84 matches found
MINI-GW35-3948-QW36
Bulletin has no description...
EUVD-2026-3948
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in goalthemes Hyori hyori allows PHP Local File Inclusion.This issue affects Hyori: from n/a through = 1.3.6...
ECHO-EE91-3948-5C74
Bulletin has no description...
CVE-2023-3948
creationtimestamp| type| source ---|---|--- 2025-08-22 02:33:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwxg5kfkh32p...
PT-2025-27495 · Ibm · Ibm System Storage Virtualization Engine Ts7700 +2
Name of the Vulnerable Software and Affected Versions: IBM System Storage Virtualization Engine TS7700 versions 8.54.2.17 through 8.60.0.115 IBM System Storage Virtualization Engine 3948 VED versions 8.54.2.17 through 8.60.0.115 IBM System Storage Virtualization Engine 3948 VEF version 8.60.0.115...
CVE-2020-3948
Linux Guest VMs running on VMware Workstation 15.x before 15.5.2 and Fusion 11.x before 11.5.2 contain a local privilege escalation vulnerability due to improper file permissions in Cortado Thinprint. Local attackers with non-administrative access to a Linux guest VM with virtual printing enabled...
Linux Distros Unpatched Vulnerability : CVE-2016-3948
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Squid 3.x before 3.5.16 and 4.x before 4.0.8 improperly perform bounds checking, which allows remote attackers to cause a denial of service via a crafted HTTP...
Dahua Security Cameras Missing Authentication for Critical Function (CVE-2019-3948)
The Amcrest IP2M-841B V2.520.AC00.18.R, Dahua IPC-XXBXX V2.622.0000000.9.R, Dahua IPC HX5X3X and HX4X3X V2.800.0000008.0.R, Dahua DH-IPC HX883X and DH-IPC-HX863X V2.622.0000000.7.R, Dahua DH- SD4XXXXX V2.623.0000000.7.R, Dahua DH-SD5XXXXX V2.623.0000000.1.R, Dahua DH-SD6XXXXX V2.640.0000000.2.R a...
openSUSE: Security Advisory for libvpx (SUSE-SU-2023:3948-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2023-31403 · Ibm · Ibm System Storage Virtualization Engine Ts7700
Name of the Vulnerable Software and Affected Versions: IBM System Storage Virtualization Engine TS7700 versions 3957-VEC, 3948-VED Description: A remote attacker could obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used i...
Rocky Linux 9 : open-vm-tools (RLSA-2023:3948)
The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2023:3948 advisory. - A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest...
Oracle Linux 9 : open-vm-tools (ELSA-2023-3948)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-3948 advisory. 12.1.5-1.0.2 - CISA Major Incident CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module Tenable has extracted the preceding...
RHEL 9 : open-vm-tools (RHSA-2023:3948)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3948 advisory. The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization...
CVE-2022-3948
A vulnerability classified as critical was found in eolinker gokulite. This vulnerability affects unknown code of the file /plugin/getList. The manipulation of the argument route/keyword leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and...
CVE-2022-3948
The CVE-2022-3948 issue affects eolinker goku_lite, impacting the /plugin/getList endpoint where manipulation of route/keyword enables SQL injection. Multiple sources (NVD, CVE lists, RedHat, CNVD, CNVD, etc.) classify this as critical with remote exploitability and public disclosure (VDB-213454)...
CVE-2021-3948
CVE-2021-3948 affects the mig-controller within Migration Toolkit for Containers (MTC). The root cause is incorrect cluster namespace handling, which could allow an attacker to migrate a malicious workload into the target cluster, potentially impacting confidentiality, integrity, and availability...
Moderate: Red Hat Security Advisory: Migration Toolkit for Containers (MTC) 1.6.3 security and bug fix update
The Migration Toolkit for Containers MTC 1.6.3 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...
SUSE: Security Advisory (SUSE-SU-2021:3948-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLES15 Security Update : mariadb (SUSE-SU-2021:3948-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:3948-1 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.35 and prior and...
Moderate: Red Hat Security Advisory: Migration Toolkit for Containers (MTC) 1.5.2 security update and bugfix advisory
The Migration Toolkit for Containers MTC 1.5.2 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...