CVE-2023-0339

creationtimestamp| type| source ---|---|--- 2026-07-29 12:02:30+00:00| seen| https://t.me/reverseame/3322 2026-07-30 00:02:30+00:00| seen| https://t.me/reverseame/3322 2026-08-02 18:00:04+00:00| published-proof-of-concept| https://t.me/reverseame/3322 2026-08-03 01:29:04+00:00|...

PYSEC-2026-304 Server-Side Request Forgery in calibreweb

calibreweb prior to version 0.6.17 is vulnerable to server-side request forgery SSRF. This is due to an incomplete fix for CVE-2022-0339. The blacklist does not check for 0.0.0.0, which would result in a payload of 0.0.0.0 resolving to localhost...

EUVD-2026-0339

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

CVE-2023-0339

Relative Path Traversal vulnerability in ForgeRock Access Management Web Policy Agent allows Authentication Bypass. This issue affects Access Management Web Policy Agent: all versions up to 5.10.1...

CVE-2025-0339

A vulnerability classified as problematic has been found in code-projects Online Bike Rental 1.0. Affected is an unknown function of the file /vehical-details.php of the component HTTP GET Request Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotel...

CVE-2025-0339

creationtimestamp| type| source ---|---|--- 2025-01-09 07:14:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/901 2025-01-09 07:16:10+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfc52e66wo2l 2025-01-09 09:23:23+00:00| seen|...

CVE-2025-0339 code-projects Online Bike Rental HTTP GET Request vehical-details.php cross site scripting

A vulnerability classified as problematic has been found in code-projects Online Bike Rental 1.0. Affected is an unknown function of the file /vehical-details.php of the component HTTP GET Request Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotel...

CVE-2025-0339 code-projects Online Bike Rental HTTP GET Request vehical-details.php cross site scripting

A vulnerability classified as problematic has been found in code-projects Online Bike Rental 1.0. Affected is an unknown function of the file /vehical-details.php of the component HTTP GET Request Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotel...

Important Photon OS Security Update - PHSA-2024-5.0-91-0339

Updates of 'tpm2-tools' packages of Photon OS have been released...

Photon OS 4.0: Harfbuzz PHSA-2023-4.0-0339

An update of the harfbuzz package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0339. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

RHEL 6 : libxml2 (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libxml2: Use after free via namespace node in XPointer ranges CVE-2016-4658 - libxml2: Missing validation...

CVE-2023-0339

Relative Path Traversal vulnerability in ForgeRock Access Management Web Policy Agent allows Authentication Bypass. This issue affects Access Management Web Policy Agent: all versions up to 5.10.1...

CVE-2023-0339 AM Web Policy Agent path traversal

Relative Path Traversal vulnerability in ForgeRock Access Management Web Policy Agent allows Authentication Bypass. This issue affects Access Management Web Policy Agent: all versions up to 5.10.1...

CVE-2023-0339

CVE-2023-0339 is a Relative Path Traversal vulnerability in ForgeRock Access Management Web Policy Agent that allows authentication bypass. Affected: ForgeRock Access Management Web Policy Agent versions up to 5.10.1. Impact described as potential authentication bypass with high confidentiality/i...

AlmaLinux 9 : sqlite (ALSA-2023:0339)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:0339 advisory. - SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API. CVE-2022-3573...

RHEL 9 : sqlite (RHSA-2023:0339)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:0339 advisory. SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk...

GHSA-2647-C639-QV2J Server-Side Request Forgery in calibreweb

calibreweb prior to version 0.6.17 is vulnerable to server-side request forgery SSRF. This is due to an incomplete fix for CVE-2022-0339. The blacklist does not check for 0.0.0.0, which would result in a payload of 0.0.0.0 resolving to localhost...

CVE-2022-0339

creationtimestamp| type| source ---|---|--- 2022-02-28 07:25:18+00:00| seen| https://t.me/cibsecurity/36568...

CVE-2022-0339 Server-Side Request Forgery (SSRF) in janeczku/calibre-web

Server-Side Request Forgery SSRF in Pypi calibreweb prior to 0.6.16...

CVE-2022-0339

CVE-2022-0339 is a Server-Side Request Forgery (SSRF) flaw affecting calibreweb. The connected sources indicate calibreweb prior to version 0.6.16 is vulnerable, with references noting an incomplete fix for the CVE and a blacklist weakness (0.0.0.0) that could resolve to localhost. Several adviso...