54 matches found
CVE-2026-22923
A vulnerability has been identified in NX All versions V2512, NX Managed Mode All versions V2512. The affected application contains a data validation vulnerability that could allow an attacker with local access to interfere with internal data during the PDF export process that could potentially...
CVE-2026-22923
A vulnerability has been identified in NX All versions V2512, NX Managed Mode All versions V2512. The affected application contains a data validation vulnerability that could allow an attacker with local access to interfere with internal data during the PDF export process that could potentially...
Siemens SIMATIC S7-1500 Insufficiently Protected Credentials (CVE-2021-22923)
When curl is instructed to get content using the metalink feature, and a user name and password are used to download the metalink XML file, those same credentials are then subsequently passed on to each of the servers from which curl will download or try to download the contents from. Often...
Alibaba Cloud Linux 3 : 0070: curl (ALINUX3-SA-2021:0070)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2021:0070 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2021-22922: When curl is instructed to...
CVE-2025-22923
creationtimestamp| type| source ---|---|--- 2025-04-03 01:01:32+00:00| seen| https://t.me/cvedetector/21925 2025-04-03 15:35:05+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10251 2025-04-03 17:48:23+00:00| seen|...
CVE-2025-22923
An issue in OS4ED openSIS v8.0 through v9.1 allows attackers to execute a directory traversal and delete files by sending a crafted POST request to /Modules.php?modname=users/Staff.php&removefile...
CVE-2025-22923
An issue in OS4ED openSIS v8.0 through v9.1 allows attackers to execute a directory traversal and delete files by sending a crafted POST request to /Modules.php?modname=users/Staff.php&removefile...
CVE-2025-22923
OS4ED openSIS vulnerability CVE-2025-22923: A directory-traversal flaw in versions 8.0–9.1 can allow an attacker to delete files by sending a crafted POST to /Modules.php?modname=users/Staff.php&removefile. Connected sources confirm affected versions and the targeted endpoint; exploitation detail...
CVE-2025-22923
An issue in OS4ED openSIS v8.0 through v9.1 allows attackers to execute a directory traversal and delete files by sending a crafted POST request to /Modules.php?modname=users/Staff.php&removefile...
Linux Distros Unpatched Vulnerability : CVE-2021-22923
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When curl is instructed to get content using the metalink feature, and a user name and password are used to download the metalink XML file, those same credentia...
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data v5.0.3 is vulnerable to multiple Operator package issues
Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data v5.0.3 is vulnerable to multiple Operator package issues.. We have performed updates to the Operators used by our Speech Services. The following vulnerabilities have been addressed in this update. Please read the details for...
CVE-2024-5247
NETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authentication is required to exploit...
CVE-2024-5247 NETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution Vulnerability
NETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authentication is required to exploit...
CVE-2024-5247
CVE-2024-5247 affects NETGEAR ProSAFE Network Management System. The UpLoadServlet unsafely handles user-supplied data, allowing unrestricted file uploads that can lead to remote code execution with SYSTEM privileges. Authentication is required to exploit, and multiple sources (ZDI advisories, NV...
CVE-2024-22923
creationtimestamp| type| source ---|---|--- 2024-02-13 17:22:03+00:00| seen| https://t.me/ctinow/183972 2024-03-04 09:41:36+00:00| seen| https://t.me/ctinow/199109 2025-03-13 21:40:19+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lkc2pl6p6d2u...
CVE-2024-22923
SQL injection vulnerability in adv radius v.2.2.5 allows a local attacker to execute arbitrary code via a crafted script...
BELL-CVE-2021-22923 CVE-2021-22923 does not affect BellSoft software
Bulletin has no description...
CVE-2023-22923
creationtimestamp| type| source ---|---|--- 2023-05-01 20:29:37+00:00| seen| https://t.me/cibsecurity/63125...
CVE-2023-22923
A format string vulnerability in a binary of the Zyxel NBG-418N v2 firmware versions prior to V1.00AARP.14C0 could allow a remote authenticated attacker to cause denial-of-service DoS conditions on an affected device...
CVE-2023-22923
A format string vulnerability in a binary of the Zyxel NBG-418N v2 firmware versions prior to V1.00AARP.14C0 could allow a remote authenticated attacker to cause denial-of-service DoS conditions on an affected device...