79 matches found
CVE-2023-3949
Summary: CVE-2023-3949 affects GitLab versions 11.3–16.4.3, 16.5–16.5.3, and 16.6–16.6.1. An unauthorized user could view a public project’s release descriptions via an atom endpoint when release access on the public was restricted to project members. The issue’s base CVSSv3.1 score is 5.3 (Mediu...
CVE-2023-3949 Insertion of Sensitive Information Into Sent Data in GitLab
An issue has been discovered in GitLab affecting all versions starting from 11.3 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. It was possible for unauthorized users to view a public projects' release descriptions via an atom endpoint...
CVE-2023-3949 Insertion of Sensitive Information Into Sent Data in GitLab
An issue has been discovered in GitLab affecting all versions starting from 11.3 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. It was possible for unauthorized users to view a public projects' release descriptions via an atom endpoint...
CVE-2023-3949
An issue has been discovered in GitLab affecting all versions starting from 11.3 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. It was possible for unauthorized users to view a public projects' release descriptions via an atom endpoint...
SUSE: Security Advisory (SUSE-SU-2023:3949-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle Linux 7 : librabbitmq (ELSA-2020-3949)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-3949 advisory. 0.8.0-3 - Resolves: 1809991, CVE-2019-18609 - integer overflow Tenable has extracted the preceding description block directly from the Oracle Linux security...
Rocky Linux 8 : open-vm-tools (RLSA-2023:3949)
The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2023:3949 advisory. - A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest...
Oracle Linux 8 : open-vm-tools (ELSA-2023-3949)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-3949 advisory. 12.1.5-1.0.2 - CISA Major Incident CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module Tenable has extracted the preceding...
RHEL 8 : open-vm-tools (RHSA-2023:3949)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3949 advisory. The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization...
CVE-2022-3949
creationtimestamp| type| source ---|---|--- 2022-12-21 05:02:22+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/7155 2026-07-29 12:00:56+00:00| seen| https://t.me/CVEhub/4710 2026-07-30 00:01:33+00:00| seen| https://t.me/CVEhub/4710 2026-07-31 22:00:03+00:00|...
CVE-2022-3949
CVE-2022-3949 affects Sourcecodester Simple Cashiering System, specifically the User Account Handler where manipulating the fullname parameter triggers cross-site scripting (XSS). Reported to permit remote initiation, with no documented exploit details in the provided sources. The impact is descr...
SUSE: Security Advisory (SUSE-SU-2021:3949-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-3949
CVE-2019-3949 involves Arlo Basestation firmware (≤1.12.0.1_27940) with insufficient UART protection. If an attacker gains physical access and connects to the UART port, they can reach the device login prompt and potentially obtain sensitive information, aided by hardcoded UART credentials. Relat...
Security Camera Firm Arlo Zaps High-Severity Bugs
Two high-severity vulnerabilities in Arlo Technologies’ wireless home security camera gear have been patched. The flaws, which indirectly impact Arlo’s popular fleet of wireless home security cameras, are limited to adversaries with local network and physical access to Arlo Base Stations. Both...
Ubuntu 18.04 LTS : OpenJDK 11 vulnerability (USN-3949-1)
The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3949-1 advisory. It was discovered that a memory disclosure issue existed in the OpenJDK Library subsystem. An attacker could use this to expose sensitive information and possibly...
Ubuntu: Security Advisory (USN-3949-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2018-3949
CVE-2018-3949 (TP-Link TL-R600VPN) is a directory-traversal vulnerability in the device’s HTTP server that can disclose sensitive files. Talos documentation states the issue exists in the TL-R600VPN web server and can be triggered by a crafted URL, with exploitation possible in both unauthenticat...
CVE-2018-3949
creationtimestamp| type| source ---|---|--- 2018-11-21 17:54:32+00:00| seen| MISP/5bf59afb-1fb8-4a70-991c-75ea0a021402 2022-01-28 05:51:53+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/125...
