Lucene search
K

54 matches found

OSV
OSV
added 2026/02/10 10:15 a.m.1 views

CVE-2026-22923

A vulnerability has been identified in NX All versions V2512, NX Managed Mode All versions V2512. The affected application contains a data validation vulnerability that could allow an attacker with local access to interfere with internal data during the PDF export process that could potentially...

7.3CVSS6AI score0.00007EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/02/10 9:58 a.m.1 views

CVE-2026-22923

A vulnerability has been identified in NX All versions V2512, NX Managed Mode All versions V2512. The affected application contains a data validation vulnerability that could allow an attacker with local access to interfere with internal data during the PDF export process that could potentially...

7.8CVSS5.9AI score0.00007EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/11/13 12:0 a.m.2 views

Siemens SIMATIC S7-1500 Insufficiently Protected Credentials (CVE-2021-22923)

When curl is instructed to get content using the metalink feature, and a user name and password are used to download the metalink XML file, those same credentials are then subsequently passed on to each of the servers from which curl will download or try to download the contents from. Often...

5.3CVSS6.6AI score0.00068EPSS
Exploits1References6
Tenable Nessus
Tenable Nessus
added 2025/05/14 12:0 a.m.8 views

Alibaba Cloud Linux 3 : 0070: curl (ALINUX3-SA-2021:0070)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2021:0070 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2021-22922: When curl is instructed to...

6.5CVSS6.3AI score0.0056EPSS
Exploits4References4
Circl
Circl
added 2025/04/03 1:1 a.m.4 views

CVE-2025-22923

creationtimestamp| type| source ---|---|--- 2025-04-03 01:01:32+00:00| seen| https://t.me/cvedetector/21925 2025-04-03 15:35:05+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10251 2025-04-03 17:48:23+00:00| seen|...

8.8CVSS4.8AI score0.01325EPSS
Exploits0References3
NVD
NVD
added 2025/04/02 9:15 p.m.5 views

CVE-2025-22923

An issue in OS4ED openSIS v8.0 through v9.1 allows attackers to execute a directory traversal and delete files by sending a crafted POST request to /Modules.php?modname=users/Staff.php&removefile...

8.8CVSS0.01325EPSS
Exploits0References2
OSV
OSV
added 2025/04/02 9:15 p.m.4 views

CVE-2025-22923

An issue in OS4ED openSIS v8.0 through v9.1 allows attackers to execute a directory traversal and delete files by sending a crafted POST request to /Modules.php?modname=users/Staff.php&removefile...

8.8CVSS7.3AI score0.01325EPSS
Exploits0References2
CVE
CVE
added 2025/04/02 12:0 a.m.51 views

CVE-2025-22923

OS4ED openSIS vulnerability CVE-2025-22923: A directory-traversal flaw in versions 8.0–9.1 can allow an attacker to delete files by sending a crafted POST to /Modules.php?modname=users/Staff.php&removefile. Connected sources confirm affected versions and the targeted endpoint; exploitation detail...

8.8CVSS7.4AI score0.01325EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/04/02 12:0 a.m.3 views

CVE-2025-22923

An issue in OS4ED openSIS v8.0 through v9.1 allows attackers to execute a directory traversal and delete files by sending a crafted POST request to /Modules.php?modname=users/Staff.php&removefile...

7.4AI score0.01325EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2021-22923

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When curl is instructed to get content using the metalink feature, and a user name and password are used to download the metalink XML file, those same credentia...

5.3CVSS6.4AI score0.00068EPSS
Exploits1References2
IBM Security Bulletins
IBM Security Bulletins
added 2024/12/12 4:58 p.m.37 views

Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data v5.0.3 is vulnerable to multiple Operator package issues

Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data v5.0.3 is vulnerable to multiple Operator package issues.. We have performed updates to the Operators used by our Speech Services. The following vulnerabilities have been addressed in this update. Please read the details for...

8.1CVSS9.8AI score0.02247EPSS
Exploits10Affected Software1
NVD
NVD
added 2024/05/23 10:15 p.m.12 views

CVE-2024-5247

NETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authentication is required to exploit...

8.8CVSS9.2AI score0.58149EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/05/23 10:7 p.m.14 views

CVE-2024-5247 NETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution Vulnerability

NETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authentication is required to exploit...

8.8CVSS8AI score0.58149EPSS
Exploits0References2
CVE
CVE
added 2024/05/23 10:7 p.m.85 views

CVE-2024-5247

CVE-2024-5247 affects NETGEAR ProSAFE Network Management System. The UpLoadServlet unsafely handles user-supplied data, allowing unrestricted file uploads that can lead to remote code execution with SYSTEM privileges. Authentication is required to exploit, and multiple sources (ZDI advisories, NV...

8.8CVSS9.2AI score0.58149EPSS
Exploits0References2Affected Software1
Circl
Circl
added 2024/02/13 5:22 p.m.3 views

CVE-2024-22923

creationtimestamp| type| source ---|---|--- 2024-02-13 17:22:03+00:00| seen| https://t.me/ctinow/183972 2024-03-04 09:41:36+00:00| seen| https://t.me/ctinow/199109 2025-03-13 21:40:19+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lkc2pl6p6d2u...

9.8CVSS8.7AI score0.00105EPSS
Exploits0References3
OSV
OSV
added 2024/02/13 4:15 p.m.2 views

CVE-2024-22923

SQL injection vulnerability in adv radius v.2.2.5 allows a local attacker to execute arbitrary code via a crafted script...

9.8CVSS6.1AI score0.00105EPSS
Exploits0References2
OSV
OSV
added 2023/08/31 12:14 p.m.0 views

BELL-CVE-2021-22923 CVE-2021-22923 does not affect BellSoft software

Bulletin has no description...

5.3CVSS7.1AI score0.00068EPSS
Exploits1References1
Circl
Circl
added 2023/05/01 8:29 p.m.0 views

CVE-2023-22923

creationtimestamp| type| source ---|---|--- 2023-05-01 20:29:37+00:00| seen| https://t.me/cibsecurity/63125...

6.5CVSS6.3AI score0.00713EPSS
Exploits0References1
OSV
OSV
added 2023/05/01 5:15 p.m.2 views

CVE-2023-22923

A format string vulnerability in a binary of the Zyxel NBG-418N v2 firmware versions prior to V1.00AARP.14C0 could allow a remote authenticated attacker to cause denial-of-service DoS conditions on an affected device...

6.5CVSS6.7AI score0.00713EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/05/01 12:0 a.m.14 views

CVE-2023-22923

A format string vulnerability in a binary of the Zyxel NBG-418N v2 firmware versions prior to V1.00AARP.14C0 could allow a remote authenticated attacker to cause denial-of-service DoS conditions on an affected device...

6.5CVSS6.4AI score0.00713EPSS
Exploits0References1
Rows per page
Query Builder