking when processing BMP data. Impact: arbitrary ...

CVE-2019-3937

Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 stores usernames, passwords, slideshow passcode, and other configuration options in cleartext in the file /tmp/scfgdndf. A local attacker can use this vulnerability to recover sensitive data...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Apache HTTP Server vulnerabilities (USN-3937-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3937-1 advisory. Charles Fol discovered that the Apache HTTP Server incorrectly handled the scoreboard shared memory area. A remote attacker able ...

CVE-2018-3937

Sony IPELA E Series Camera (G5) firmware 1.87.00 contains an OS command injection in the measurementBitrateExec function. A crafted GET request to main.cgi can cause arbitrary commands to run, with impact including high-severity outcomes (based on TALOS: CVSSv3.0 score 9.1, attacker network-visib...

CVE-2016-3937

The MediaTek video driver in Android before 2016-10-05 allows attackers to gain privileges via a crafted application, aka Android internal bug 30030994 and MediaTek internal bug ALPS02834874...

CVE-2016-3937

CVE-2016-3937 is an elevation-of-privilege vulnerability in the MediaTek video driver for Android, exploitable by a crafted app to gain privileges. The issue affects MediaTek video driver in Android prior to the 2016-10-05 patch level; patch status varies and public fix availability is not consis...