CVE-2026-2275

creationtimestamp| type| source ---|---|--- 2026-03-31 19:20:10+00:00| seen| Telegram/kcbrs7WWw-nIPeTyrZTDg68aatJd3a7QKUME-vVoB020PA 2026-04-01 06:26:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mig2peqfxt2h 2026-04-04 05:36:38+00:00| seen|...

CVE-2026-2275

The CrewAI CodeInterpreter tool falls back to SandboxPython when it cannot reach Docker, which can enable RCE through arbitrary C function calling...

crewai-geolocate (=0.1.0) potentially affected by CVE-2026-2275 via crewai-tools (=1.11.0)

crewai-tools PYPI version =1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on crewai-tools and may be impacted: - crewai-geolocate =0.1.0 Source cves: CVE-2026-2275 Source advisory: SNYK:PYTHON-CREWAITOOLS-15922544...

CVE-2019-2275

While deserializing any key blob during key operations, buffer overflow could occur exposing partial key information if any key operations are invokedDepends on CVE-2018-13907 in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon...

SUSE: Security Advisory (SUSE-SU-2024:2275-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2024:2275-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE 15 Security Update : openssh (SUSE-SU-2024:2275-2)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2024:2275-2 advisory. - CVE-2024-6387: Fixed race condition in a signal handler bsc1226642 Tenable has extracted the preceding description block directly from the SUSE security...

SUSE SLED15 / SLES15 Security Update : openssh (SUSE-SU-2024:2275-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2275-1 advisory. - CVE-2024-6387: Fixed race condition in a signal handler bsc1226642 Tenable has extracted the preceding description...

CVE-2024-2275

creationtimestamp| type| source ---|---|--- 2024-03-08 02:27:00+00:00| seen| https://t.me/ctinow/202961 2024-03-08 02:27:04+00:00| seen| https://t.me/ctinow/202964 2024-03-09 18:17:06+00:00| seen| https://t.me/ctinow/204036...

CVE-2024-2275

A vulnerability, which was classified as problematic, was found in Bdtask G-Prescription Gynaecology & OBS Consultation Software 1.0. Affected is an unknown function of the component OBS Patient/Gynee Prescription. The manipulation of the argument Patient Title/Full Name/Address/Cheif...

CVE-2024-2275

CVE-2024-2275 affects Bdtask G-Prescription Gynaecology & OBS Consultation Software 1.0. The vulnerability is a cross-site scripting flaw in the OBS Patient/Gynee Prescription component, triggered by manipulating fields such as Patient Title, Full Name, Address, Cheif/Comments, and related medica...

CVE-2023-2275

The CVE-2023-2275 entry concerns the WooCommerce Multivendor Marketplace – REST API plugin for WordPress. It describes a vulnerability caused by missing capability checks in get_item, get_order_notes, and add_order_note, affecting versions up to 1.5.3. The impact stated across connected sources i...

CVE-2023-2275 WooCommerce Multivendor Marketplace – REST API <= 1.5.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Order/Order Note Disclosure, Order Note Addition via REST API

The WooCommerce Multivendor Marketplace – REST API plugin for WordPress is vulnerable to unauthorized access of data and addition of data due to a missing capability check on the 'getitem', 'getordernotes' and 'addordernote' functions in versions up to, and including, 1.5.3. This makes it possibl...

CVE-2022-2275

The CVE-2022-2275 instance concerns the WP Edit Menu WordPress plugin (versions before 1.5.0). The root cause is missing CSRF protection in an AJAX action, which could allow a logged-in administrator to delete arbitrary posts or pages via CSRF. Affected component: the plugin’s AJAX endpoint used ...

Huawei EulerOS: Security Advisory for mariadb (EulerOS-SA-2022-2275)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2013:0618-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-2275

CVE-2021-2275 corresponds to a vulnerability in Oracle Applications Manager (View Reports) within Oracle E-Business Suite. Affected are 12.1.3 and 12.2.3–12.2.10. The issue allows a highly privileged attacker with network access via HTTP to compromise Oracle Applications Manager, enabling unautho...

CVE-2020-2275

Jenkins Copy data to workspace Plugin 1.0 and earlier does not limit which directories can be copied from the Jenkins controller to job workspaces, allowing attackers with Job/Configure permission to read arbitrary files on the Jenkins controller...

CVE-2020-2275

The CVE-2020-2275 entry concerns the Jenkins Copy data to workspace Plugin, versions 1.0 and earlier. The vulnerability arises because the plugin does not restrict which directories can be copied from the Jenkins controller to job workspaces, enabling an attacker with Job/Configure permission to ...

CVE-2019-2275

While deserializing any key blob during key operations, buffer overflow could occur exposing partial key information if any key operations are invokedDepends on CVE-2018-13907 in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon...