115 matches found
CVE-2022-3988
CVE-2022-3988 (Frappe) affects an unknown functionality in the file frappe/templates/includes/navbar/navbar_search.html (component: Search). The underlying issue is that manipulating the query parameter q enables cross-site scripting (XSS). The description notes that the attack may be launched re...
CVE-2017-3988
This CVE entry is rejected/not used and does not represent an active vulnerability entry.
SUSE: Security Advisory (SUSE-SU-2018:3988-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
VMware Horizon View Client < 5.4.4 Multiple Vulnerabilities (VMSA-2020-0020)
The version of VMware Horizon Client for Windows installed on the remote host is less than 5.4.4. It is, therefore, affected by the following vulnerabilities: - Multiple out-of-bounds read vulnerabilities in Cortado ThinPrint components JPEG2000 parser, EMR STRETCHDIBITS parser, and EMF Parser. A...
VMware Workstation 15.x < 15.5.7 Multiple Vulnerabilities (VMSA-2020-0020)
The version of VMware Workstation installed on the remote host is 15.x. It is, therefore, affected by the following vulnerabilities: - Multiple out-of-bounds read vulnerabilities in Cortado ThinPrint components JPEG2000 parser, EMR STRETCHDIBITS parser, and EMF Parser. A malicious actor with norm...
CVE-2020-3988
CVE-2020-3988 affects VMware Workstation 15.x and Horizon Client for Windows 5.x (pre-5.4.4). The issue is an out-of-bounds read in the Cortado ThinPrint JPEG2000 parser, which can allow a local attacker with VM access to cause a partial DoS or leak memory from TPView. Evidence from multiple sour...
KLA12099 Multiple vulnerabilities in VMware Workstation and Player
Multiple vulnerabilities were found in VMware Workstation and Player. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service, gain privileges. Below is a complete list of vulnerabilities: 1. A out of bounds read vulnerability in Cortado ThinPrin...
CVE-2019-3988
CVE-2019-3988 affects the Blink XT2 Sync Module firmware prior to 2.13.11. It is an OS command injection vulnerability caused by improper sanitization of the bssid parameter during Wi‑Fi configuration, enabling remote command execution on the device. Public details from multiple sources confirm t...
Ubuntu 18.04 LTS : MediaInfoLib vulnerabilities (USN-3988-1)
The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3988-1 advisory. It was discovered that MediaInfoLib contained multiple security issues when handling certain multimedia files. If a user were tricked into opening a...
Ubuntu: Security Advisory (USN-3988-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Cross-site Scripting (XSS)
OpenStack Dashboard Horizon provides administrators and users with a graphical interface to access, provision, and automate cloud-based resources. Two security issues were discovered in the Horizon dashboard and are addressed in this update: A cross-site scripting XSS flaw was found in the Horizo...
Use-After-Free
Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...
Bypass Policy
Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...
CVE-2018-3988
Signal Messenger for Android 4.24.8 may expose private information when using "disappearing messages." If a user uses the photo feature available in the "attach file" menu, then Signal will leave the picture in its own cache directory, which is available to any application on the system...
CVE-2018-3988
Signal Messenger for Android 4.24.8 is affected by an information-disclosure vulnerability when using the “disappearing messages” feature and the photo option in the Attach File menu. The issue arises because Signal stores the photo in its own cache directory, which can be accessed by other appli...
Debian DSA-3988-1 : libidn2-0 - security update
An integer overflow vulnerability was discovered in decodedigit in libidn2-0, the GNU library for Internationalized Domain Names IDNs, allowing a remote attacker to cause a denial of service against an application using the library application crash. %NASLMINLEVEL 70300 C Tenable Network Security...
CVE-2016-3988
CVE-2016-3988 affects Meinberg NTP Time Server interfaces across multiple IMS-LANTIME/LANTIME/SyncFire/LCES devices (M3000, M1000, M500, M900, M600, M400, M300, M200, M100, SyncFire 1100, LCES) with firmware prior to 6.20.004. The vulnerability is due to multiple stack-based buffer overflows in t...
Meinberg NTP Time Server Vulnerabilities
OVERVIEW Independent researcher Ryan Wincey has identified a stack buffer overflow vulnerability and a privilege escalation vulnerability in Meinberg’s NTP Time Servers Interface. Meinberg has produced a new Version 6.20.004 to mitigate these vulnerabilities. The researcher has validated the...
Oracle: Security Advisory (ELSA-2010-0112)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...