Lucene search
K

13 matches found

Positive Technologies
Positive Technologies
added 2026/01/07 12:0 a.m.2 views

PT-2026-2155

CVE-2026-22160 - Apache HTTP Server Cross-Site Request Forgery CVE ID : CVE-2026-22160 Published : Jan. 7, 2026, 12:17 p.m. | 3 hours, 59 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and...

7AI score
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/04 11:49 p.m.5 views

CVE-2024-22160

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bradley B. Dalina Image Tag Manager allows Reflected XSS.This issue affects Image Tag Manager: from n/a through 1.5...

7.1CVSS7AI score0.00083EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/01/31 6:7 p.m.12 views

CVE-2024-22160 WordPress Image Tag Manager Plugin <= 1.5 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bradley B. Dalina Image Tag Manager allows Reflected XSS.This issue affects Image Tag Manager: from n/a through 1.5...

7.1CVSS7.1AI score0.00083EPSS
Exploits0References1
CVE
CVE
added 2024/01/31 6:7 p.m.40 views

CVE-2024-22160

CVE-2024-22160 is a cross-site scripting vulnerability affecting the WordPress plugin Image Tag Manager (versions

7.1CVSS7AI score0.00083EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2024/01/16 12:0 a.m.13 views

WordPress Image Tag Manager Plugin <= 1.5 is vulnerable to Cross Site Scripting (XSS)

Software Image Tag Manager Type Plugin Vulnerable versions = 1.5 Fixed in N/A OWASP Top 10 A4: Insecure Design Classification Cross Site Scripting XSS CVE CVE-2024-22160 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 21a3315fa407 Credits Dimas Maulana Required...

7.1CVSS6.2AI score0.00083EPSS
Exploits0References1Affected Software1
Circl
Circl
added 2022/01/19 7:31 a.m.1 views

CVE-2022-22160

creationtimestamp| type| source ---|---|--- 2022-01-19 07:31:34+00:00| seen| https://t.me/cibsecurity/35769...

6.5CVSS6.4AI score0.00081EPSS
Exploits0References1
CVE
CVE
added 2022/01/19 12:21 a.m.55 views

CVE-2022-22160

CVE-2022-22160 affects Juniper Junos OS MX Series where the subscriber management daemon (smgd) is vulnerable to an unchecked error condition. An unauthenticated adjacent attacker can trigger a crash of smgd (in environments with dual-stack session groups and a pp0 interface), causing the daemon ...

6.5CVSS6.5AI score0.00081EPSS
Exploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/01/12 12:0 a.m.34 views

Juniper Junos OS Vulnerability (JSA11268)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11268 advisory. - An Unchecked Error Condition vulnerability in the subscriber management daemon smgd of Juniper Networks Junos OS allows an unauthenticated adjacent attacker to cause a cra...

6.5CVSS6.6AI score0.00081EPSS
Exploits0References2
Check Point Advisories
Check Point Advisories
added 2021/08/11 12:0 a.m.5 views

Apache Pulsar JSON Web Token Authentication Bypass (CVE-2021-22160)

An authentication bypass vulnerability exists in the JSON Web Token authentication module of Apache Pulsar. The vulnerability is due to improper handling of unsigned JSON Web Tokens...

7.5CVSS2.2AI score0.18529EPSS
Exploits0
OSV
OSV
added 2021/05/26 1:15 p.m.14 views

CVE-2021-22160

If Apache Pulsar is configured to authenticate clients using tokens based on JSON Web Tokens JWT, the signature of the token is not validated if the algorithm of the presented token is set to "none". This allows an attacker to connect to Pulsar instances as any user incl. admins...

9.8CVSS6.7AI score
Exploits0References8
Cvelist
Cvelist
added 2021/05/26 12:22 p.m.14 views

CVE-2021-22160 Authentication with JWT allows use of “none”-algorithm

If Apache Pulsar is configured to authenticate clients using tokens based on JSON Web Tokens JWT, the signature of the token is not validated if the algorithm of the presented token is set to "none". This allows an attacker to connect to Pulsar instances as any user incl. admins...

9.6AI score0.18529EPSS
Exploits0References8
CNVD
CNVD
added 2020/04/08 12:0 a.m.1 views

Google Android Framework elevation of privilege vulnerability (CNVD-2020-22160)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An elevation of privilege vulnerability exists in the Framework component of Google Android 10. No details of the vulnerability are provided at this time...

7.8CVSS7.2AI score0.00212EPSS
Exploits1References1
CVE
CVE
added 1976/01/01 12:0 a.m.7 views

CVE-2026-22160

CVE-2026-22160 is described in a connected PT Security entry as affecting the Apache HTTP Server and classified as a Cross-Site Request Forgery vulnerability. The available documents do not specify affected versions, the underlying root cause, impact, exploit details, or any remediation/fix. Othe...

6.6AI score
Exploits0
Rows per page
Query Builder