35 matches found
CVE-2025-22228 CVE-2025-22228: Spring Security BCryptPasswordEncoder does not enforce maximum password length
BCryptPasswordEncoder.matchesCharSequence,String will incorrectly return true for passwords larger than 72 characters as long as the first 72 characters are the same...
GitLab < 13.11.6 (CVE-2021-22228)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab affecting all versions before 13.11.6, all versions starting from 13.12 before 13.12.6, and all versions starting from 14.0 before 14.0.2. Improper access contro...
CVE-2024-22228
creationtimestamp| type| source ---|---|--- 2024-02-12 20:27:04+00:00| seen| https://t.me/ctinow/183384 2025-05-07 21:22:53+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15436...
CVE-2024-22228
Dell Unity (prep 5.4) contains an OS command injection in the svc_cifssupport utility. An authenticated, local attacker could escape the restricted shell and run arbitrary OS commands with root privileges. Affected software: Dell Unity versions prior to 5.4. Root cause: lack of safeguards to neut...
CVE-2023-22228
Adobe Bridge versions 12.0.3 and earlier and 13.0.1 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious...
CVE-2023-22228 Adobe Bridge Improper Input Validation Remote Code Execution Vulnerability
Adobe Bridge versions 12.0.3 and earlier and 13.0.1 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious...
CVE-2023-22228
Adobe Bridge is affected by CVE-2023-22228: an Improper Input Validation vulnerability that could allow arbitrary code execution in the context of the current user. Affected versions are 12.0.3 (and earlier) and 13.0.1 (and earlier). Exploitation requires user interaction, specifically the victim...
Adobe Bridge 12.x < 12.0.4 / 13.x < 13.0.2 Multiple Vulnerabilities (APSB23-09)
The version of Adobe Bridge installed on the remote macOS or Mac OS X host is prior to 12.0.4 or 13.0.2. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb23-09 advisory. - Adobe Bridge versions 12.0.3 and earlier and 13.0.1 and earlier are affected by an out-of-boun...
Juniper Junos OS Vulnerability (JSA69880)
The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA69880 advisory. - An Improper Validation of Specified Type of Input vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS allows an attacker to cause an RPD memory...
CVE-2022-22228
An Improper Validation of Specified Type of Input vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS allows an attacker to cause an RPD memory leak leading to a Denial of Service DoS. This memory leak only occurs when the attacker's packets are destined to any configure...
CVE-2022-22228 Junos OS: IPv6 OAM SRv6 network-enabled devices are vulnerable to Denial of Service (DoS) due to RPD memory leak upon receipt of specific a IPv6 packet
An Improper Validation of Specified Type of Input vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS allows an attacker to cause an RPD memory leak leading to a Denial of Service DoS. This memory leak only occurs when the attacker's packets are destined to any configure...
CVE-2022-22228
Juniper Junos OS rpd (routing protocol daemon) is affected by CVE-2022-22228 due to improper validation of input, causing a memory leak that can lead to a DoS when IPv6 packets are sent to configured addresses. Affected releases include 21.1 before 21.1R3-S2; 21.2 before 21.2R3-S1; 21.3 before 21...
CVE-2021-22228
creationtimestamp| type| source ---|---|--- 2021-07-07 02:37:10+00:00| seen| https://t.me/cibsecurity/25947...
CVE-2021-22228
An issue has been discovered in GitLab affecting all versions before 13.11.6, all versions starting from 13.12 before 13.12.6, and all versions starting from 14.0 before 14.0.2. Improper access control allows unauthorised users to access project details using Graphql...
CVE-2021-22228
Summary of CVE-2021-22228 : GitLab versions affected are all before 13.11.6, all 13.12 before 13.12.6, and all 14.0 before 14.0.2. The issue is an improper access control that allows unauthorised users to access project details via GraphQL. The connected documents confirm the vulnerability’s exis...