Lucene search
+L

45 matches found

osv_root
osv_root
•added 2026/11/03 3:59 a.m.•13 views

ROOT-OS-DEBIAN-13-CVE-2026-23445 CVE-2026-23445 in linux - Patched by Root

Root has patched CVE-2026-23445 in the linux package for Root:Debian:13. Multiple fixed versions available...

5.5CVSS5.6AI score0.00134EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/04/05 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2026-23445

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - igc: fix page fault in XDP TX timestamps handling If an XDP application that requested TX timestamping is shutting down while the link of the interface in use i...

7.8CVSS6AI score0.00134EPSS
SaveExploits0References3
Circl
Circl
•added 2026/04/03 4:14 p.m.•11 views

CVE-2026-23445

creationtimestamp| type| source ---|---|--- 2026-04-03 16:14:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116341659827215112 2026-05-31 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260601...

7.8CVSS5.9AI score0.00134EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/04/03 3:15 p.m.•47 views

CVE-2026-23445 igc: fix page fault in XDP TX timestamps handling

In the Linux kernel, the following vulnerability has been resolved: igc: fix page fault in XDP TX timestamps handling If an XDP application that requested TX timestamping is shutting down while the link of the interface in use is still up the following kernel splat is reported: 883.803618 T1554...

7.8CVSS0.00134EPSS
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
•added 2025/11/06 1:50 p.m.•25 views

Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale and the HDFS layer are now fixed in 5.2.3.3 or higher (CVE-2021-23445)

Summary The following vulnerabilities, which can affect IBM Storage Scale and the HDFS layer and could provide weaker-than-expected security, are now fixed in Storage Scale 5.2.3.3 or higher CVE-2021-23445. Vulnerability Details CVEID:CVE-2021-23445 DESCRIPTION: This affects the package...

6.1CVSS6.2AI score0.01975EPSS
SaveExploits1Affected Software1
Tenable Nessus
Tenable Nessus
•added 2025/08/27 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2021-23445

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This affects the package datatables.net before 1.11.3. If an array is passed to the HTML escape entities function it would not have its contents escaped...

6.1CVSS6.2AI score0.01975EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2025/05/23 5:12 a.m.•19 views

CVE-2023-23445

Improper Access Control in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged remote attacker to gain unauthorized access to data fields by using a therefore unpriviledged account via the REST interface...

7.5CVSS7.3AI score0.00659EPSS
SaveExploits0References1
Circl
Circl
•added 2025/01/16 8:16 p.m.•17 views

CVE-2025-23445

creationtimestamp| type| source ---|---|--- 2025-01-16 20:16:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv3wk74752p 2025-01-16 20:53:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113840015738029847...

7.1CVSS8.6AI score0.00211EPSS
SaveExploits0References2
NVD
NVD
•added 2025/01/16 8:15 p.m.•18 views

CVE-2025-23445

Cross-Site Request Forgery CSRF vulnerability in scottswezey Easy Tynt easy-tynt allows Cross Site Request Forgery.This issue affects Easy Tynt: from n/a through = 0.2.5.1...

7.1CVSS0.00211EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/16 8:05 p.m.•8 views

CVE-2025-23445 WordPress Easy Tynt plugin <= 0.2.5.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Scott Swezey Easy Tynt allows Cross Site Request Forgery.This issue affects Easy Tynt: from n/a through 0.2.5.1...

7.1CVSS8.4AI score0.00211EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/16 8:05 p.m.•76 views

CVE-2025-23445

CVE-2025-23445 describes a CSRF-enabled vulnerability in the WordPress plugin Easy Tynt (affected: v0.2.5.1 and earlier). The connected Wordfence data indicates this vulnerability is a Cross-Site Request Forgery to Stored Cross-Site Scripting scenario, implying potential for stored XSS via CSRF. ...

7.1CVSS8.4AI score0.00211EPSS
SaveExploits0References1
vulnersOsv
vulnersOsv
•added 2024/06/12 3:31 p.m.•4 views

com.farcsal.dql:query-es (0.8.0), com.github.msarhan:elasticsearch-analysis-arabic (>=1.2.0, <=1.4.0) +11 more potentially affected by CVE-2024-23445 via org.elasticsearch:elasticsearch (>=8.10.1, <=8.13.4)

org.elasticsearch:elasticsearch MAVEN version =8.10.1, =1.2.0, =0.83.0, =7.23.0, =8.10.1.0, =8.10.1.0, =8.10.1.0, =8.10.1.0, =8.10.1, =8.10.1, =8.10.4, =8.13.4 Source cves: CVE-2024-23445 Source advisory: GHSA-4C7Q-M7HC-PC92...

6.5CVSS6.5AI score0.00456EPSS
SaveExploits0
Chainguard
Chainguard
•added 2024/06/12 2:15 p.m.•43 views

CVE-2024-23445 vulnerabilities

Vulnerabilities for packages: sonarqube-10...

6.5CVSS6.6AI score0.00456EPSS
SaveExploits0
UbuntuCve
UbuntuCve
•added 2024/06/12 2:15 p.m.•32 views

CVE-2024-23445

It was identified that if a cross-cluster API key https://www.elastic.co/guide/en/elasticsearch/reference/8.14/security-api-create-cross-cluster-api-key.htmlsecurity-api-create-cross-cluster-api-key-request-body restricts search for a given index using the query or the fieldsecurity parameter, an...

6.5CVSS6.4AI score0.00456EPSS
SaveExploits0References2
CVE
CVE
•added 2024/06/12 1:58 p.m.•370 views

CVE-2024-23445

CVE-2024-23445 affects Elasticsearch remote-cluster API key security model (GA 8.14.0). The issue: a cross-cluster API key that restricts index search via query or field_security and also grants replication for the same index may not enforce search restrictions during cross-cluster search, potent...

6.5CVSS6.4AI score0.00456EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/06/12 1:58 p.m.•25 views

CVE-2024-23445 Elasticsearch Remote Cluster Search Cross Cluster API Key insufficient restrictions

It was identified that if a cross-cluster API key https://www.elastic.co/guide/en/elasticsearch/reference/8.14/security-api-create-cross-cluster-api-key.htmlsecurity-api-create-cross-cluster-api-key-request-body restricts search for a given index using the query or the fieldsecurity parameter, an...

6.5CVSS6.4AI score0.00456EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/06/12 1:58 p.m.•54 views

CVE-2024-23445 Elasticsearch Remote Cluster Search Cross Cluster API Key insufficient restrictions

It was identified that if a cross-cluster API key https://www.elastic.co/guide/en/elasticsearch/reference/8.14/security-api-create-cross-cluster-api-key.htmlsecurity-api-create-cross-cluster-api-key-request-body restricts search for a given index using the query or the fieldsecurity parameter, an...

6.5CVSS0.00456EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/06/12 1:58 p.m.•34 views

CVE-2024-23445 Elasticsearch Remote Cluster Search Cross Cluster API Key insufficient restrictions

It was identified that if a cross-cluster API key https://www.elastic.co/guide/en/elasticsearch/reference/8.14/security-api-create-cross-cluster-api-key.htmlsecurity-api-create-cross-cluster-api-key-request-body restricts search for a given index using the query or the fieldsecurity parameter, an...

6.5CVSS6.4AI score0.00456EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2024/06/06 11:03 a.m.•22 views

CVE-2024-23445

A flaw was found in Elasticsearch. If a cross-cluster API key restricts the search for a given index using the query or the fieldsecurity parameter, and the same cross-cluster API key also grants replication for the same index, the search restrictions are not enforced during cross-cluster search...

6.5CVSS6.5AI score0.00456EPSS
SaveExploits0References4
Elastic
Elastic
•added 2024/06/06 3:32 a.m.•30 views

Elasticsearch 8.14.0 Security Update (ESA-2024-13)

Elasticsearch Remote Cluster Search Cross Cluster API Key insufficient restrictions ESA-2024-13 It was identified that if a cross-cluster API key restricts search for a given index using the query or the fieldsecurity parameter, and the same cross-cluster API key also grants replication for the...

6.5CVSS6.5AI score0.00456EPSS
SaveExploits0
Rows per page
Query Builder