Lucene search
K

28 matches found

Circl
Circl
added 2026/03/26 9:33 p.m.2 views

CVE-2026-22506

creationtimestamp| type| source ---|---|--- 2026-03-26 21:33:13+00:00| seen| Telegram/5Bb0qK301Op7Yhojb7YEduqeLGlpAUlFeXZf97xc-7ChehU...

8.1CVSS4.8AI score0.00172EPSS
Exploits0
NVD
NVD
added 2026/03/25 5:16 p.m.1 views

CVE-2026-22506

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Elated-Themes Amoli amoli allows PHP Local File Inclusion.This issue affects Amoli: from n/a through = 1.0...

8.1CVSS0.00172EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/03/25 4:14 p.m.21 views

CVE-2026-22506 WordPress Amoli theme <= 1.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Elated-Themes Amoli amoli allows PHP Local File Inclusion.This issue affects Amoli: from n/a through = 1.0...

8.1CVSS0.00172EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-26646

Malicious code in bioql PyPI...

8.8CVSS7.9AI score0.03767EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 5:52 a.m.2 views

CVE-2023-22506

This High severity Injection and RCE Remote Code Execution vulnerability known as CVE-2023-22506 was introduced in version 8.0.0 of Bamboo Data Center. This Injection and RCE Remote Code Execution vulnerability, with a CVSS Score of 7.5, allows an authenticated attacker to modify the actions take...

8.8CVSS7.8AI score0.03767EPSS
Exploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2025/04/29 2:17 a.m.32 views

Security Bulletin: IBM Robotic Process Automation is vulnerable to cross tenant information exposure (CVE-2022-22506)

Summary Security Bulletin: IBM Robotic Process Automation is vulnerable to cross tenant information disclosure CVE-2022-22506 Vulnerability Details CVEID:CVE-2022-22506 DESCRIPTION: IBM Robotic Process Automation contains a vulnerability that could allow user ids may be exposed across tenants. CV...

4.6CVSS4.5AI score0.00037EPSS
Exploits0Affected Software1
NVD
NVD
added 2025/01/13 2:15 p.m.6 views

CVE-2025-22506

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Smart Agenda Smart Agenda smart-agenda-prise-de-rendez-vous-en-ligne allows Stored XSS.This issue affects Smart Agenda: from n/a through = 4.7...

7.1CVSS0.0012EPSS
Exploits0References1
Circl
Circl
added 2025/01/13 2:13 p.m.2 views

CVE-2025-22506

creationtimestamp| type| source ---|---|--- 2025-01-13 14:13:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1362 2025-01-13 14:15:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfmwe5w2372h 2025-01-13 15:42:50+00:00| seen|...

7.1CVSS8.7AI score0.0012EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/01/13 1:11 p.m.12 views

CVE-2025-22506 WordPress Smart Agenda Plugin <= 4.7 - CSRF to Stored XSS vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Smart Agenda Smart Agenda smart-agenda-prise-de-rendez-vous-en-ligne allows Stored XSS.This issue affects Smart Agenda: from n/a through = 4.7...

7.1CVSS0.0012EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/01/13 1:11 p.m.6 views

CVE-2025-22506 WordPress Smart Agenda Plugin <= 4.7 - CSRF to Stored XSS vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SmartAgenda Smart Agenda allows Stored XSS.This issue affects Smart Agenda: from n/a through 4.7...

7.1CVSS6.9AI score0.0012EPSS
Exploits0References1
CVE
CVE
added 2025/01/13 1:11 p.m.24 views

CVE-2025-22506

CVE-2025-22506 is a Cross-Site Request Forgery leading to Stored Cross-Site Scripting in the SmartAgenda plugin (Smart Agenda) for online appointment booking, affecting versions up to 4.7. The Wordfence entry confirms the issue and notes it has been patched; no exploit details are provided in the...

7.1CVSS7.2AI score0.0012EPSS
Exploits0References1
CVE
CVE
added 2024/11/22 8:5 p.m.44 views

CVE-2023-51642

CVE-2023-51642 involves Allegra’s loadFieldMatch deserialization, where untrusted data is deserialized due to improper input validation. This leads to remote code execution in the LOCAL SERVICE context. Attack requires authentication, but Allegra’s registration mechanism can create a user with su...

9.8CVSS9.9AI score0.06281EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2024/02/12 7:9 p.m.81 views

CVE-2022-22506

CVE-2022-22506 affects IBM Robotic Process Automation (RPA) 21.0.2 (and related deploys). The vulnerability could allow user IDs to be exposed across tenants, impacting confidentiality. The IBM Security Bulletin lists affected products/versions and provides remediation: upgrade to 21.0.2 IF002 or...

4.6CVSS4.5AI score0.00037EPSS
Exploits0References2Affected Software1
Circl
Circl
added 2024/02/11 1:10 p.m.1 views

CVE-2024-22506

creationtimestamp| type| source ---|---|--- 2024-02-11 13:10:40+00:00| seen| https://t.me/arpsyndicate/3380...

4.8AI score
Exploits0References1
Circl
Circl
added 2023/07/25 6:59 a.m.3 views

CVE-2023-22506

creationtimestamp| type| source ---|---|--- 2023-07-25 06:59:17+00:00| seen| https://t.me/thehackernews/3641 2023-07-25 11:48:45+00:00| seen| https://t.me/truesecator/4652...

8.8CVSS8AI score0.03767EPSS
Exploits0References2
NVD
NVD
added 2023/07/19 12:15 a.m.25 views

CVE-2023-22506

This High severity Injection and RCE Remote Code Execution vulnerability known as CVE-2023-22506 was introduced in version 8.0.0 of Bamboo Data Center. This Injection and RCE Remote Code Execution vulnerability, with a CVSS Score of 7.5, allows an authenticated attacker to modify the actions...

8.8CVSS8.2AI score0.03767EPSS
Exploits0References1
OSV
OSV
added 2023/07/19 12:15 a.m.0 views

CVE-2023-22506

This High severity Injection and RCE Remote Code Execution vulnerability known as CVE-2023-22506 was introduced in version 8.0.0 of Bamboo Data Center. This Injection and RCE Remote Code Execution vulnerability, with a CVSS Score of 7.5, allows an authenticated attacker to modify the actions...

8.8CVSS6.1AI score
Exploits0References1
Prion
Prion
added 2023/07/19 12:15 a.m.16 views

Remote code execution

This High severity Injection and RCE Remote Code Execution vulnerability known as CVE-2023-22506 was introduced in version 8.0.0 of Bamboo Data Center. This Injection and RCE Remote Code Execution vulnerability, with a CVSS Score of 7.5, allows an authenticated attacker to modify the actions...

4.6CVSS8.9AI score0.03767EPSS
Exploits0References1Affected Software2
CVE
CVE
added 2023/07/18 11:30 p.m.74 views

CVE-2023-22506

CVE-2023-22506 affects Atlassian Bamboo Data Center, introduced in 8.0.0. An authenticated attacker can modify a system call and execute arbitrary code (RCE) with high impact to confidentiality, integrity, and availability, without user interaction. Vulnerable: Bamboo Server/Data Center versions ...

8.8CVSS8.3AI score0.03767EPSS
Exploits0References1Affected Software2
Atlassian
Atlassian
added 2023/06/29 2:27 p.m.56 views

Injection, RCE (Remote Code Execution) in Bamboo

This High severity Injection and RCE Remote Code Execution vulnerability known as CVE-2023-22506 was introduced in version 8.0.0 of Bamboo Data Center. This Injection and RCE Remote Code Execution vulnerability, with a CVSS Score of 7.5, allows an authenticated attacker to modify the actions take...

8.8CVSS9.4AI score0.03767EPSS
Exploits0
Rows per page
Query Builder