CVE-2023-3938 Bypassing ZkTeco-based OEM devices/ZKTeco biometric authentication system via SQLi in QR code

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ZkTeco-based OEM devices allows an attacker to authenticate under any user from the device database. This issue affects ZkTeco-based OEM devices ZkTeco ProFace X, Smartec ST-FR043, Smartec...

CVE-2023-3938 Bypassing ZkTeco-based OEM devices/ZKTeco biometric authentication system via SQLi in QR code

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ZkTeco-based OEM devices allows an attacker to authenticate under any user from the device database. This issue affects ZkTeco-based OEM devices ZkTeco ProFace X, Smartec ST-FR043, Smartec...

CVE-2022-3938

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

Mitsubishi Electric MELSEC Resource Management Errors (CVE-2015-3938)

The HTTP application on Mitsubishi Electric MELSEC FX3G PLC devices before April 2015 allows remote attackers to cause a denial of service device outage via a long parameter. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

SUSE: Security Advisory (SUSE-SU-2021:3938-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-3938

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2021-3938

CVE-2021-3938 affects the open-source asset management web app Snipe-IT with a Cross-site Scripting (XSS) vulnerability. The issue stems from lack of proper filtering/escaping of user-submitted data in the AssetsController, enabling injection in web page generation. Public details cover the affec...

CVE-2020-3938

SysJust Syuan-Gu-Da-Shih, versions before 20191223, contain vulnerability of Request Forgery, allowing attackers to launch inquiries into network architecture or system files of the server via forged inquests...

CVE-2020-3938 SysJust Syuan-Gu-Da-Shih -Request-Forgery

SysJust Syuan-Gu-Da-Shih, versions before 20191223, contain vulnerability of Request Forgery, allowing attackers to launch inquiries into network architecture or system files of the server via forged inquests...

CVE-2020-3938

CVE-2020-3938 affects SysJust Syuan-Gu-Da-Shih versions before 20191223 and is described as a Request Forgery vulnerability that lets an attacker perform forged inquests to query the server’s network architecture or system files. The description does not specify affected product variants beyond t...

CVE-2019-3938

Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 stores usernames, passwords, and other configuration options in the file generated via the "export configuration" feature. The configuration file is encrypted using the awenc binary. The same binary can be used to decrypt any...

CVE-2018-3938

Sony IPELA E Series Camera G5 firmware 1.87.00 has a stack-based buffer overflow in the 802dot1xclientcert.cgi endpoint. A crafted POST can trigger remote code execution. Reported under CVE-2018-3938 (TALOS-2018-0605); CVSSv3 9.1 CRITICAL (AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H). Affected product: S...

CVE-2018-3938

An exploitable stack-based buffer overflow vulnerability exists in the 802dot1xclientcert.cgi functionality of Sony IPELA E Series Camera G5 firmware 1.87.00. A specially crafted POST can cause a stack-based buffer overflow, resulting in remote code execution. An attacker can send a malicious POS...

CVE-2017-3938

CVE-2017-3938 is rejected/not used and does not represent an active vulnerability entry.

CVE-2017-3938

...

Debian DSA-3938-1 : libgd2 - security update

Matviy Kotoniy reported that the gdImageCreateFromGifCtx function used to load images from GIF format files in libgd2, a library for programmatic graphics creation and manipulation, does not zero stack allocated color map buffers before their use, which may result in information disclosure if a...

Debian: Security Advisory (DSA-3938-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-3938

CVE-2010-3938 is rejected/not used; this candidate does not represent an active vulnerability entry.

CVE-2010-3938

...

CVE-2016-3938

CVE-2016-3938 affects the Qualcomm video driver (drivers/video/msm/mdss/mdss_mdp_overlay.c) on several Android devices (Nexus 5X, Nexus 6, Nexus 6P, and Android One) with Android versions older than 2016-10-05. The vulnerability allows a locally installed application to escalate privileges due to...