MINI-3979-5PHM-2PQ8

Bulletin has no description...

MINI-PWMH-3979-CQQ7

Bulletin has no description...

CGA-3JC6-C29G-3979

Bulletin has no description...

CVE-2026-3979 quickjs-ng quickjs quickjs.c js_iterator_concat_return use after free

A flaw has been found in quickjs-ng quickjs up to 0.12.1. This affects the function jsiteratorconcatreturn of the file quickjs.c. This manipulation causes use after free. The attack requires local access. The exploit has been published and may be used. Patch name:...

RHSA-2026:3979 Red Hat Security Advisory: thunderbird security update

Bulletin has no description...

MiracleLinux 3 : firefox-3.0.16-1.1AXS3 (AXSA:2009-445:05)

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2009-445:05 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security bugs fixed with this release:...

Debian dla-4310 : ceph - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4310 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4310-1 [email protected]...

[SECURITY] [DLA 4310-1] ceph security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4310-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès September 25, 2025 https://wiki.debian.org/LTS -...

CVE-2022-3979

A vulnerability was found in NagVis up to 1.9.33 and classified as problematic. This issue affects the function checkAuthCookie of the file share/server/core/classes/CoreLogonMultisite.php. The manipulation of the argument hash leads to incorrect type conversion. The attack may be initiated...

CVE-2020-3979

InstallBuilder for Qt Windows versions prior to 20.7.0 installers look for plugins at a predictable location at initialization time, writable by non-admin users. While those plugins are not required, they are loaded if present, which could allow an attacker to plant a malicious library which coul...

CVE-2010-3979

Dswsbobje in SAP BusinessObjects Enterprise XI 3.2 generates different error messages depending on whether the Login field corresponds to a valid username, which allows remote attackers to enumerate account names via a login SOAPAction to the dswsbobje/services/session URI...

CVE-2025-3979

A vulnerability classified as problematic has been found in dazhouda lecms 3.0.3. This affects an unknown part of the file /index.php?my-password-ajax-1 of the component Password Change Handler. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely...

CVE-2025-3979

creationtimestamp| type| source ---|---|--- 2025-04-27 18:10:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13629 2025-04-27 21:20:11+00:00| seen| https://t.me/cvedetector/23850 2025-04-27 21:40:18+00:00| seen|...

CVE-2025-3979 dazhouda lecms Password Change index.php cross-site request forgery

A vulnerability classified as problematic has been found in dazhouda lecms 3.0.3. This affects an unknown part of the file /index.php?my-password-ajax-1 of the component Password Change Handler. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely...

CVE-2025-3979

CVE-2025-3979 affects dazhouda lecms version 3.0.3, specifically the Password Change Handler and its /index.php?my-password-ajax-1 endpoint. Descriptions across sources state a cross-site request forgery vulnerability that can be initiated remotely and exploited publicly disclosed. The issue appe...

Linux Distros Unpatched Vulnerability : CVE-2022-3979

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in NagVis up to 1.9.33 and classified as problematic. This issue affects the function checkAuthCookie of the file...

Linux Distros Unpatched Vulnerability : CVE-2021-3979

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the key length is incorrectly passed in an encryption algorithm to...

Fedora 37 : ceph (2022-d832fd2f45)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-d832fd2f45 advisory. ceph 17.2.5 GA ---- ceph-17.2.4 Security fix for CVE-2021-3979 Note: fix was actually included in ceph-17.2.3 Tenable has extracted the preceding...

SUSE: Security Advisory (SUSE-SU-2024:3979-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle DB SQL Injection In MDSYS.SDO_TOPO_DROP_FTBL Trigger

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Oracle DB SQL Injection in MDSYS.SDOTOPODROPFTBL Trigger', 'Description' = %q This module will escalate an Oracle DB user to MDSYS by exploiting ...