Lucene search
K

19 matches found

Circl
Circl
added 2026/01/08 6:54 a.m.2 views

CVE-2026-22579

creationtimestamp| type| source ---|---|--- 2026-01-08 06:54:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbvfl6z7ml2g...

5.8AI score
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 3:8 a.m.2 views

CVE-2023-22579

Due to improper parameter filtering in the sequalize js library, can a attacker peform injection...

9.9CVSS6.9AI score0.004EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/01/07 2:57 p.m.8 views

CVE-2025-22579 WordPress WP Header Notification plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Arefly WP Header Notification allows Stored XSS.This issue affects WP Header Notification: from n/a through 1.2.7...

5.9CVSS5.8AI score0.00177EPSS
Exploits0References1
CVE
CVE
added 2025/01/07 2:57 p.m.49 views

CVE-2025-22579

CVE-2025-22579 is a stored XSS in the WordPress plugin WP Header Notification (affected:

5.9CVSS7.2AI score0.00177EPSS
Exploits0References1
vulnersOsv
vulnersOsv
added 2023/02/23 4:58 p.m.5 views

@galenjs/framework-next (>=1.0.0 <=1.7.0), @galenjs/models (>=1.1.11 <=1.7.0) +4 more potentially affected by CVE-2023-22579 via @sequelize/core (=7.0.0-alpha.10)

@sequelize/core NPM version =7.0.0-alpha.10 is affected by a known vulnerability. The following packages have a transitive dependency on @sequelize/core and may be impacted: - @galenjs/framework-next =1.0.0, =1.1.11, =0.0.2, =0.0.2, =0.0.30, =0.1.0, =0.1.1 Source cves: CVE-2023-22579 Source...

9.9CVSS7.2AI score0.004EPSS
Exploits0
Github Security Blog
Github Security Blog
added 2023/02/23 4:58 p.m.39 views

Unsafe fall-through in getWhereConditions

Impact Providing an invalid value to the where option of a query caused Sequelize to ignore that option instead of throwing an error. A finder call like the following did not throw an error: ts User.findAll where: new Date, ; As this option is typically used with plain javascript objects, be awar...

9.9CVSS8.1AI score0.004EPSS
Exploits0References10Affected Software2
vulnersOsv
vulnersOsv
added 2023/02/23 4:58 p.m.3 views

12g (=0.0.27), 1st-project (=1.0.2) +2909 more potentially affected by CVE-2023-22579 via sequelize (>=1.0.2 <=6.28.0)

sequelize NPM version =1.0.2, =0.0.1, =0.0.2, =0.0.1, =1.2.3, =1.0.0, =0.5.0, =1.16.1, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.0.0, =2.0.1 - @aapokiiso/hsl-congestion-route-pattern-repository =1.0.0 and more Source cves: CVE-2023-22579 Source advisory: OSV:GHSA-VQFX-GJ96-3W95...

9.9CVSS7.2AI score0.004EPSS
Exploits0
OSV
OSV
added 2023/02/23 4:58 p.m.1 views

GHSA-VQFX-GJ96-3W95 Unsafe fall-through in getWhereConditions

Impact Providing an invalid value to the where option of a query caused Sequelize to ignore that option instead of throwing an error. A finder call like the following did not throw an error: ts User.findAll where: new Date, ; As this option is typically used with plain javascript objects, be awar...

9.9CVSS5.7AI score0.004EPSS
Exploits0References10
OSV
OSV
added 2023/02/16 3:15 p.m.12 views

CVE-2023-22579

Due to improper parameter filtering in the sequalize js library, can a attacker peform injection...

8.8CVSS8.8AI score0.004EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/02/16 2:11 p.m.21 views

CVE-2023-22579 Sequalize - Unsafe fall-through in getWhereConditions

Due to improper parameter filtering in the sequalize js library, can a attacker peform injection...

9.9CVSS9.8AI score0.004EPSS
Exploits0References2
CVE
CVE
added 2023/02/16 2:11 p.m.61 views

CVE-2023-22579

CVE-2023-22579 concerns Sequelize (Node.js ORM). The related docs point to a type-confusion/unsafe fall-through in getWhereConditions that can bypass parameter filtering, enabling an attacker to execute arbitrary code under certain conditions. Affected component: Sequelize runtime; core issue is ...

9.9CVSS8.7AI score0.004EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/02/16 2:11 p.m.5 views

CVE-2023-22579 Sequalize - Unsafe fall-through in getWhereConditions

Due to improper parameter filtering in the sequalize js library, can a attacker peform injection...

9.9CVSS7AI score0.004EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2022/03/21 12:0 a.m.81 views

macOS 11.x < 11.6.5 Multiple Vulnerabilities (HT213184)

The remote host is running a version of macOS / Mac OS X that is 11.x prior to 11.6.5 Big Sur. It is, therefore, affected by multiple vulnerabilities including the following: - Opening a maliciously crafted PDF file may lead to an unexpected application termination or arbitrary code execution...

9.8CVSS7.1AI score0.17934EPSS
Exploits1References22
CVE
CVE
added 2022/03/18 5:59 p.m.84 views

CVE-2022-22579

CVE-2022-22579 is an information-disclosure vulnerability in Apple macOS components (Model I/O) caused by improper state management. Publicly referenced in macOS advisories HT213054 (macOS 12.x before 12.2) and HT213055 (macOS 11.x before 11.6.3), with fixed updates described as Security Update 2...

9.3CVSS7.8AI score0.003EPSS
Exploits0References5Affected Software5
OpenVAS
OpenVAS
added 2022/01/31 12:0 a.m.28 views

Apple Mac OS X Security Update (HT213055)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7AI score0.01694EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2022/01/31 12:0 a.m.30 views

Apple Mac OS X Security Update (HT213056)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS6.8AI score0.01694EPSS
Exploits0References1
Apple
Apple
added 2022/01/26 12:0 a.m.42 views

About the security content of Security Update 2022-001 Catalina

About the security content of Security Update 2022-001 Catalina This document describes the security content of Security Update 2022-001 Catalina. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has...

9.3CVSS8.3AI score0.01694EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 1976/01/01 12:0 a.m.24 views

CVE-2026-22579

...

Exploits0
CVE
CVE
added 1976/01/01 12:0 a.m.5 views

CVE-2026-22579

CVE-2026-22579 entry is rejected/not used; it does not represent an active vulnerability entry.

Exploits0
Rows per page
Query Builder