87 matches found
EUVD-2020-2332
Malware in sbrugna...
CVE-2025-2332
The Export All Posts, Products, Orders, Refunds & Users plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.13 via deserialization of untrusted input in the 'returnMetaValueAsCustomerInput' function. This makes it possible for unauthenticated attacke...
CVE-2025-2332
creationtimestamp| type| source ---|---|--- 2025-03-27 06:40:12+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lldowwbk252g 2025-03-27 07:30:19+00:00| published-proof-of-concept| Telegram/nXpxTUnuiIyQonR7LnQBkLEoYc0D4Dc9ELBHZOgfYe7uvjo 2025-03-27 08:17:33+00:00| seen|...
CVE-2025-2332 Export All Posts, Products, Orders, Refunds & Users <= 2.13 - Unauthenticated PHP Object Injection
The Export All Posts, Products, Orders, Refunds & Users plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.13 via deserialization of untrusted input in the 'returnMetaValueAsCustomerInput' function. This makes it possible for unauthenticated attacke...
CVE-2025-2332 Export All Posts, Products, Orders, Refunds & Users <= 2.13 - Unauthenticated PHP Object Injection
The Export All Posts, Products, Orders, Refunds & Users plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.13 via deserialization of untrusted input in the 'returnMetaValueAsCustomerInput' function. This makes it possible for unauthenticated attacke...
CVE-2023-2332
creationtimestamp| type| source ---|---|--- 2024-11-15 13:15:37+00:00| seen| https://t.me/cvedetector/11063...
CVE-2023-2332
CVE-2023-2332 is a stored XSS in pimcore/pimcore 10.5.19, located in the Conditions tab of Pricing Rules (Date Range From/To fields). The underlying issue allows injection of arbitrary JavaScript, potentially compromising user cookies or redirecting users. The vulnerability is mitigated by upgrad...
CVE-2024-2332
CVE-2024-2332 concerns SourceCodester Online Mobile Management Store 1.0. The vulnerability affects the HTTP GET Request Handler used by the /admin/maintenance/manage_category.php file, where manipulation of the argument id leads to SQL injection. Multiple connected records corroborate remote exp...
CVE-2016-2332
creationtimestamp| type| source ---|---|--- 2023-12-11 15:34:50+00:00| seen| https://t.me/arpsyndicate/1768...
Amazon Linux 2 : libguestfs-winsupport (ALAS-2023-2332)
The version of libguestfs-winsupport installed on the remote host is prior to 7.2-3. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2332 advisory. An invalid return code in fusekernmount enables intercepting of libfuse-lite protocol traffic between NTFS-3G...
Oracle Linux 7 : advancecomp (ELSA-2019-2332)
The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2019-2332 advisory. - Resolves: 1711051, CVE-2019-8383 denial of service Tenable has extracted the preceding description block directly from the Oracle Linux security...
CVE-2022-2332 Honeywell SoftMaster Incorrect Permission Assignment for Critical Resource
A local unprivileged attacker may escalate to administrator privileges in Honeywell SoftMaster version 4.51, due to insecure permission assignment...
CVE-2022-2332 Honeywell SoftMaster Incorrect Permission Assignment for Critical Resource
A local unprivileged attacker may escalate to administrator privileges in Honeywell SoftMaster version 4.51, due to insecure permission assignment...
CVE-2022-2332
CVE-2022-2332 is tied to Honeywell SoftMaster 4.51 with an incorrect permission assignment (CWE-732) that allows a local unprivileged attacker to escalate to administrator privileges. The vulnerability is documented in several sources (NVD, CVE List, CISA/ICS advisories) and is part of a dual-iss...
Security Bulletin: Oracle Database Server Vulnerability Affects IBM Emptoris Contract Management (CVE-2021-2332)
Summary IBM Emptoris Contract Management supports Oracle database server as a backend database. The remediated version of Oracle database server has been certified by IBM Emptoris Contract Management. Vulnerability Details CVEID: CVE-2021-2332 DESCRIPTION: An unspecified vulnerability in Oracle...
Security Bulletin: Oracle Database Server Vulnerability Affects IBM Emptoris Sourcing (CVE-2021-2332)
Summary IBM Emptoris Sourcing supports Oracle database server as a backend database. The remediated version of Oracle database server has been certified by IBM Emptoris Sourcing. Vulnerability Details CVEID: CVE-2021-2332 DESCRIPTION: An unspecified vulnerability in Oracle Database Server related...
Security Bulletin: Oracle Database Server Vulnerability Affects IBM Emptoris Program Management (CVE-2021-2332)
Summary IBM Emptoris Program Management supports Oracle database server as a backend database. The remediated version of Oracle database server has been certified by IBM Emptoris Program Management. Vulnerability Details CVEID: CVE-2021-2332 DESCRIPTION: An unspecified vulnerability in Oracle...
Security Bulletin: Oracle Database Server Vulnerability Affects IBM Emptoris Supplier Lifecycle Management (CVE-2021-2332)
Summary IBM Emptoris Supplier Lifecycle Management supports Oracle database server as a backend database. The remediated version of Oracle database server has been certified by IBM Emptoris Supplier Lifecycle Management. Vulnerability Details CVEID: CVE-2021-2332 DESCRIPTION: An unspecified...
Oracle Database Server Multiple Vulnerabilities (October 2021 CPU)
The versions of Oracle Database Server installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2021 CPU advisory. - Vulnerability in the Zero Downtime DB Migration to Cloud component of Oracle Database Server. The supported version that is affected is 21...
CVE-2021-2332
Vulnerability in the Oracle LogMiner component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Easily exploitable vulnerability allows high privileged attacker having DBA privilege with network access via Oracle Net to compromise Oracle LogMiner...