GHSA-2356-622P-VMC7 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-2356-622P-VMC7 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-2356

CVE-2026-2356 (User Registration & Membership – WordPress) is a discovered Insecure Direct Object Reference affecting the plugin up to version 5.1.2. The issue arises from missing validation on a user-controlled key (member_id/register_member), enabling unauthenticated deletion of newly created u...

EUVD-2026-2356

The Dreamer Blog WordPress theme through 1.2 is vulnerable to arbitrary installations due to a missing capability check...

CVE-2016-2356

Milesight IP security cameras through 2016-11-14 have a buffer overflow in a web application via a long username or password...

Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2025-2356)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EUVD-2020-2356

Malware in sbrugna...

CVE-2014-2356

creationtimestamp| type| source ---|---|--- 2025-10-03 18:07:52+00:00| seen| Telegram/EHytoEGNU5QbR5Or6ZT2RG7Ve4RzK1MFJJpCmCLF-FySW1g...

Linux Distros Unpatched Vulnerability : CVE-2011-2356

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2013-2356

HP System Management Homepage SMH before 7.2.1 allows remote attackers to obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2013-2363...

CVE-2025-2356

A vulnerability was found in BlackVue App 3.65 on Android. It has been classified as problematic. This affects the function deviceDelete of the component API Handler. The manipulation leads to use of get request method with sensitive query strings. It is possible to initiate the attack remotely...

CVE-2025-2356

creationtimestamp| type| source ---|---|--- 2025-03-17 03:41:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkkabcywxr26 2025-03-17 04:55:14+00:00| seen| https://t.me/cvedetector/20428 2025-03-17 13:46:51+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7...

CVE-2025-2356

A vulnerability was found in BlackVue App 3.65 on Android. It has been classified as problematic. This affects the function deviceDelete of the component API Handler. The manipulation leads to use of get request method with sensitive query strings. It is possible to initiate the attack remotely...

CVE-2025-2356 BlackVue App API deviceDelete get request method with sensitive query strings

A vulnerability was found in BlackVue App 3.65 on Android. It has been classified as problematic. This affects the function deviceDelete of the component API Handler. The manipulation leads to use of get request method with sensitive query strings. It is possible to initiate the attack remotely...

CVE-2025-2356 BlackVue App API deviceDelete get request method with sensitive query strings

A vulnerability was found in BlackVue App 3.65 on Android. It has been classified as problematic. This affects the function deviceDelete of the component API Handler. The manipulation leads to use of get request method with sensitive query strings. It is possible to initiate the attack remotely...

CVE-2025-2356

CVE-2025-2356 affects BlackVue App 3.65 on Android. The vulnerability lies in the API Handler’s deviceDelete function, where a GET request with sensitive query strings can be exploited remotely. Exploitability is described as high complexity with remote initiation, and the exploit has been public...

Amazon Linux 2 : libX11 (ALAS-2023-2356)

The version of libX11 installed on the remote host is prior to 1.6.7-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2356 advisory. A vulnerability was found in libX11 due to an infinite loop within the PutSubImage function. This flaw allows a local user to consum...

CVE-2023-2356

creationtimestamp| type| source ---|---|--- 2023-04-28 07:26:59+00:00| seen| https://t.me/cibsecurity/63024...

a2 (>=0.1.0 <=0.3.17), abnativ (>=1.1.0 <=1.2.9) +320 more potentially affected by CVE-2023-2356 via mlflow (>=0.8.2 <=2.3.0)

mlflow PYPI version =0.8.2, =0.1.0, =1.1.0, =0.0.5, =0.1.0, =0.1.0, =1.7.0, =1.7.0, =1.8.0, =1.7.0, =1.7.0, =0.1.1, =0.1.5 - anovos =1.1.0 - apache-submarine =0.6.0 and more Source cves: CVE-2023-2356 Source advisory: OSV:GHSA-X422-6QHV-P29G...

CVE-2023-2356

Relative Path Traversal in GitHub repository mlflow/mlflow prior to 2.3.1...