86 matches found
CVE-2026-3950
creationtimestamp| type| source ---|---|--- 2026-03-11 19:16:22+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3950...
CVE-2025-3950 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-workhorse-ce, gitlab-workhorse-ce-fips, gitlab-rails-ce...
CVE-2025-3950
Removed by vendor...
CVE-2025-3950
creationtimestamp| type| source ---|---|--- 2026-01-08 14:15:14+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mbw66qsi4d2u 2026-01-09 13:06:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbykt5fduq2u...
CVE-2025-20748
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00432679; Issue ID: MSV-395...
PT-2025-44987
Name of the Vulnerable Software and Affected Versions Aruba WLAN AP Driver affected versions not specified Description An out-of-bounds write issue exists in the wlan AP driver due to an incorrect bounds check. Successful exploitation could allow a malicious actor with System privileges to escala...
CVE-2023-3950
An information disclosure issue in GitLab EE affecting all versions from 16.2 prior to 16.2.5, and 16.3 prior to 16.3.1 allowed other Group Owners to see the Public Key for a Google Cloud Logging audit event streaming destination, if configured. Owners can now only write the key, not read it...
CVE-2022-3950
A vulnerability, which was classified as problematic, was found in sanluan PublicCMS. Affected is the function initLink of the file dwz.min.js of the component Tab Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The name of the patch is...
CVE-2019-3950
Arlo Basestation firmware 1.12.0.127940 and prior contain a hardcoded username and password combination that allows root access to the device when an onboard serial interface is connected to...
openSUSE Security Advisory (SUSE-SU-2024:3950-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GitLab 16.2 < 16.2.5 / 16.3 < 16.3.1 (CVE-2023-3950)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An information disclosure issue in GitLab EE affecting all versions from 16.2 prior to 16.2.5, and 16.3 prior to 16.3.1 allowed other Group Owners to see the Public Key for a Google Cloud Logging audi...
CVE-2023-3950
creationtimestamp| type| source ---|---|--- 2023-09-01 14:13:45+00:00| seen| https://t.me/cibsecurity/69619...
CVE-2023-3950 Cleartext Storage of Sensitive Information in GitLab
An information disclosure issue in GitLab EE affecting all versions from 16.2 prior to 16.2.5, and 16.3 prior to 16.3.1 allowed other Group Owners to see the Public Key for a Google Cloud Logging audit event streaming destination, if configured. Owners can now only write the key, not read it...
CVE-2023-3950
CVE-2023-3950 affects GitLab Enterprise Edition. The issue is an information disclosure where, prior to patch versions, any Group Owner could read the Public Key for a configured Google Cloud Logging audit event streaming destination. Affected are GitLab EE versions 16.2 up to, but not including,...
CVE-2023-3950
Removed by vendor...
CVE-2023-3950 Cleartext Storage of Sensitive Information in GitLab
An information disclosure issue in GitLab EE affecting all versions from 16.2 prior to 16.2.5, and 16.3 prior to 16.3.1 allowed other Group Owners to see the Public Key for a Google Cloud Logging audit event streaming destination, if configured. Owners can now only write the key, not read it...
CVE-2023-3950 Cleartext Storage of Sensitive Information in GitLab
An information disclosure issue in GitLab EE affecting all versions from 16.2 prior to 16.2.5, and 16.3 prior to 16.3.1 allowed other Group Owners to see the Public Key for a Google Cloud Logging audit event streaming destination, if configured. Owners can now only write the key, not read it...
RHEL 8 : open-vm-tools (RHSA-2023:3950)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3950 advisory. The Open Virtual Machine Tools are the open source implementation of the VMware Tools. They are a set of guest operating system virtualization...
SUSE CVE-2007-3950
lighttpd 1.4.15, when run on 32 bit platforms, allows remote attackers to cause a denial of service daemon crash via unspecified vectors involving the use of incompatible format specifiers in certain debugging messages in the 1 modscgi, 2 modfastcgi, and 3 modwebdav modules...