CVE-2022-23042

Linux PV device frontends vulnerable to attacks by backends This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Several Linux PV device frontends are using the grant table interfaces for removing access rights of the...

CVE-2022-23040

Linux PV device frontends vulnerable to attacks by backends This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Several Linux PV device frontends are using the grant table interfaces for removing access rights of the...

CVE-2022-23037

Linux PV device frontends vulnerable to attacks by backends This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Several Linux PV device frontends are using the grant table interfaces for removing access rights of the...

CVE-2022-23038

Linux PV device frontends vulnerable to attacks by backends This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Several Linux PV device frontends are using the grant table interfaces for removing access rights of the...

CVE-2020-23037

creationtimestamp| type| source ---|---|--- 2021-10-23 00:39:40+00:00| seen| https://t.me/cibsecurity/31069...

CVE-2020-23037

Portable Ltd Playable v9.18 contains a code injection vulnerability in the filename parameter, which allows attackers to execute arbitrary web scripts or HTML via a crafted POST request...

CVE-2020-23037

CVE-2020-23037 affects Portable Ltd Playable v9.18. A code injection vulnerability exists in the filename parameter that allows an attacker to execute arbitrary web scripts or HTML via a crafted POST request. The issue is rooted in the filename handling and, per linked documents, is demonstrated ...

CVE-2021-23037

creationtimestamp| type| source ---|---|--- 2021-09-14 22:23:28+00:00| seen| https://t.me/cibsecurity/28844 2026-09-01 20:02:26+00:00| seen| https://t.me/hackingAttack/21600 2026-09-02 01:02:59+00:00| seen| https://t.me/hackingAttack/21600 2026-09-07 18:00:04+00:00| seen|...

CVE-2021-23037

On all versions of 16.1.x, 16.0.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x, a reflected cross-site scripting XSS vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to execute JavaScript in the context of the currently logged-in user. Note:...

CVE-2021-23037

CVE-2021-23037 is a reflected XSS vulnerability in BIG-IP TMUI: an undisclosed page in the BIG-IP Configuration utility can execute JavaScript in the context of the logged-in user. Affected platforms include BIG-IP TMUI across versions 16.0.0–16.1.1, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x (pe...

CVE-2021-23037

On all versions of 16.1.x, 16.0.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x, a reflected cross-site scripting XSS vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to execute JavaScript in the context of the currently logged-in user. Note:...