CVE-2026-0528 vulnerabilities

Vulnerabilities for packages: apm-server-fips, beats, apm-server, cloudbeat-fips, cloudbeat...

Elastic Beats 7.x / 8.x < 8.19.10 / 9.x < 9.1.10 / 9.2.x < 9.2.4 Multiple Vulnerabilities (ESA_2026_01, ESA_2026_02)

The version of Elastic Beats Metricbeat or Packetbeat installed on the remote host is 7.x, 8.x prior to 8.19.10, 9.x prior to 9.1.10, or 9.2.x prior to 9.2.4. It is, therefore, affected by multiple vulnerabilities: - Improper Validation of Array Index CWE-129 and Improper Input Validation CWE-20 ...

CVE-2026-0528

creationtimestamp| type| source ---|---|--- 2026-01-13 22:04:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcdkq2tgcu2e 2026-01-14 15:25:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mcfevce35g23...

TencentOS Server 2: 389-ds-base (TSSA-2024:0528)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0528 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

CVE-2024-0528

A vulnerability, which was classified as critical, was found in CXBSoft Post-Office 1.0. Affected is an unknown function of the file /admin/pages/updatego.php of the component HTTP POST Request Handler. The manipulation of the argument version leads to sql injection. The exploit has been disclose...

CVE-2021-0528

In memory management driver, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-185195266...

CVE-2020-0528

Improper buffer restrictions in BIOS firmware for 7th, 8th, 9th and 10th Generation IntelR CoreTM Processor families may allow an authenticated user to potentially enable escalation of privilege and/or denial of service via local access...

Photon OS 3.0: U PHSA-2023-3.0-0528

An update of the u package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-3.0-0528. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid203985;...

Photon OS 4.0: Nmap PHSA-2023-4.0-0528

An update of the nmap package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0528. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2024-0528

creationtimestamp| type| source ---|---|--- 2024-01-15 02:27:00+00:00| seen| https://t.me/ctinow/168121 2024-02-03 09:07:06+00:00| seen| https://t.me/ctinow/178439...

CVE-2024-0528

CXBSoft Post-Office 1.0 contains a SQL injection in the HTTP POST Request Handler, via the version argument in /admin/pages/update_go.php. The vulnerability arises from an unsafely handled input in that parameter, with a critical impact (CVE-2024-0528). The advisory notes that the exploit has bee...

Important Photon OS Security Update - PHSA-2023-3.0-0528

Updates of 'libtiff', 'u-boot', 'linux-aws', 'redis', 'linux', 'linux-secure', 'linux-esx', 'linux-rt', 'python3' packages of Photon OS have been released...

CVE-2023-0528

creationtimestamp| type| source ---|---|--- 2023-01-27 14:34:25+00:00| seen| https://t.me/cibsecurity/57029...

CVE-2023-0528

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been classified as critical. This affects an unknown part of the file admin/abc.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2023-0528

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been classified as critical. This affects an unknown part of the file admin/abc.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2023-0528 SourceCodester Online Tours & Travels Management System abc.php sql injection

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been classified as critical. This affects an unknown part of the file admin/abc.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2023-0528

CVE-2023-0528 affects SourceCodester Online Tours & Travels Management System 1.0. The vulnerability lies in the admin/abc.php file where unsafely constructing the SQL query via the id parameter enables SQL injection, with remote exploitation reportedly possible. Several sources confirm the issue...

CVE-2022-0528

creationtimestamp| type| source ---|---|--- 2022-03-03 12:26:00+00:00| seen| https://t.me/cibsecurity/38346...

CVE-2022-0528

Server-Side Request Forgery SSRF in GitHub repository transloadit/uppy prior to 3.3.1...

CVE-2022-0528

CVE-2022-0528 is a Server-Side Request Forgery (SSRF) in transloadit/uppy and @uppy/companion prior to 3.3.1. The underlying issue is an access control error that could allow an unauthorized attacker to access sensitive information from GitHub repositories and, under certain conditions, enumerate...