ROOT-OS-DEBIAN-12-CVE-2026-22994 CVE-2026-22994 in linux - Patched by Root

Root has patched CVE-2026-22994 in the linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-22994 CVE-2026-22994 in linux - Patched by Root

Root has patched CVE-2026-22994 in the linux package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2026-22994 CVE-2026-22994 in linux - Patched by Root

Root has patched CVE-2026-22994 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

BELL-CVE-2026-22994

Bulletin has no description...

CVE-2026-22994

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF component. This vulnerability involves a reference count leak within the bpfprogtestrunxdp function, specifically when an error handling path fails to call a necessary buffer conversion function. A local user could exploit this to...

CVE-2026-22994

creationtimestamp| type| source ---|---|--- 2026-01-23 17:27:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md47vruvk32m 2026-06-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260602 2026-07-09 00:48:00+00:00| seen...

CVE-2025-22994

creationtimestamp| type| source ---|---|--- 2025-01-31 16:16:24+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh2fimmohi2r 2025-01-31 19:34:23+00:00| seen| https://t.me/cvedetector/16965 2025-01-31 19:35:24+00:00| seen|...

CVE-2025-22994

O2OA 9.1.3 is vulnerable to Cross Site Scripting XSS in Meetings - Settings...

CVE-2025-22994

O2OA version 9.1.3 is vulnerable to Cross-Site Scripting (XSS) within the Meetings - Settings section. This flaw allows for the potential execution of malicious scripts by an attacker. To remediate this issue, users should update to a version that includes a patch for this vulnerability or consid...

CVE-2024-23934

Sony XAV-AX5500 WMV/ASF Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sony XAV-AX5500 devices. User interaction is required to exploit this vulnerability in that the target...

CVE-2024-23934 Sony XAV-AX5500 WMV/ASF Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

Sony XAV-AX5500 WMV/ASF Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sony XAV-AX5500 devices. User interaction is required to exploit this vulnerability in that the target...

K66851119: F5 TMUI XSS vulnerability CVE-2021-22994

Security Advisory Description Undisclosed endpoints in iControl REST allow for a reflected XSS attack, which could lead to a complete compromise of the BIG-IP system if the victim user is granted the admin role. This vulnerability is due to an incomplete fix for CVE-2020-5948. CVE-2021-22994 Impa...

CVE-2022-22994

creationtimestamp| type| source ---|---|--- 2022-01-28 22:22:21+00:00| seen| https://t.me/cibsecurity/36494...

CVE-2022-22994

CVE-2022-22994 is a remote code execution in Western Digital My Cloud devices resulting from insufficient verification of data received via HTTP by the ConnectivityService. This allows a network-adjacent attacker to load and execute arbitrary code on affected NAS devices. The vulnerability is add...

CVE-2022-22994 Insufficient Verification of Data Authenticity Remote Code Execution Vulnerability on Western Digital My Cloud devices.

A remote code execution vulnerability was discovered on Western Digital My Cloud devices where an attacker could trick a NAS device into loading through an unsecured HTTP call. This was a result insufficient verification of calls to the device. The vulnerability was addressed by disabling checks...

CVE-2021-22994

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3, undisclosed endpoints in iControl REST allow for a reflected XSS attack, which could lead to a complete compromise of the BIG-IP...

CVE-2021-22994

CVE-2021-22994 is an XSS flaw in BIG-IP iControl REST that enables a reflected XSS leading to complete system compromise when the victim is an admin. Affected: BIG-IP versions and branches as per F5 advisories (K66851119 and related entries): 16.x vulnerable 16.0.0–16.0.1; fix in 16.1.0.1/16.1.0+...

CVE-2021-22994: Improper Neutralization of Input During Web Page Generation

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3, undisclosed endpoints in iControl REST allow for a reflected XSS attack, which could lead to a complete compromise of the BIG-IP...

F5 Networks BIG-IP : F5 TMUI XSS vulnerability (K66851119)

The version of F5 Networks BIG-IP installed on the remote host is prior to 11.6.5.3 / 12.1.5.3 / 13.1.3.6 / 14.1.4 / 15.1.2.1 / 16.0.1.1 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K66851119 advisory. - On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before...