59 matches found
CVE-2023-3937
creationtimestamp| type| source ---|---|--- 2023-08-11 16:16:38+00:00| seen| https://t.me/cibsecurity/68336...
CVE-2023-3937
Cross site scripting vulnerability in web portal in Snow Software License Manager from version 9.0.0 up to and including 9.30.1 on Windows allows an authenticated user with high privileges to trigger cross site scripting attack via the web browser...
CVE-2023-3937
Cross site scripting vulnerability in web portal in Snow Software License Manager from version 9.0.0 up to and including 9.30.1 on Windows allows an authenticated user with high privileges to trigger cross site scripting attack via the web browser...
CVE-2023-3937
Snow Software License Manager (web portal) versions 9.0.0–9.30.1 on Windows are affected by a cross-site scripting vulnerability. An authenticated user with high privileges can trigger XSS via the web browser; the issue originates in the web portal and affects the stated versions. Exploitation de...
CVE-2023-3937 Cross site scripting vulnerabilities in Snow License Manager
Cross site scripting vulnerability in web portal in Snow Software License Manager from version 9.0.0 up to and including 9.30.1 on Windows allows an authenticated user with high privileges to trigger cross site scripting attack via the web browser...
CVE-2022-3937 Easy Video Player < 1.2.2.3 - Contributor+ Stored XSS
The Easy Video Player WordPress plugin before 1.2.2.3 does not sanitize and escapes some parameters, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks...
CVE-2022-3937
CVE-2022-3937 affects the Easy Video Player WordPress plugin prior to 1.2.2.3. The root cause is insufficient sanitization/escaping of certain parameters, enabling a user with as low as Contributor to perform Cross-Site Scripting (XSS). The vulnerability can impact pages where the plugin processe...
MSC-2022-3937
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...
CVE-2021-3937
CVE-2021-3937 entry is rejected/not used and does not represent an active vulnerability.
CVE-2017-3937
This CVE entry is rejected/not used per the initial description.
CVE-2020-3937
SQL Injection in SysJust Syuan-Gu-Da-Shih, versions before 20191223, allowing attackers to perform unwanted SQL queries and access arbitrary file in the database...
CVE-2020-3937 SysJust Syuan-Gu-Da-Shih-SQL injection
SQL Injection in SysJust Syuan-Gu-Da-Shih, versions before 20191223, allowing attackers to perform unwanted SQL queries and access arbitrary file in the database...
CVE-2020-3937
The CVE-2020-3937 entry concerns a SQL injection vulnerability in SysJust Syuan-Gu-Da-Shih for versions before 20191223. The underlying issue is unsafely constructed SQL queries that allow an attacker to perform arbitrary SQL queries and access arbitrary files within the database. Impact details ...
CVE-2013-3937
creationtimestamp| type| source ---|---|--- 2020-01-02 22:49:13+00:00| seen| https://t.me/cibsecurity/8966...
CVE-2013-3937
CVE-2013-3937 is a heap-based buffer overflow in XnView's xnview.exe prior to 2.13 that allows remote attackers to execute arbitrary code via the biBitCount field in a BMP file. Affected product: XnView (Windows). Root cause: inadequate bounds checking when processing BMP data. Impact: arbitrary ...
CVE-2019-3937
Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 stores usernames, passwords, slideshow passcode, and other configuration options in cleartext in the file /tmp/scfgdndf. A local attacker can use this vulnerability to recover sensitive data...
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Apache HTTP Server vulnerabilities (USN-3937-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3937-1 advisory. Charles Fol discovered that the Apache HTTP Server incorrectly handled the scoreboard shared memory area. A remote attacker able ...
CVE-2018-3937
Sony IPELA E Series Camera (G5) firmware 1.87.00 contains an OS command injection in the measurementBitrateExec function. A crafted GET request to main.cgi can cause arbitrary commands to run, with impact including high-severity outcomes (based on TALOS: CVSSv3.0 score 9.1, attacker network-visib...