77 matches found
CVE-2026-3993
creationtimestamp| type| source ---|---|--- 2026-03-12 08:49:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgtzeuisgs27...
CVE-2026-3993 itsourcecode Payroll Management System manage_employee_deductions.php cross site scripting
A security vulnerability has been detected in itsourcecode Payroll Management System 1.0. This vulnerability affects unknown code of the file /manageemployeedeductions.php. Such manipulation of the argument ID leads to cross site scripting. The attack may be launched remotely. The exploit has bee...
MINI-5PRP-55C4-3993
Bulletin has no description...
CVE-2025-3993 TOTOLINK N150RT formWsc buffer overflow
A vulnerability was found in TOTOLINK N150RT 3.4.0-B20190525 and classified as critical. This issue affects some unknown processing of the file /boafrm/formWsc. The manipulation of the argument submit-url leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclos...
CVE-2025-3993
TOTOLINK N150RT 3.4.0-B20190525 is affected by a buffer overflow in the /boafrm/formWsc handler when the submit-url parameter is manipulated. The issue can be triggered remotely and impacts confidentiality, integrity, and availability (high). Root cause: improper handling of the submit-url argume...
CVE-2022-3993
Improper Restriction of Excessive Authentication Attempts in GitHub repository kareadita/kavita prior to 0.6.0.3...
PT-2024-35372 · Jenkins · Jenkins Pipeline: Groovy Plugin
Name of the Vulnerable Software and Affected Versions: Jenkins Pipeline: Groovy Plugin versions 3990.vd281dd77a 388 and earlier, except version 3975.3977.v478dd9e956c3 Description: The issue allows attackers with Item/Build permission to rebuild a previous build whose Jenkinsfile script is no...
WordPress AZAN Plugin <= 0.6 is vulnerable to Cross Site Request Forgery (CSRF)
Software AZAN Type Plugin Vulnerable versions = 0.6 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-3993 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 4ed17ec41107 Credits Bob Matyas Required privilege...
CVE-2019-3993
creationtimestamp| type| source ---|---|--- 2024-03-12 20:21:55+00:00| seen| https://t.me/ctinow/206091...
CVE-2023-3993
creationtimestamp| type| source ---|---|--- 2023-08-02 07:39:14+00:00| seen| https://t.me/cibsecurity/67559...
CVE-2023-3993 Insertion of Sensitive Information into Log File in GitLab
An issue has been discovered in GitLab EE affecting all versions starting from 14.3 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. Access tokens may have been logged when a query was made to a specific endpoint...
CVE-2023-3993 Exposure of Sensitive Information to an Unauthorized Actor in GitLab
An issue has been discovered in GitLab EE affecting all versions starting from 14.3 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. Access tokens may have been logged when a query was made to a specific endpoint...
CVE-2023-3993
CVE-2023-3993 affects GitLab EE across multiple tracked versions: 14.3–16.0.7, 16.1.x before 16.1.3, and 16.2.x before 16.2.2. The issue allows access tokens to be logged when querying a specific endpoint. The reported impact is primarily confidentiality due to token exposure, with no integrity/a...
GitLab 14.3 < 16.0.8 / 16.1 < 16.1.3 / 16.2 < 16.2.2 (CVE-2023-3993)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab EE affecting all versions starting from 14.3 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. Access...
CVE-2022-3993
Improper Restriction of Excessive Authentication Attempts in GitHub repository kareadita/kavita prior to 0.6.0.3...
CVE-2022-3993
Kareadita/kavita prior to version 0.6.0.3 suffers from an Improper Restriction of Excessive Authentication Attempts. The connected Huntr entry documents a vulnerability at the migrate-email endpoint with no rate limiting, enabling brute‑force attempts on authentication parameters. Public disclosu...
Ubuntu: Security Advisory (USN-3993-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-3993
creationtimestamp| type| source ---|---|--- 2021-12-01 14:35:49+00:00| seen| https://t.me/cibsecurity/33189...