13 matches found
CVE-2026-22417
Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Wedding grandwedding allows Object Injection.This issue affects Grand Wedding: from n/a through 3.1.11...
CVE-2026-22417
Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Wedding grandwedding allows Object Injection.This issue affects Grand Wedding: from n/a through 3.1.11...
AlmaLinux 8 : gimp:2.8 (ALSA-2025:22417)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:22417 advisory. gimp: GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CVE-2025-10922 gimp: GIMP ICNS File Parsing Out-Of-Bounds Writ...
CVE-2024-22417
Whoogle Search is a self-hosted metasearch engine. In versions 0.8.3 and prior, the element method in app/routes.py does not validate the user-controlled srctype and elementurl variables and passes them to the send method which sends a GET request on lines 339-343 in requests.py. The returned...
CVE-2023-22417
creationtimestamp| type| source ---|---|--- 2025-04-08 13:46:36+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10904...
CVE-2024-22417
creationtimestamp| type| source ---|---|--- 2024-01-23 19:26:48+00:00| seen| https://t.me/ctinow/172249 2024-01-30 18:16:57+00:00| seen| https://t.me/ctinow/176135...
CVE-2024-22417
Whoogle Search is affected by CVE-2024-22417. In versions ≤0.8.3, the code path in app/routes.py’s element method does not validate user-controlled src_type and element_url, passing them to the send method which issues a GET via requests.py. The returned URL content is then fed into send_file wit...
Vulnerabilities fixed in Juniper Junos OS
Juniper has fixed vulnerabilities in MX and SRX systems. A unauthenticated malicious party could potentially exploit them to cause a denial-of-service DoS. To this end the malicious party can send malicious network traffic to the vulnerable system. Juniper has released updates to fix the...
CVE-2023-22417
CVE-2023-22417 affects Juniper Networks Junos OS on SRX Series, where the Flow Processing Daemon (flowd) can leak memory in IPsec VPN scenarios when DH/ECDH groups are configured, potentially crashing the flowd process and causing DoS. Affected versions include SRX/JunOS releases prior to the fix...
Juniper Junos OS Vulnerability (JSA70213)
The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70213 advisory. - A Missing Release of Memory after Effective Lifetime vulnerability in the Flow Processing Daemon flowd of Juniper Networks Junos OS allows a network-based, unauthenticated...
CVE-2022-22417
creationtimestamp| type| source ---|---|--- 2022-07-19 20:40:51+00:00| seen| https://t.me/cibsecurity/46563...
Security Bulletin: IBM Sterling Partner Engagement Manager is vulnerable to reflected cross-site scripting (CVE-2022-22417)
Summary IBM Sterling Partner Engagement Manager has addressed a cross-site scripting XSS vulnerability. Vulnerability Details CVEID:CVE-2022-22417 DESCRIPTION: IBM Sterling Partner Engagement Manager is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary...
CVE-2021-22417
CVE-2021-22417 affects HarmonyOS; a component suffers Data Processing Errors that can allow local attackers to cause kernel memory leakage. Documented impact includes LOCAL access with high availability impact, but concrete details on affected versions, exploitation specifics, and fixes are not p...