CLSA-2026-1786341592 TuxCare security update for org.springframework (3 CVEs)

TuxCare rebuilt 25 org.springframework packages to address 3 CVEs. Fixed in 6.1.15-tuxcare.2...

CVE-2026-22623

Due to insufficient input parameter validation on the interface, authenticated users of certain HIKSEMI NAS products can execute arbitrary commands on the device by crafting specific messages...

CVE-2026-22623

creationtimestamp| type| source ---|---|--- 2026-01-30 13:39:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdnghvnv3l2g...

CVE-2020-22623

creationtimestamp| type| source ---|---|--- 2025-11-11 21:02:34+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m5ezvpmn4e2j...

VulnCheck KEV: CVE-2020-22623

Directory traversal vulnerability in Jinfornet Jreport 15.6 allows unauthenticated attackers to gain sensitive information...

CVE-2020-22623

Directory traversal vulnerability in Jinfornet Jreport 15.6 allows unauthenticated attackers to gain sensitive information...

CVE-2025-22623

creationtimestamp| type| source ---|---|--- 2025-03-06 05:35:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljorizi7t62u 2025-03-06 05:36:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6635 2025-03-06 07:09:13+00:00| seen| https://t.me/cvedetector/19673...

CVE-2025-22623

Ad Inserter - Ad Manager and AdSense Ads 2.8.0 was found to be vulnerable. The web application dynamically generates web content without validating the source of the potentially untrusted data in myapp/includes/dst/dst.php...

CVE-2025-22623 Ad Inserter - Reflected cross-site scripting (XSS)

Ad Inserter - Ad Manager and AdSense Ads 2.8.0 was found to be vulnerable. The web application dynamically generates web content without validating the source of the potentially untrusted data in myapp/includes/dst/dst.php...

CVE-2020-22623

Directory traversal vulnerability in Jinfornet Jreport 15.6 allows unauthenticated attackers to gain sensitive information...

CVE-2020-22623

CVE-2020-22623 describes a directory traversal vulnerability in Jinfornet Jreport 15.6 that allows unauthenticated attackers to access sensitive information. Multiple sources in connected documents corroborate the same issue, identifying Jinfornet Jreport 15.6 as affected and the root cause as a ...

CVE-2021-20238

It was found in OpenShift Container Platform 4 that ignition config, served by the Machine Config Server, can be accessed externally from clusters without authentication. The MCS endpoint port 22623 provides ignition configuration used for bootstrapping Nodes and can include some sensitive data,...

CVE-2021-20238

It was found in OpenShift Container Platform 4 that ignition config, served by the Machine Config Server, can be accessed externally from clusters without authentication. The MCS endpoint port 22623 provides ignition configuration used for bootstrapping Nodes and can include some sensitive data,...

PT-2022-9172 · Red Hat · Openshift Container Platform 4

Name of the Vulnerable Software and Affected Versions: OpenShift Container Platform 4 affected versions not specified Description: It was found that ignition config, served by the Machine Config Server, can be accessed externally from clusters without authentication. The MCS endpoint port 22623...

CVE-2022-22623

CVE-2022-22623 entry is rejected; this candidate was withdrawn.

Shimo VPN elevation of privilege vulnerability (CNVD-2019-22623)

Shimo VPN is a VPN virtual private network software for macOS platforms An elevation of privilege vulnerability vulnerability exists in the 'configureRoutingWithCommand' function of the Assistant service in Shimo VPN version 4.1.5.1. The vulnerability stems from a network system or product that...