Lucene search
+L

87 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2020-2332

Malware in sbrugna...

5.5CVSS5.5AI score0.01531EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/03/29 6:31 a.m.26 views

CVE-2025-2332

The Export All Posts, Products, Orders, Refunds & Users plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.13 via deserialization of untrusted input in the 'returnMetaValueAsCustomerInput' function. This makes it possible for unauthenticated attacke...

9.8CVSS7.9AI score0.00703EPSS
SaveExploits0References1
Circl
Circl
added 2025/03/27 6:40 a.m.16 views

CVE-2025-2332

creationtimestamp| type| source ---|---|--- 2025-03-27 06:40:12+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lldowwbk252g 2025-03-27 07:30:19+00:00| published-proof-of-concept| Telegram/nXpxTUnuiIyQonR7LnQBkLEoYc0D4Dc9ELBHZOgfYe7uvjo 2025-03-27 08:17:33+00:00| seen|...

9.8CVSS8.7AI score0.00703EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/03/27 5:22 a.m.17 views

CVE-2025-2332 Export All Posts, Products, Orders, Refunds & Users <= 2.13 - Unauthenticated PHP Object Injection

The Export All Posts, Products, Orders, Refunds & Users plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.13 via deserialization of untrusted input in the 'returnMetaValueAsCustomerInput' function. This makes it possible for unauthenticated attacke...

9.8CVSS9.7AI score0.00703EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/03/27 5:22 a.m.28 views

CVE-2025-2332 Export All Posts, Products, Orders, Refunds & Users <= 2.13 - Unauthenticated PHP Object Injection

The Export All Posts, Products, Orders, Refunds & Users plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.13 via deserialization of untrusted input in the 'returnMetaValueAsCustomerInput' function. This makes it possible for unauthenticated attacke...

9.8CVSS0.00703EPSS
SaveExploits0References3
Circl
Circl
added 2024/11/15 1:15 p.m.6 views

CVE-2023-2332

creationtimestamp| type| source ---|---|--- 2024-11-15 13:15:37+00:00| seen| https://t.me/cvedetector/11063...

4.8CVSS5.7AI score0.00356EPSS
SaveExploits1References1
CVE
CVE
added 2024/11/15 10:57 a.m.113 views

CVE-2023-2332

CVE-2023-2332 is a stored XSS in pimcore/pimcore 10.5.19, located in the Conditions tab of Pricing Rules (Date Range From/To fields). The underlying issue allows injection of arbitrary JavaScript, potentially compromising user cookies or redirecting users. The vulnerability is mitigated by upgrad...

4.8CVSS4.1AI score0.00356EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2024/03/09 2:0 p.m.75 views

CVE-2024-2332

CVE-2024-2332 concerns SourceCodester Online Mobile Management Store 1.0. The vulnerability affects the HTTP GET Request Handler used by the /admin/maintenance/manage_category.php file, where manipulation of the argument id leads to SQL injection. Multiple connected records corroborate remote exp...

7.2CVSS6.9AI score0.00687EPSS
SaveExploits1References3Affected Software1
Circl
Circl
added 2023/12/11 3:34 p.m.9 views

CVE-2016-2332

creationtimestamp| type| source ---|---|--- 2023-12-11 15:34:50+00:00| seen| https://t.me/arpsyndicate/1768...

9CVSS8.2AI score0.02767EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2023/11/02 12:0 a.m.44 views

Amazon Linux 2 : libguestfs-winsupport (ALAS-2023-2332)

The version of libguestfs-winsupport installed on the remote host is prior to 7.2-3. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2332 advisory. An invalid return code in fusekernmount enables intercepting of libfuse-lite protocol traffic between NTFS-3G...

7.8CVSS7.7AI score0.00436EPSS
SaveExploits0References16
Tenable Nessus
Tenable Nessus
added 2023/09/07 12:0 a.m.35 views

Oracle Linux 7 : advancecomp (ELSA-2019-2332)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2019-2332 advisory. - Resolves: 1711051, CVE-2019-8383 denial of service Tenable has extracted the preceding description block directly from the Oracle Linux security...

7.8CVSS5.6AI score0.01247EPSS
SaveExploits2References3
Vulnrichment
Vulnrichment
added 2022/09/16 8:18 p.m.9 views

CVE-2022-2332 Honeywell SoftMaster Incorrect Permission Assignment for Critical Resource

A local unprivileged attacker may escalate to administrator privileges in Honeywell SoftMaster version 4.51, due to insecure permission assignment...

6.2CVSS7.6AI score0.00182EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2022/09/16 8:18 p.m.27 views

CVE-2022-2332 Honeywell SoftMaster Incorrect Permission Assignment for Critical Resource

A local unprivileged attacker may escalate to administrator privileges in Honeywell SoftMaster version 4.51, due to insecure permission assignment...

6.2CVSS7.8AI score0.00182EPSS
SaveExploits0References2
CVE
CVE
added 2022/09/16 8:18 p.m.59 views

CVE-2022-2332

CVE-2022-2332 is tied to Honeywell SoftMaster 4.51 with an incorrect permission assignment (CWE-732) that allows a local unprivileged attacker to escalate to administrator privileges. The vulnerability is documented in several sources (NVD, CVE List, CISA/ICS advisories) and is part of a dual-iss...

7.8CVSS6.9AI score0.00182EPSS
SaveExploits0References2Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/02/28 1:33 p.m.18 views

Security Bulletin: Oracle Database Server Vulnerability Affects IBM Emptoris Contract Management (CVE-2021-2332)

Summary IBM Emptoris Contract Management supports Oracle database server as a backend database. The remediated version of Oracle database server has been certified by IBM Emptoris Contract Management. Vulnerability Details CVEID: CVE-2021-2332 DESCRIPTION: An unspecified vulnerability in Oracle...

6.7CVSS6.4AI score0.00856EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/02/28 1:32 p.m.15 views

Security Bulletin: Oracle Database Server Vulnerability Affects IBM Emptoris Sourcing (CVE-2021-2332)

Summary IBM Emptoris Sourcing supports Oracle database server as a backend database. The remediated version of Oracle database server has been certified by IBM Emptoris Sourcing. Vulnerability Details CVEID: CVE-2021-2332 DESCRIPTION: An unspecified vulnerability in Oracle Database Server related...

6.7CVSS6.4AI score0.00856EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/02/28 1:32 p.m.18 views

Security Bulletin: Oracle Database Server Vulnerability Affects IBM Emptoris Program Management (CVE-2021-2332)

Summary IBM Emptoris Program Management supports Oracle database server as a backend database. The remediated version of Oracle database server has been certified by IBM Emptoris Program Management. Vulnerability Details CVEID: CVE-2021-2332 DESCRIPTION: An unspecified vulnerability in Oracle...

6.7CVSS6.4AI score0.00856EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/02/28 1:31 p.m.17 views

Security Bulletin: Oracle Database Server Vulnerability Affects IBM Emptoris Supplier Lifecycle Management (CVE-2021-2332)

Summary IBM Emptoris Supplier Lifecycle Management supports Oracle database server as a backend database. The remediated version of Oracle database server has been certified by IBM Emptoris Supplier Lifecycle Management. Vulnerability Details CVEID: CVE-2021-2332 DESCRIPTION: An unspecified...

6.7CVSS6.4AI score0.00856EPSS
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/10/21 12:0 a.m.226 views

Oracle Database Server Multiple Vulnerabilities (October 2021 CPU)

The versions of Oracle Database Server installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2021 CPU advisory. - Vulnerability in the Zero Downtime DB Migration to Cloud component of Oracle Database Server. The supported version that is affected is 21...

9.8CVSS6.8AI score0.18114EPSS
SaveExploits8References14
Vulnrichment
Vulnrichment
added 2021/10/20 10:49 a.m.7 views

CVE-2021-2332

Vulnerability in the Oracle LogMiner component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Easily exploitable vulnerability allows high privileged attacker having DBA privilege with network access via Oracle Net to compromise Oracle LogMiner...

6.7CVSS6.5AI score0.00856EPSS
SaveExploits0References1
Rows per page
Query Builder