107 matches found
CVE-2024-26832
creationtimestamp| type| source ---|---|--- 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0398/...
CVE-2026-0398
Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor...
DEBIAN-CVE-2026-0398
Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor...
CVE-2021-0398
In bindServiceLocked of ActiveServices.java, there is a possible foreground service launch due to a confused deputy. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android...
CVE-2022-0398
The ThirstyAffiliates Affiliate Link Manager WordPress plugin before 3.10.5 does not have authorisation and CSRF checks when creating affiliate links, which could allow any authenticated user, such as subscriber to create arbitrary affiliate links, which could then be used to redirect users to an...
EUVD-2026-0398
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...
TencentOS Server 4: ppp (TSSA-2025:0398)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0398 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
CVE-2025-0398
A vulnerability has been found in longpi1 warehouse 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /resources/..;/inport/updateInport of the component Backend. The manipulation of the argument remark leads to cross site scripting. The...
CVE-2023-0398
Cross-Site Request Forgery CSRF in GitHub repository modoboa/modoboa prior to 2.0.4...
CVE-2020-0398
In updateMwi of NotificationMgr.java, there is a possible permission bypass due to a PendingIntent error. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android I...
CVE-2019-0398
Due to insufficient CSRF protection, SAP BusinessObjects Business Intelligence Platform Monitoring Application, before versions 4.1, 4.2 and 4.3, may lead to an authenticated user to send unintended request to the web server, leading to Cross Site Request Forgery...
RHEL 9 : redis (RHSA-2025:0398)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:0398 advisory. Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and...
CVE-2025-0398
creationtimestamp| type| source ---|---|--- 2025-01-12 14:02:08+00:00| seen| https://infosec.exchange/users/cve/statuses/113815750413945974 2025-01-12 14:04:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1338 2025-01-12 14:15:31+00:00| seen|...
CVE-2025-0398 longpi1 warehouse Backend updateInport cross site scripting
A vulnerability has been found in longpi1 warehouse 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /resources/..;/inport/updateInport of the component Backend. The manipulation of the argument remark leads to cross site scripting. The...
CVE-2025-0398 longpi1 warehouse Backend updateInport cross site scripting
A vulnerability has been found in longpi1 warehouse 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /resources/..;/inport/updateInport of the component Backend. The manipulation of the argument remark leads to cross site scripting. The...
CVE-2025-0398
The CVE-2025-0398 vulnerability affects longpi1 warehouse 1.0, specifically the Backend component’s /resources/..;/inport/updateInport endpoint. The issue is caused by unsafely handling the remark parameter, enabling cross-site scripting (XSS). It can be triggered remotely and the exploit has bee...
CVE-2024-46854
creationtimestamp| type| source ---|---|--- 2024-09-27 15:53:34+00:00| seen| https://t.me/cvedetector/6525 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0398/...
CVE-2021-47110
creationtimestamp| type| source ---|---|--- 2024-03-16 20:16:14+00:00| seen| https://t.me/ctinow/209698 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0398/...
modoboa-automua (=1.0.0) potentially affected by CVE-2023-0398 via modoboa (=1.17.0)
modoboa PYPI version =1.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on modoboa and may be impacted: - modoboa-automua =1.0.0 Source cves: CVE-2023-0398 Source advisory: OSV:PYSEC-2023-282...
CVE-2023-0398 Cross-Site Request Forgery (CSRF) in modoboa/modoboa
Cross-Site Request Forgery CSRF in GitHub repository modoboa/modoboa prior to 2.0.4...