Lucene search
K

29 matches found

Circl
Circl
added 2026/01/14 4:12 p.m.1 views

CVE-2026-22239

creationtimestamp| type| source ---|---|--- 2026-01-14 16:12:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcfhjkoznr2r...

10CVSS5.8AI score0.00132EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2025/10/28 12:0 a.m.3 views

Fedora: Security Advisory (FEDORA-2025-551aed076e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.6CVSS6.8AI score0.00378EPSS
Exploits0References15
Tenable Nessus
Tenable Nessus
added 2025/07/29 12:0 a.m.5 views

SUSE SLES15 Security Update : salt (SUSE-SU-2025:02534-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02534-1 advisory. - Security issues fixed: - CVE-2024-38822: Fixed Minion token validation bsc1244561 - CVE-2024-38823: Fixed server vulnerability t...

9.6CVSS7.2AI score0.01164EPSS
Exploits0References38
SUSE Linux
SUSE Linux
added 2025/07/23 1:41 p.m.2 views

Security update for salt

This update for salt fixes the following issues: Security issues fixed: CVE-2024-38822: Fixed Minion token validation bsc1244561 CVE-2024-38823: Fixed server vulnerability to replay attacks when not using a TLS encrypted transport bsc1244564 CVE-2024-38824: Fixed directory traversal vulnerability...

9.6CVSS7.6AI score0.01164EPSS
Exploits0References52
OSV
OSV
added 2025/07/23 12:37 p.m.1 views

SUSE-SU-2025:02476-1 Security update 4.3.16 for Multi-Linux Manager Server

This update fixes the following issues: release-notes-susemanager: - Update to SUSE Manager 4.3.16 Important Salt Security Update Added support for SUSE Linux Enterprise 15 SP7 as a client using the Salt Bundle CVE Fixed CVE-2025-23392, CVE-2025-23393, CVE-2024-38824, CVE-2025-22239 CVE-2025-2223...

9.8CVSS5.8AI score0.06073EPSS
Exploits1References73
Tenable Nessus
Tenable Nessus
added 2025/07/01 12:0 a.m.13 views

Fedora 42 : salt (2025-a5d73a0399)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-a5d73a0399 advisory. - Resolves CVE-2024-38824 RHBZ2372731 - Resolves CVE-2024-38824 RHBZ2372733 - Resolves CVE-2025-22239 RHBZ2372732 - Resolves CVE-2025-22239...

9.6CVSS5.5AI score0.00378EPSS
Exploits0References12
vulnersOsv
vulnersOsv
added 2025/06/13 9:30 a.m.5 views

aws-ork (>=0.4.3 <=0.4.5), elita (=0.59.3) +84 more potentially affected by CVE-2025-22239 via salt (=3007.14.0)

salt PYPI version =3007.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on salt and may be impacted: - aws-ork =0.4.3, =1.0.0, =2019.12.0, =2019.1.30a2, =2.6.2.dev0, =24.3.12.0rc1, =0.1.0rc1, =0.0.1, =0.0.1, =2022.2.0, =1.2.3, =1.3.0 and more Source...

8.1CVSS5.8AI score0.00144EPSS
Exploits0
NVD
NVD
added 2025/06/13 7:15 a.m.8 views

CVE-2025-22239

Arbitrary event injection on Salt Master. The master's "minionevent" method can be used by and authorized minion to send arbitrary events onto the master's event bus...

8.1CVSS0.00144EPSS
Exploits0References2
OSV
OSV
added 2025/06/13 7:15 a.m.0 views

UBUNTU-CVE-2025-22239

Arbitrary event injection on Salt Master. The master's "minionevent" method can be used by and authorized minion to send arbitrary events onto the master's event bus...

8.1CVSS5.9AI score0.00144EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/06/13 7:0 a.m.13 views

CVE-2025-22239 CVE-2025-22239 salt advisory

Arbitrary event injection on Salt Master. The master's "minionevent" method can be used by and authorized minion to send arbitrary events onto the master's event bus...

8.1CVSS0.00144EPSS
Exploits0References2
CVE
CVE
added 2025/06/13 7:0 a.m.59 views

CVE-2025-22239

CVE-2025-22239 – Salt Master event injection : The Salt Master’s _minion_event method can be abused by an authorized minion to push arbitrary events onto the master's event bus, enabling potential impact on integrity and confidentiality (I, C) with low availability impact. The advisory notes this...

8.1CVSS8.3AI score0.00144EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 7:13 p.m.5 views

CVE-2021-22239

An unauthorized user was able to insert metadata when creating new issue on GitLab CE/EE 14.0 and later...

5CVSS6.5AI score0.00165EPSS
Exploits0References1
Oracle linux
Oracle linux
added 2024/02/18 12:0 a.m.37 views

python-pillow security update

2.0.0-25gitd1c6db8 - Security fix for CVE-2023-50447 Resolves: RHEL-22239...

8.1CVSS7.4AI score0.00754EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2024/02/08 12:0 a.m.57 views

VMWare Aria Operations for Networks 6.x < 6.12 Multiple Vulnerabilities (VMSA-2024-0002)

According to its self-reported version, the instance of VMWare Aria Operations for Networks running on the remote web server is 6.x 6.12.0.1706185032. It is, therefore, affected by multiple vulnerabilities: - Aria Operations for Networks contains a local privilege escalation vulnerability. A...

7.8CVSS5.9AI score0.04121EPSS
Exploits0References8
Circl
Circl
added 2024/02/06 9:26 p.m.0 views

CVE-2024-22239

creationtimestamp| type| source ---|---|--- 2024-02-06 21:26:41+00:00| seen| https://t.me/ctinow/180335 2024-02-08 11:40:05+00:00| seen| https://t.me/truesecator/5391 2024-03-01 13:41:32+00:00| seen| https://t.me/ctinow/197610...

7.8CVSS7.7AI score0.00074EPSS
Exploits0References3
CVE
CVE
added 2024/02/06 7:37 p.m.60 views

CVE-2024-22239

CVE-2024-22239 affects VMware Aria Operations for Networks (formerly vRealize Network Insight). The vulnerability is a local privilege escalation where a console user with access can escalate privileges to obtain a regular shell. VMware’s VMSA-2024-0002 details this alongside four related CVEs (2...

7.8CVSS8.1AI score0.00074EPSS
Exploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2024/01/03 12:0 a.m.33 views

GitLab 14.0 < 14.0.7 / 14.1 < 14.1.2 (CVE-2021-22239)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An unauthorized user was able to insert metadata when creating new issue on GitLab CE/EE 14.0 and later. CVE-2021-22239 Note that Nessus has not tested for this issue but has instead relied only on th...

5CVSS5.2AI score0.00165EPSS
Exploits0References3
Circl
Circl
added 2023/02/18 12:13 a.m.1 views

CVE-2023-22239

creationtimestamp| type| source ---|---|--- 2023-02-18 00:13:30+00:00| seen| https://t.me/cibsecurity/58479...

7.8CVSS7.4AI score0.00194EPSS
Exploits0References1
NVD
NVD
added 2023/02/17 10:15 p.m.16 views

CVE-2023-22239

After Affects versions 23.1 and earlier, 22.6.3 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.7AI score0.00194EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/02/17 12:0 a.m.21 views

CVE-2023-22239 Adobe After Effects Improper Input Validation Remote Code Execution Vulnerability

After Affects versions 23.1 and earlier, 22.6.3 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.7AI score0.00194EPSS
Exploits0References1
Rows per page
Query Builder