PT-2026-21685

Name of the Vulnerable Software and Affected Versions VMware Aria Operations affected versions not specified Description VMware Aria Operations contains a stored cross-site scripting issue. An attacker with the ability to create custom benchmarks may inject script to perform administrative action...

PT-2026-21686

Name of the Vulnerable Software and Affected Versions VMware Aria Operations affected versions not specified Description A malicious actor with privileges in vCenter to access VMware Aria Operations may leverage a privilege escalation issue to obtain administrative access in VMware Aria Operation...

MiracleLinux 7 : httpd24-httpd-2.4.34-23.el7.2 (AXSA:2022-3133:02)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-3133:02 advisory. httpd: Errors encountered during the discarding of request body lead to HTTP request smuggling CVE-2022-22720 CVEs: CVE-2022-22720 Tenable has extracted the...

MiracleLinux 7 : httpd-2.4.6-97.5.0.1.el7.AXS7 (AXSA:2022-3128:02)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-3128:02 advisory. httpd: Errors encountered during the discarding of request body lead to HTTP request smuggling CVE-2022-22720 Tenable has extracted the preceding description...

MiracleLinux 8 : httpd:2.4 (AXSA:2022-3127:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-3127:01 advisory. httpd: Errors encountered during the discarding of request body lead to HTTP request smuggling CVE-2022-22720 Tenable has extracted the preceding description...

CVE-2021-22720

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists in C-Bus Toolkit V1.15.7 and prior that could allow a remote code execution when restoring a project...

CVE-2024-22720

Kanboard 1.2.34 is vulnerable to Html Injection in the group management feature...

CVE-2023-22720

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Robert Macchi WP Links Page plugin = 4.9.3 versions...

CVE-2025-22720 WordPress WpRently | WordPress plugin plugin <= 2.2.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking and Rental Manager: from n/a through = 2.2.1...

CVE-2025-22720 WordPress WpRently | WordPress plugin plugin <= 2.2.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in MagePeople Team Booking and Rental Manager allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Booking and Rental Manager: from n/a through 2.2.1...

CVE-2024-30342 Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious...

CVE-2024-30342

CVE-2024-30342 affects Foxit PDF Reader/Editor. The vulnerability is a Use-After-Free in handling of Annotation objects, caused by not validating the existence of an object before operations, enabling code execution in the process context when a user opens a malicious file or visits a crafted pag...

CVE-2024-22720

creationtimestamp| type| source ---|---|--- 2024-01-24 19:26:56+00:00| seen| https://t.me/ctinow/173027 2024-01-30 23:16:42+00:00| seen| https://t.me/ctinow/176336 2024-02-18 09:11:53+00:00| seen| https://t.me/ctinow/187182...

DEBIAN-CVE-2024-22720

Kanboard 1.2.34 is vulnerable to Html Injection in the group management feature...

CVE-2024-22720

Kanboard 1.2.34 is vulnerable to Html Injection in the group management feature...

BELL-CVE-2022-22720 CVE-2022-22720 does not affect BellSoft software

Bulletin has no description...

CVE-2023-22720

creationtimestamp| type| source ---|---|--- 2023-05-11 18:15:29+00:00| seen| https://t.me/cibsecurity/63895...

CVE-2023-22720

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Robert Macchi WP Links Page plugin = 4.9.3 versions...

CVE-2023-22720 WordPress WP Links Page Plugin <= 4.9.3 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Robert Macchi WP Links Page plugin = 4.9.3 versions...

CVE-2023-22720

CVE-2023-22720 affects the WordPress plugin WP Links Page by Robert Macchi. Versions ≤ 4.9.3 are vulnerable to a Stored XSS due to inadequate input handling. The vulnerability impact is described in the CVE as cross-site scripting, with a PatchSTACK entry noting the fix in version 4.9.4 . No expl...