Lucene search
K

21 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 11:47 p.m.4 views

CVE-2022-22284

Improper authentication vulnerability in Samsung Internet prior to 16.0.2.19 allows attackers to bypass secret mode password authentication...

5.7CVSS7.3AI score0.00054EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:30 p.m.3 views

CVE-2020-22284

A buffer overflow vulnerability in the zepiflinkoutput function of Free Software Foundation lwIP git head version and version 2.1.2 allows attackers to access sensitive information via a crafted 6LoWPAN packet...

7.5CVSS6.8AI score0.00404EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/02/18 10:26 p.m.7 views

CVE-2025-22284

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in enituretechnology LTL Freight Quotes – Unishippers Edition ltl-freight-quotes-unishippers-edition allows Reflected XSS.This issue affects LTL Freight Quotes – Unishippers Edition: from n/a through ...

7.1CVSS7.2AI score0.00087EPSS
Exploits0References1
NVD
NVD
added 2025/02/16 11:15 p.m.8 views

CVE-2025-22284

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in enituretechnology LTL Freight Quotes – Unishippers Edition ltl-freight-quotes-unishippers-edition allows Reflected XSS.This issue affects LTL Freight Quotes – Unishippers Edition: from n/a through ...

7.1CVSS0.00087EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/02/16 10:17 p.m.9 views

CVE-2025-22284 WordPress LTL Freight Quotes – Unishippers Edition plugin <= 2.5.8 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in enituretechnology LTL Freight Quotes – Unishippers Edition ltl-freight-quotes-unishippers-edition allows Reflected XSS.This issue affects LTL Freight Quotes – Unishippers Edition: from n/a through ...

7.1CVSS0.00087EPSS
Exploits0References1
CVE
CVE
added 2025/02/16 10:17 p.m.53 views

CVE-2025-22284

CVE-2025-22284: Reflected XSS in WordPress plugin LTL Freight Quotes – Unishippers Edition (enituretechnology) up to version 2.5.8. Root cause: improper input neutralization during web page generation. Affects the plugin on WordPress sites; impact includes potential leakage or manipulation of use...

7.1CVSS7.2AI score0.00087EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/02/04 11:43 p.m.6 views

CVE-2024-22284

Deserialization of Untrusted Data vulnerability in Thomas Belser Asgaros Forum.This issue affects Asgaros Forum: from n/a through 2.7.2...

9.8CVSS8.6AI score0.00725EPSS
Exploits0References1
Circl
Circl
added 2024/01/24 1:26 p.m.0 views

CVE-2024-22284

creationtimestamp| type| source ---|---|--- 2024-01-24 13:26:10+00:00| seen| https://t.me/ctinow/172740 2024-01-28 13:37:59+00:00| seen| https://t.me/arpsyndicate/3295 2024-02-17 21:51:48+00:00| seen| https://t.me/ctinow/187056...

9.8CVSS8.7AI score0.00725EPSS
Exploits0References3
CVE
CVE
added 2024/01/24 11:45 a.m.40 views

CVE-2024-22284

CVE-2024-22284 affects Asgaros Forum (WordPress plugin) up to version 2.7.2. It is a deserialization of untrusted data (PHP Object Injection) vulnerability that is unauthenticated and network-exploitable. Patch: upgrade to 2.8.0. Exploit details in the provided documents are not described beyond ...

9.8CVSS8.6AI score0.00725EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/01/24 11:45 a.m.15 views

CVE-2024-22284 WordPress Asgaros Forum Plugin <= 2.7.2 is vulnerable to PHP Object Injection

Deserialization of Untrusted Data vulnerability in Thomas Belser Asgaros Forum.This issue affects Asgaros Forum: from n/a through 2.7.2...

8.7CVSS9.7AI score0.00725EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/01/16 12:0 a.m.9 views

WordPress Asgaros Forum Plugin <= 2.7.2 is vulnerable to PHP Object Injection

Software Asgaros Forum Type Plugin Vulnerable versions = 2.7.2 Fixed in 2.8.0 OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-22284 Patch priority High CVSS severity High 8.7 Developer Claim ownership PSID 25fc365d9e34 Credits Le Ngoc Anh Required privilege...

9.8CVSS6.8AI score0.00725EPSS
Exploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2023/02/01 8:15 p.m.3 views

CVE-2023-22284

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none...

5.8AI score
Exploits0References1
Cvelist
Cvelist
added 2022/02/04 10:29 p.m.17 views

CVE-2021-22284 SECURITY - OPC Server for AC 800M - Remote Code Execution Vulnerability

Incorrect Permission Assignment for Critical Resource vulnerability in OPC Server for AC 800M allows an attacker to execute arbitrary code in the node running the AC800M OPC Server...

8.4CVSS9.1AI score0.00476EPSS
Exploits0References1
CVE
CVE
added 2022/02/04 10:29 p.m.65 views

CVE-2021-22284

Summary of CVE-2021-22284 (ABB OPC Server for AC 800M) Affected product: ABB OPC Server for AC 800M (versions in 5.x/6.x range affected; see advisories). Vulnerability: Incorrect Permission Assignment for Critical Resource, enabling an authenticated remote user with low privileges to insert and e...

8.8CVSS8.9AI score0.00476EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2022/01/07 10:39 p.m.57 views

CVE-2022-22284

CVE-2022-22284 describes an improper authentication vulnerability in Samsung Internet prior to version 16.0.2.19, enabling an attacker with local access to bypass the secret mode password authentication. Affected product is Samsung Internet (mobile browser); root cause is bypassing the secret mod...

5.7CVSS5.7AI score0.00054EPSS
Exploits0References1Affected Software1
Circl
Circl
added 2021/07/23 12:36 a.m.3 views

CVE-2020-22284

creationtimestamp| type| source ---|---|--- 2021-07-23 00:36:51+00:00| seen| https://t.me/cibsecurity/26426...

7.5CVSS7.3AI score0.00404EPSS
Exploits0References1
CVE
CVE
added 2021/07/22 7:38 p.m.83 views

CVE-2020-22284

The CVE-2020-22284 entry affects lwIP (Free Software Foundation) in git head and v2.1.2, where a buffer overflow in the zepif_linkoutput() function can be triggered by a crafted 6LoWPAN packet. This vulnerability could allow an attacker to access sensitive information as described in the NVD entr...

7.5CVSS7.5AI score0.00404EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2018/02/20 3:29 p.m.12 views

CVE-2018-6941

A /shell?cmd= CSRF issue exists in the HTTPD component of NAT32 v2.2 Build 22284 devices that can be exploited for Remote Code Execution in conjunction with XSS...

8.8CVSS9.1AI score0.02547EPSS
Exploits5References3
Cvelist
Cvelist
added 2018/02/20 3:0 p.m.10 views

CVE-2018-6941

A /shell?cmd= CSRF issue exists in the HTTPD component of NAT32 v2.2 Build 22284 devices that can be exploited for Remote Code Execution in conjunction with XSS...

9.1AI score0.02547EPSS
Exploits5References3
Exploit DB
Exploit DB
added 2018/02/14 12:0 a.m.74 views

NAT32 2.2 Build 22284 - Cross-Site Request Forgery

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/NAT32-REMOTE-COMMAND-EXECUTION-CSRF-CVE-2018-6941.txt + ISR: Apparition Security -- D1rty0tis Vendor: ============= www.nat32.com Product: =========== NAT32 Build 22284 NAT32® is a...

8.8CVSS8.8AI score0.02547EPSS
Exploits5
Rows per page
Query Builder