EUVD-2026-3998

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Infility Infility Global infility-global allows Stored XSS.This issue affects Infility Global: from n/a through = 2.14.50...

CVE-2019-3998

Authentication bypass using an alternate path or channel in SimpliSafe SS3 firmware 1.4 allows a local, unauthenticated attacker to modify the Wi-Fi network the base station connects to...

CVE-2025-3998

A vulnerability classified as critical was found in CodeAstro Membership Management System 1.0. This vulnerability affects unknown code of the file renew.php?id=6. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to t...

CVE-2025-3998

creationtimestamp| type| source ---|---|--- 2025-04-28 04:10:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13655 2025-04-28 07:22:19+00:00| seen| https://t.me/cvedetector/23879 2025-04-28 07:40:50+00:00| seen|...

Siemens SIMATIC S7-1500 TM MFP BIOS Out-of-bounds Read (CVE-2021-3998)

A flaw was found in glibc. The realpath function can mistakenly return an unexpected value, potentially leading to information leakage and disclosure of sensitive data. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

CVE-2024-3998

creationtimestamp| type| source ---|---|--- 2024-08-30 08:07:40+00:00| seen| https://t.me/cvedetector/4500...

CVE-2021-3998 affecting package glibc for versions less than 2.35-7

CVE-2021-3998 affecting package glibc for versions less than 2.35-7. An upgraded version of the package is available that resolves this issue...

openSUSE: Security Advisory for poppler (SUSE-SU-2023:3998-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-3998

creationtimestamp| type| source ---|---|--- 2023-10-20 12:35:13+00:00| seen| https://t.me/cibsecurity/72656...

CVE-2023-3998

CVE-2023-3998 affects the WordPress wpDiscuz plugin. The vulnerability is an unauthorized data modification flaw due to a missing authorization check in the helper workflow (function: userRate), impacting versions up to and including 7.6.3. An unauthenticated attacker can increase or decrease a p...

SUSE: Security Advisory (SUSE-SU-2023:3998-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress wpDiscuz Plugin <= 7.6.3 is vulnerable to Insecure Direct Object References (IDOR)

Software wpDiscuz Type Plugin Vulnerable versions = 7.6.3 Fixed in 7.6.4 OWASP Top 10 A1: Broken Access Control Classification Insecure Direct Object References IDOR CVE CVE-2023-3998 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 5e7dc9378ede Credits FearZzZz Required...

USN-5310-1: GNU C Library vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description Jan Engelhardt, Tavis Ormandy, and others discovered that the GNU C Library iconv feature incorrectly handled certain input sequences. An attacker could possibly use this issue to cause the GNU C Library ...

CVE-2022-3998

CVE-2022-3998 affects MonikaBrzica scm, specifically the unknown part of the file uredi_korisnika.php. The vulnerability is an SQL injection triggered by manipulating the id parameter, allowing remote exploitation. The description notes that the exploit has been disclosed to the public. Public te...

CVE-2022-3998 MonikaBrzica scm uredi_korisnika.php sql injection

A vulnerability, which was classified as critical, was found in MonikaBrzica scm. This affects an unknown part of the file uredikorisnika.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public a...

CVE-2022-3998 MonikaBrzica scm uredi_korisnika.php sql injection

A vulnerability, which was classified as critical, was found in MonikaBrzica scm. This affects an unknown part of the file uredikorisnika.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public a...

CVE-2021-3998

creationtimestamp| type| source ---|---|--- 2022-08-24 20:22:50+00:00| seen| https://t.me/cibsecurity/48658...

CVE-2021-3998

A flaw was found in glibc. The realpath function can mistakenly return an unexpected value, potentially leading to information leakage and disclosure of sensitive data...

CVE-2021-3998

CVE-2021-3998 is a glibc flaw where the realpath() function may return an unexpected value, potentially leaking sensitive information. The connected IBM/enterprise bulletins summarize the vulnerability as an information disclosure issue tied to the realpath() implementation, indicating a local-au...

CVE-2021-3998

A flaw was found in glibc. The realpath function can mistakenly return an unexpected value, potentially leading to information leakage and disclosure of sensitive data...