124 matches found
EUVD-2026-0392
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...
Linux Distros Unpatched Vulnerability : CVE-2017-0392
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A denial of service vulnerability in VBRISeeker.cpp in libstagefright in Mediaserver could enable a remote attacker to use a specially crafted file to cause a...
TencentOS Server 3: vim (TSSA-2022:0222)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2022:0222 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...
CVE-2025-0392
A vulnerability, which was classified as critical, was found in Guangzhou Huayi Intelligent Technology Jeewms up to 20241229. Affected is the function datagridGraph of the file /graphReportController.do. The manipulation of the argument storecode leads to sql injection. It is possible to launch t...
Linux Distros Unpatched Vulnerability : CVE-2022-0392
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based Buffer Overflow in GitHub repository vim prior to 8.2. CVE-2022-0392 Note that Nessus relies on the presence of the package as reported by the vendor...
CVE-2024-0392
A Cross-Site Request Forgery CSRF vulnerability exists in the management console of WSO2 Enterprise Integrator 6.6.0 due to the absence of CSRF token validation. This flaw allows attackers to craft malicious requests that can trigger state-changing operations on behalf of an authenticated user,...
CVE-2024-0392
creationtimestamp| type| source ---|---|--- 2025-02-27 07:25:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5657 2025-02-27 09:53:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lj5mo3arrj26 2025-02-27 10:22:19+00:00| seen| https://t.me/cvedetector/19030 2025-08-22...
CVE-2024-0392
A Cross-Site Request Forgery CSRF vulnerability exists in the management console of WSO2 Enterprise Integrator 6.6.0 due to the absence of CSRF token validation. This flaw allows attackers to craft malicious requests that can trigger state-changing operations on behalf of an authenticated user,...
CVE-2025-0392
A vulnerability, which was classified as critical, was found in Guangzhou Huayi Intelligent Technology Jeewms up to 20241229. Affected is the function datagridGraph of the file /graphReportController.do. The manipulation of the argument storecode leads to sql injection. It is possible to launch t...
CVE-2025-0392 Guangzhou Huayi Intelligent Technology Jeewms graphReportController.do datagridGraph sql injection
A vulnerability, which was classified as critical, was found in Guangzhou Huayi Intelligent Technology Jeewms up to 20241229. Affected is the function datagridGraph of the file /graphReportController.do. The manipulation of the argument storecode leads to sql injection. It is possible to launch t...
Amazon Linux 2022 : vim-common, vim-data, vim-default-editor (ALAS2022-2022-023)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-023 advisory. A flaw was found in vim. The vulnerability occurs due to too many recursions, which can lead to a segmentation fault. This flaw allows an attacker to input a specially crafted file, leading to ...
Photon OS 4.0: Bluez PHSA-2023-4.0-0392
An update of the bluez package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0392. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
CVE-2023-0392
The LDAP Agent Update service with versions prior to 5.18 used an unquoted path, which could allow arbitrary code execution...
CVE-2023-0392
CVE-2023-0392 affects the Okta LDAP Agent Update service, with versions prior to 5.18, due to an unquoted path that could allow arbitrary code execution. The vulnerability is local, requiring high privileges but no user interaction. Impact is described as potential code execution on the host; rem...
Rocky Linux 8 : vim (RLSA-2022:0894)
The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:0894 advisory. - Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. CVE-2022-0261, CVE-2022-0359, CVE-2022-0361 - Heap-based Buffer Overflow in...
BELL-CVE-2022-0392 CVE-2022-0392 does not affect BellSoft software
Bulletin has no description...
K13434228: Apache Struts vulnerability CVE-2012-0392
Security Advisory Description The CookieInterceptor component in Apache Struts before 2.3.1.1 does not use the parameter-name whitelist, which allows remote attackers to execute arbitrary commands via a crafted HTTP Cookie header that triggers Java code execution through a static method...
SUSE CVE-2012-0392
The CookieInterceptor component in Apache Struts before 2.3.1.1 does not use the parameter-name whitelist, which allows remote attackers to execute arbitrary commands via a crafted HTTP Cookie header that triggers Java code execution through a static method...
SUSE CVE-2022-0392
Heap-based Buffer Overflow in GitHub repository vim prior to 8.2...
USN-5801-1: Vim vulnerabilities | Cloud Foundry
Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Canonical Ubuntu 22.04 Description It was discovered that Vim makes illegal memory calls when pasting brackets in Ex mode. An attacker could possibly use this to crash Vim, access or modify memory, or execute arbitra...