144 matches found
MapSVG < 6.2.20 - Unauthenticated SQLi
The MapSVG WordPress plugin before 6.2.20 does not validate and escape a parameter via a REST endpoint before using it in a SQL statement, leading to a SQL Injection exploitable by unauthenticated users. id: CVE-2022-0592 info: name: MapSVG 6.2.20 - Unauthenticated SQLi author: DhiyaneshDK...
CVE-2010-0592
The CTI Manager service in Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x before 4.32sr1a, 6.x before 6.13, 7.0x before 7.02, 7.1x before 7.12, and 8.x before 8.01 allows remote attackers to cause a denial of service service failure via a malformed message, aka Bug ID...
CVE-2021-0592
In various functions in WideVine, there are possible out of bounds writes due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID:...
CVE-2026-0592
creationtimestamp| type| source ---|---|--- 2026-01-05 15:04:04+00:00| published-proof-of-concept| Telegram/4A1OLCVEL3LZblNWQ64jtWUEZMdTTBgXCaAa5wleCJYgBw 2026-01-05 16:48:34+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115843511985151727 2026-01-05 17:23:41+00:00| seen|...
CVE-2024-0592
The Related Posts for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.1. This is due to missing or incorrect nonce validation on the handlecreatelink function. This makes it possible for unauthenticated attackers to add related...
CVE-2020-0592
Out of bounds write in BIOS firmware for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege and/or denial of service via local access...
CVE-2025-0592
The vulnerability may allow a remote low priviledged attacker to run arbitrary shell commands by manipulating the firmware file and uploading it to the device...
CVE-2025-0592 SICK Lector8xx and InspectorP8xx vulnerable for code execution
The vulnerability may allow a remote low priviledged attacker to run arbitrary shell commands by manipulating the firmware file and uploading it to the device...
Critical Photon OS Security Update - PHSA-2024-4.0-0592
Updates of 'ruby', 'wireshark', 'linux-rt', 'linux-aws', 'linux', 'suricata', 'linux-secure', 'openssl', 'libvirt' packages of Photon OS have been released...
CVE-2024-0592
CVE-2024-0592 — Related Posts for WordPress (WordPress plugin) CSRF . Affected: the Related Posts for WordPress plugin for WordPress, up to version 2.2.1. Root cause: missing/incorrect nonce validation in handle_create_link(). Impact: unauthenticated attackers can forge requests to add related po...
F5 Networks BIG-IP : Intel CPU vulnerability (K04160444)
The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K04160444 advisory. - Out of bounds write in BIOS firmware for some IntelR Processors may allow an authenticated user to potentially enable...
RHEL 8 : libksba (RHSA-2023:0592)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:0592 advisory. KSBA pronounced Kasbah is a library to make X.509 certificates as well as the CMS easily accessible by other applications. Both specifications are...
CVE-2023-0592
The CVE-2023-0592 entry affects the jefferson JFFS2 filesystem extractor. A path traversal vulnerability allows crafting malicious JFFS2 files to cause writes outside the extraction directory. Affected versions are prior to 0.4.1. Mitigation: update to 0.4.1 or later; as a temporary workaround, r...
CVE-2022-0592
creationtimestamp| type| source ---|---|--- 2022-05-09 20:36:37+00:00| seen| https://t.me/cibsecurity/42188 2023-07-04 22:29:01+00:00| published-proof-of-concept| https://t.me/MrVGunz/751 2025-04-29 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-04-29 2025-05-20...
CVE-2022-0592
CVE-2022-0592 affects the MapSVG WordPress plugin, specifically versions prior to 6.2.20. The vulnerability arises from the REST endpoint failing to validate and escape a parameter before it is used in a SQL statement, resulting in unauthenticated SQL Injection. Affected component: MapSVG WordPre...
Ransom.Conti Code Execution
Discovery / credits: Malvuln John Page aka hyp3rlinx c 2022 Original source: https://malvuln.com/advisory/20f0c736a966142de88dee06a2e4a5b1.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Ransom.Conti Vulnerability: Code Execution Description: Conti looks for and executes DLLs ...
RHEL 7 : kpatch-patch (RHSA-2022:0592)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:0592 advisory. This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel...
CVE-2020-0592
CVE-2020-0592 corresponds to an out-of-bounds write in BIOS firmware for certain Intel processors, with potential escalation of privilege and/or denial of service via local access. Multiple connected sources confirm the issue as a BIOS/firmware vulnerability and cite Intel’s advisory (INTEL-SA-00...
2020.2 IPU – BIOS Advisory
Summary: Potential security vulnerabilities in the BIOS firmware for some Intel® Processors may allow escalation of privilege or denial of service. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-0590 Description: Improper input...
RHEL 7 : kernel (RHSA-2020:0592)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:0592 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: use-after-free in...