44 matches found
ROOT-OS-DEBIAN-13-CVE-2026-23445 CVE-2026-23445 in rootio-linux - Patched by Root
Root has patched CVE-2026-23445 in the rootio-linux package for Root:Debian:13. Multiple fixed versions available...
Linux Distros Unpatched Vulnerability : CVE-2026-23445
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - igc: fix page fault in XDP TX timestamps handling If an XDP application that requested TX timestamping is shutting down while the link of the interface in use i...
CVE-2026-23445
creationtimestamp| type| source ---|---|--- 2026-04-03 16:14:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116341659827215112 2026-05-31 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260601...
CVE-2026-23445 igc: fix page fault in XDP TX timestamps handling
In the Linux kernel, the following vulnerability has been resolved: igc: fix page fault in XDP TX timestamps handling If an XDP application that requested TX timestamping is shutting down while the link of the interface in use is still up the following kernel splat is reported: 883.803618 T1554...
Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale and the HDFS layer are now fixed in 5.2.3.3 or higher (CVE-2021-23445)
Summary The following vulnerabilities, which can affect IBM Storage Scale and the HDFS layer and could provide weaker-than-expected security, are now fixed in Storage Scale 5.2.3.3 or higher CVE-2021-23445. Vulnerability Details CVEID:CVE-2021-23445 DESCRIPTION: This affects the package...
Linux Distros Unpatched Vulnerability : CVE-2021-23445
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This affects the package datatables.net before 1.11.3. If an array is passed to the HTML escape entities function it would not have its contents escaped...
CVE-2023-23445
Improper Access Control in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged remote attacker to gain unauthorized access to data fields by using a therefore unpriviledged account via the REST interface...
CVE-2025-23445
creationtimestamp| type| source ---|---|--- 2025-01-16 20:16:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv3wk74752p 2025-01-16 20:53:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113840015738029847...
CVE-2025-23445
Cross-Site Request Forgery CSRF vulnerability in scottswezey Easy Tynt easy-tynt allows Cross Site Request Forgery.This issue affects Easy Tynt: from n/a through = 0.2.5.1...
CVE-2025-23445 WordPress Easy Tynt plugin <= 0.2.5.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Scott Swezey Easy Tynt allows Cross Site Request Forgery.This issue affects Easy Tynt: from n/a through 0.2.5.1...
CVE-2025-23445
CVE-2025-23445 describes a CSRF-enabled vulnerability in the WordPress plugin Easy Tynt (affected: v0.2.5.1 and earlier). The connected Wordfence data indicates this vulnerability is a Cross-Site Request Forgery to Stored Cross-Site Scripting scenario, implying potential for stored XSS via CSRF. ...
CVE-2024-23445 vulnerabilities
Vulnerabilities for packages: elasticsearch, sonarqube-10, elasticsearch-fips...
CVE-2024-23445
It was identified that if a cross-cluster API key https://www.elastic.co/guide/en/elasticsearch/reference/8.14/security-api-create-cross-cluster-api-key.htmlsecurity-api-create-cross-cluster-api-key-request-body restricts search for a given index using the query or the fieldsecurity parameter, an...
CVE-2024-23445
It was identified that if a cross-cluster API key https://www.elastic.co/guide/en/elasticsearch/reference/8.14/security-api-create-cross-cluster-api-key.htmlsecurity-api-create-cross-cluster-api-key-request-body restricts search for a given index using the query or the fieldsecurity parameter, an...
CVE-2024-23445 Elasticsearch Remote Cluster Search Cross Cluster API Key insufficient restrictions
It was identified that if a cross-cluster API key https://www.elastic.co/guide/en/elasticsearch/reference/8.14/security-api-create-cross-cluster-api-key.htmlsecurity-api-create-cross-cluster-api-key-request-body restricts search for a given index using the query or the fieldsecurity parameter, an...
CVE-2024-23445 Elasticsearch Remote Cluster Search Cross Cluster API Key insufficient restrictions
It was identified that if a cross-cluster API key https://www.elastic.co/guide/en/elasticsearch/reference/8.14/security-api-create-cross-cluster-api-key.htmlsecurity-api-create-cross-cluster-api-key-request-body restricts search for a given index using the query or the fieldsecurity parameter, an...
CVE-2024-23445
CVE-2024-23445 affects Elasticsearch remote-cluster API key security model (GA 8.14.0). The issue: a cross-cluster API key that restricts index search via query or field_security and also grants replication for the same index may not enforce search restrictions during cross-cluster search, potent...
CVE-2024-23445
A flaw was found in Elasticsearch. If a cross-cluster API key restricts the search for a given index using the query or the fieldsecurity parameter, and the same cross-cluster API key also grants replication for the same index, the search restrictions are not enforced during cross-cluster search...
Elasticsearch 8.14.0 Security Update (ESA-2024-13)
Elasticsearch Remote Cluster Search Cross Cluster API Key insufficient restrictions ESA-2024-13 It was identified that if a cross-cluster API key restricts search for a given index using the query or the fieldsecurity parameter, and the same cross-cluster API key also grants replication for the...
Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.17 Security update
An update is now available for Red Hat JBoss Enterprise Application Platform 7.4. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...