Lucene search
K

24 matches found

OSV
OSV
added 2026/01/06 8:23 p.m.4 views

CVE-2026-21492 iccDEV ToneMap Writer has NULL Pointer Member Call

iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium ICC color management profiles. Versions prior to 2.3.1.2 have a NULL pointer member call vulnerability. This vulnerability affects users of the iccDEV libra...

5.5CVSS6.7AI score0.00016EPSS
Exploits1References7
OSV
OSV
added 2025/11/18 10:11 a.m.4 views

RHSA-2025:21492 Red Hat Security Advisory: kernel security update

Bulletin has no description...

7.3CVSS6.9AI score0.00014EPSS
Exploits0References13
RedhatCVE
RedhatCVE
added 2025/05/23 9:44 a.m.13 views

CVE-2024-21492

All versions of the package github.com/greenpau/caddy-security are vulnerable to Insufficient Session Expiration due to improper user session invalidation upon clicking the "Sign Out" button. User sessions remain valid even after requests are sent to /logout and /oauth2/google/logout. Attackers w...

4.8CVSS5.2AI score0.01067EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 1:20 a.m.4 views

CVE-2022-21492

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware component: Analytics Server. The supported version that is affected is 5.9.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

6.1CVSS6.3AI score0.00837EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/06 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2025-21492

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.36 and prior and 8.4.0...

4.9CVSS5.6AI score0.00096EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2025/01/22 12:0 a.m.11 views

Oracle MySQL Server 8.0 - 8.0.36, 8.4.0 Security Update (cpujan2025) - Windows

Oracle MySQL Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

4.9CVSS4.6AI score0.00096EPSS
Exploits0References2
Circl
Circl
added 2025/01/21 9:16 p.m.6 views

CVE-2025-21492

creationtimestamp| type| source ---|---|--- 2025-01-21 21:16:28+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbrlxu7ky2t...

4.9CVSS5.9AI score0.00096EPSS
Exploits0References1
NVD
NVD
added 2025/01/21 9:15 p.m.8 views

CVE-2025-21492

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.36 and prior and 8.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

4.9CVSS0.00096EPSS
Exploits0References2
OSV
OSV
added 2025/01/21 9:15 p.m.6 views

CVE-2025-21492

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.36 and prior and 8.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

4.9CVSS5.9AI score
Exploits0References2
NVD
NVD
added 2024/05/03 3:16 a.m.14 views

CVE-2023-51629

D-Link DCS-8300LHV2 ONVIF Hardcoded PIN Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DCS-8300LHV2 IP cameras. Authentication is not required to exploit this vulnerability. The specific flaw...

8.8CVSS6.4AI score0.00262EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/05/03 2:15 a.m.17 views

CVE-2023-51629 D-Link DCS-8300LHV2 ONVIF Hardcoded PIN Authentication Bypass Vulnerability

D-Link DCS-8300LHV2 ONVIF Hardcoded PIN Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DCS-8300LHV2 IP cameras. Authentication is not required to exploit this vulnerability. The specific flaw...

6.3CVSS6.8AI score0.00262EPSS
Exploits0References2
CVE
CVE
added 2024/05/03 2:15 a.m.123 views

CVE-2023-51629

The CVE-2023-51629 entry concerns the D-Link DCS-8300LHV2 ONVIF API, where a hardcoded PIN in the configuration enables authentication bypass. The vulnerability affects the DCS-8300LHV2 IP camera and allows network-adjacent attackers to bypass authentication without user interaction. The issue is...

8.8CVSS6.4AI score0.00262EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2024/05/03 2:15 a.m.32 views

CVE-2023-51629 D-Link DCS-8300LHV2 ONVIF Hardcoded PIN Authentication Bypass Vulnerability

D-Link DCS-8300LHV2 ONVIF Hardcoded PIN Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DCS-8300LHV2 IP cameras. Authentication is not required to exploit this vulnerability. The specific flaw...

6.3CVSS6.6AI score0.00262EPSS
Exploits0References2
Circl
Circl
added 2024/02/17 6:21 a.m.2 views

CVE-2024-21492

creationtimestamp| type| source ---|---|--- 2024-02-17 06:21:47+00:00| seen| https://t.me/ctinow/186778...

8.1CVSS4.8AI score0.01067EPSS
Exploits1References1
NVD
NVD
added 2024/02/17 5:15 a.m.11 views

CVE-2024-21492

All versions of the package github.com/greenpau/caddy-security are vulnerable to Insufficient Session Expiration due to improper user session invalidation upon clicking the "Sign Out" button. User sessions remain valid even after requests are sent to /logout and /oauth2/google/logout. Attackers w...

8.1CVSS5.2AI score0.01067EPSS
Exploits1References3
Cvelist
Cvelist
added 2024/02/17 5:0 a.m.23 views

CVE-2024-21492

All versions of the package github.com/greenpau/caddy-security are vulnerable to Insufficient Session Expiration due to improper user session invalidation upon clicking the "Sign Out" button. User sessions remain valid even after requests are sent to /logout and /oauth2/google/logout. Attackers w...

4.8CVSS5.5AI score0.01067EPSS
Exploits1References3
CVE
CVE
added 2024/02/17 5:0 a.m.77 views

CVE-2024-21492

CVE-2024-21492 affects github.com/greenpau/caddy-security. All versions are reported vulnerable to Insufficient Session Expiration due to improper user session invalidation after Sign Out, allowing sessions to remain active after requests to /logout and /oauth2/google/logout and enabling actions ...

8.1CVSS5.2AI score0.01067EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2023/05/04 12:0 a.m.583 views

CVE-2023-21492

CVE-2023-21492 is a Samsung Mobile devices vulnerability where kernel pointers are printed to the log file, enabling a privileged, local attacker to bypass ASLR. Affected software relates to Samsung Mobile devices with the SMR May-2023 Release 1 context. The root cause is the insertion of sensiti...

4.4CVSS4.9AI score0.00373EPSS
In wildExploits0References2Affected Software1
OSV
OSV
added 2022/04/19 9:15 p.m.3 views

CVE-2022-21492

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware component: Analytics Server. The supported version that is affected is 5.9.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

6.1CVSS6.7AI score
Exploits0References1
CVE
CVE
added 2022/04/19 8:38 p.m.84 views

CVE-2022-21492

CVE-2022-21492 affects Oracle Fusion Middleware’s Oracle BI Enterprise Edition (Analytics Server) with affected version 5.9.0.0.0. The vulnerability enables an unauthenticated attacker, over HTTP, to compromise Oracle BI EE. The exploit path requires user interaction and, while the flaw is in Ora...

6.1CVSS5.9AI score0.00837EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder