Lucene search
+L

19 matches found

attackerkb
attackerkb
•added 2026/04/10 7:32 a.m.•13 views

CVE-2026-22750

When configuring SSL bundles in Spring Cloud Gateway by using the configuration property spring.ssl.bundle, the configuration was silently ignored and the default SSL configuration was used instead. Note: The 4.2.x branch is no longer under open source support. If you are using Spring Cloud...

7.5CVSS5.8AI score0.00217EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2026/04/10 7:32 a.m.•22 views

CVE-2026-22750 SSL bundle configuration silently bypassed in Spring Cloud Gateway

When configuring SSL bundles in Spring Cloud Gateway by using the configuration property spring.ssl.bundle, the configuration was silently ignored and the default SSL configuration was used instead. Note: The 4.2.x branch is no longer under open source support. If you are using Spring Cloud...

7.5CVSS5.9AI score
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/05/22 10:08 p.m.•16 views

CVE-2022-22750

By generally accepting and passing resource handles across processes, a compromised content process might have confused higher privileged processes to interact with handles that the unprivileged process should not have access to. This bug only affects Firefox for Windows and MacOS. Other operatin...

6.5CVSS6.1AI score0.00578EPSS
SaveExploits1References1
Circl
Circl
•added 2025/01/15 4:16 p.m.•18 views

CVE-2025-22750

creationtimestamp| type| source ---|---|--- 2025-01-15 16:16:49+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfs62ml7qo2r 2025-01-15 16:40:02+00:00| seen| https://infosec.exchange/users/cve/statuses/113833358255521059...

7.1CVSS6.9AI score0.00334EPSS
SaveExploits0References2
CVE
CVE
•added 2025/01/15 3:23 p.m.•103 views

CVE-2025-22750

CVE-2025-22750 is a reported cross-site scripting vulnerability (Reflected XSS) in the WordPress plugin Post Carousel & Slider (post-types-carousel-slider). The description states an improper neutralization of user input during web page generation, enabling reflected XSS, and affects versions fro...

7.1CVSS7.2AI score0.00334EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/15 3:23 p.m.•18 views

CVE-2025-22750 WordPress Post Carousel & Slider plugin <= 1.0.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Patel Post Carousel & Slider post-types-carousel-slider allows Reflected XSS.This issue affects Post Carousel & Slider: from n/a through = 1.0.4...

7.1CVSS7.2AI score0.00334EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/15 3:23 p.m.•41 views

CVE-2025-22750 WordPress Post Carousel & Slider plugin <= 1.0.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Patel Post Carousel & Slider post-types-carousel-slider allows Reflected XSS.This issue affects Post Carousel & Slider: from n/a through = 1.0.4...

7.1CVSS0.00334EPSS
SaveExploits0References1
Circl
Circl
•added 2023/03/02 10:44 a.m.•20 views

CVE-2023-22750

creationtimestamp| type| source ---|---|--- 2023-03-02 10:44:57+00:00| seen| https://www.cert.at/de/warnungen/2023/3/kritische-sicherheitslucken-in-arubaos-updates-teilweise-verfugbar 2023-03-02 16:20:07+00:00| seen| https://t.me/truesecator/4124 2025-03-08 04:35:53+00:00| seen|...

9.8CVSS8.7AI score0.0174EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2023/02/28 4:09 p.m.•12 views

CVE-2023-22750 Multiple Unauthenticated Command Injections in the PAPI Protocol

There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI Aruba Networks access point management protocol UDP port 8211. Successful exploitation of these vulnerabilities result in the...

9.8CVSS9.1AI score0.0174EPSS
SaveExploits0References1
CVE
CVE
•added 2023/02/28 4:09 p.m.•85 views

CVE-2023-22750

CVE-2023-22750 maps to multiple unauthenticated command-injection flaws in Aruba Networks ArubaOS via the PAPI protocol (UDP port 8211). Public descriptions consistently state unauthenticated remote code execution with arbitrary code execution as a privileged OS user when malicious packets are se...

9.8CVSS10AI score0.0174EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
•added 2023/02/28 4:09 p.m.•44 views

CVE-2023-22750 Multiple Unauthenticated Command Injections in the PAPI Protocol

There are multiple command injection vulnerabilities that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI Aruba Networks access point management protocol UDP port 8211. Successful exploitation of these vulnerabilities result in the...

9.8CVSS10AI score0.0174EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2022/12/22 8:15 p.m.•47 views

CVE-2022-22750

By generally accepting and passing resource handles across processes, a compromised content process might have confused higher privileged processes to interact with handles that the unprivileged process should not have access to.This bug only affects Firefox for Windows and MacOS. Other operating...

6.5CVSS6.9AI score0.00578EPSS
SaveExploits1References2
CVE
CVE
•added 2022/12/22 12:00 a.m.•199 views

CVE-2022-22750

CVE-2022-22750 affects Mozilla Firefox on Windows and macOS (Firefox

6.5CVSS6.9AI score0.00578EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2022/12/22 12:00 a.m.•9 views

CVE-2022-22750

By generally accepting and passing resource handles across processes, a compromised content process might have confused higher privileged processes to interact with handles that the unprivileged process should not have access to.This bug only affects Firefox for Windows and MacOS. Other operating...

6AI score0.00578EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/07/12 12:00 a.m.•4 views

PT-2022-22750

Name of the Vulnerable Software and Affected Versions No vulnerable software or affected versions specified. Description The provided information does not contain details about a specific vulnerability. It appears to be a notification about a rejected candidate number from the National...

SaveExploits0References2
attackerkb
attackerkb
•added 2021/06/11 4:15 p.m.•11 views

CVE-2021-22750

A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition Def.exe V15.0.0.21041 and prior that could result in loss of data or remote code execution due to missing length checks, when a malicious CGF file is imported to IGSS Definition...

7.8CVSS7.7AI score0.01172EPSS
SaveExploits0References2
CVE
CVE
•added 2021/06/11 3:40 p.m.•72 views

CVE-2021-22750

The CVE-2021-22750 issue affects Schneider Electric IGSS Definition (Def.exe) versions up to 15.0.0.21041 (and earlier) with an out-of-bounds write when importing a malicious CGF file, caused by missing length checks. The vulnerability can lead to data loss or remote code execution on affected sy...

7.8CVSS7.9AI score0.01172EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
•added 2020/03/02 12:00 a.m.•9 views

SQL Injection Vulnerability in Jinwei Supermarket Cashier System (CNVD-2020-22750)

Jinwei Supermarket Cashiering System is a code-sweeping cashiering tool designed for small and medium-sized supermarkets and community convenience stores. SQL injection vulnerability exists in Jinwei Supermarket Cashier System, which can be exploited by attackers to obtain sensitive information...

7.7AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2016/05/25 4:07 p.m.•14 views

nain.locopoc.com XSS vulnerability

Vulnerable URL: http://nain.locopoc.com/q-0x524D-'-alertOPENBUGBOUNTY-' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 22750 VIP website status:| Yes Check nain.locopoc.com SSL...

6.3AI score
SaveExploits0
Rows per page
Query Builder