135 matches found
AZL-27818 CVE-2023-3978 affecting package vitess for versions less than 17.0.7-1
Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attack...
AZL-27810 CVE-2023-3978 affecting package cert-manager for versions less than 1.11.2-14
Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attack...
AZL-31858 CVE-2023-3978 affecting package multus for versions less than 4.0.2-5
Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attack...
CVE-2023-3978
Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attack...
CVE-2023-3978 Improper rendering of text nodes in golang.org/x/net/html
Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attack...
CVE-2023-3978 Improper rendering of text nodes in golang.org/x/net/html
Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attack...
CVE-2023-3978
CVE-2023-3978 describes an XSS as text nodes not in the HTML namespace are rendered literally and not escaped. The connected records reiterate this vulnerability under the same CVE, noting the impact as cross-site scripting due to unescaped text. The provided sources do not specify affected produ...
CVE-2022-3978
CVE-2022-3978 affects NodeBB up to version 2.5.7, with CSRF vulnerability in the /register/abort path that can be triggered remotely. The issue is resolved by upgrading to 2.5.8, with patch identifier 2f9d8c350e54543f608d3d4c8e1a49bbb6cdea38. Connected sources consistently describe a cross‑site r...
CentOS 7 : glib2 and ibus (RHSA-2020:3978)
The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3978 advisory. - filecopyfallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is in progress...
Oracle Linux 7 : glib2 / and / ibus (ELSA-2020-3978)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-3978 advisory. - Backport patch to limit access to files when copying CVE-2019-12450 Resolves: 1722099 Tenable has extracted the preceding description block directly...
MikroTik RouterOS DNS Cache Poisoning (CVE-2019-3978)
Binary data mikrotikcve-2019-3978.nbin...
MikroTik RouterOS 6.45.6 - DNS Cache Poisoning Exploit
Exploit Title: MikroTik RouterOS 6.45.6 - DNS Cache Poisoning Exploit Author: Jacob Baines Vendor Homepage: https://mikrotik.com/ Software Link: https://mikrotik.com/download Version: 6.45.6 Stable and below or 6.44.5 Long-term and below Tested on: Various x86 and MIPSBE RouterOS installs CVE :...
MikroTik RouterOS 6.45.6 - DNS Cache Poisoning
Exploit Title: MikroTik RouterOS 6.45.6 - DNS Cache Poisoning Date: 2019-10-30 Exploit Author: Jacob Baines Vendor Homepage: https://mikrotik.com/ Software Link: https://mikrotik.com/download Version: 6.45.6 Stable and below or 6.44.5 Long-term and below Tested on: Various x86 and MIPSBE RouterOS...
MikroTik RouterOS 6.45.6 - DNS Cache Poisoning
MikroTik RouterOS 6.45.6 - DNS Cache Poisoning Exploit Title: MikroTik RouterOS 6.45.6 - DNS Cache Poisoning Date: 2019-10-30 Exploit Author: Jacob Baines Vendor Homepage: https://mikrotik.com/ Software Link: https://mikrotik.com/download Version: 6.45.6 Stable and below or 6.44.5 Long-term and...
MikroTik RouterOS 6.45.6 DNS Cache Poisoning
Exploit Title: MikroTik RouterOS 6.45.6 - DNS Cache Poisoning Date: 2019-10-30 Exploit Author: Jacob Baines Vendor Homepage: https://mikrotik.com/ Software Link: https://mikrotik.com/download Version: 6.45.6 Stable and below or 6.44.5 Long-term and below Tested on: Various x86 and MIPSBE RouterOS...
CVE-2019-3978
RouterOS versions 6.45.6 Stable, 6.44.5 Long-term, and below allow remote unauthenticated attackers to trigger DNS queries via port 8291. The queries are sent from the router to a server of the attacker's choice. The DNS responses are cached by the router, potentially resulting in cache poisoning...
CVE-2019-3978
creationtimestamp| type| source ---|---|--- 2019-10-29 18:57:45+00:00| published-proof-of-concept| https://t.me/antichat/6903 2019-10-29 19:57:25+00:00| published-proof-of-concept| https://t.me/cybershit/608 2019-10-30 01:40:05+00:00| seen| https://t.me/dtpnk/368 2019-10-30 10:21:42+00:00| seen|...
CVE-2019-3978
MikroTik RouterOS CVE-2019-3978 affects RouterOS before 6.44.6 LTS or 6.45.x before 6.45.7. An unauthenticated remote attacker can trigger DNS queries via port 8291 (Winbox); DNS responses are cached, enabling cache poisoning. Remediation per sources: upgrade to RouterOS 6.44.6 LTS or 6.45.7 (or ...
CVE-2018-3978
CVE-2018-3978 is a vulnerability in Atlantis Word Processor’s Word Document parser (CLX/Clx handling in the Fib-based WordDocument table). A specially crafted Word binary (DOC) document can trigger a heap-based buffer overflow by mis-processing the Clx/Pcdt piece-descriptor table: the Clx.lcb con...