CVE-2022-24348-2

Ce depot n’a pas de fichier README...

Oracle Linux 10 : postgresql-jdbc (ELSA-2026-24348)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-24348 advisory. - Add tests for CVE-2026-42198 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has no...

RockyLinux 10 : postgresql-jdbc (RLSA-2026:24348)

The remote RockyLinux 10 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2026:24348 advisory. jdbc.postgresql.org: pgjdbc: Client-side Denial of Service via malicious SCRAM-SHA-256 authentication CVE-2026-42198 Tenable has extracted the preceding...

RHEL 10 : postgresql-jdbc (RHSA-2026:24348)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:24348 advisory. PostgreSQL is an advanced object-relational database management system. The postgresql-jdbc package includes the .jar files needed for Java program...

CVE-2026-24348

Multiple cross-site scripting vulnerabilities in Admin UI of EZCast Pro II version 1.17478.146 allow attackers to execute arbitrary JavaScript code in the browser of other Admin UI users...

CVE-2026-24348

creationtimestamp| type| source ---|---|--- 2026-01-27 11:24:34+00:00| seen| Telegram/wSw68b6u7Nw4kdUAhdxg4phsrhORrrAOfYGvEI1THIUAUU...

CVE-2026-24348

Multiple cross-site scripting vulnerabilities in Admin UI of EZCast Pro II version 1.17478.146 allow attackers to execute arbitrary JavaScript code in the browser of other Admin UI users...

CVE-2020-24348

njs through 0.4.3, used in NGINX, has an out-of-bounds read in njsjsonstringifyiterator in njsjson.c...

CVE-2025-24348

creationtimestamp| type| source ---|---|--- 2025-04-30 12:12:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14013 2025-04-30 15:55:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo25tanfts2p 2025-04-30 16:14:41+00:00| seen| https://t.me/cvedetector/24100 2025-06-16...

CVE-2025-24348

A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authenticated low-privileged attacker to manipulate the wireless network configuration file via a crafted HTTP request...

D-Link DIR-605L Multiple Vulnerabilities (2021-2025)

D-Link DIR-605L devices are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2023-24348

CVE-2023-24348 affects D-Link DIR-605L (N300 Wi‑Fi router) firmware v2.13B01, with a stack overflow in the curTime parameter processed by /goform/formSetACLFilter. The issue is described as a critical remote condition with high impact to confidentiality, integrity, and availability (CVSS 3.1: 9.8...

Important: Red Hat Security Advisory: Red Hat OpenShift GitOps security update

An update is now available for Red Hat OpenShift GitOps 1.4 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link...

GHSA-63QX-X74G-JCR7 Path traversal and dereference of symlinks in Argo CD

Impact All versions of Argo CD are vulnerable to a path traversal bug that allows to pass arbitrary values files to be consumed by Helm charts. Additionally, it is possible to craft special Helm chart packages containing value files that are actually symbolic links, pointing to arbitrary files...

CVE-2022-24348

CVE-2022-24348 affects Argo CD prior to 2.1.9 and 2.2.x prior to 2.2.4 due to a path traversal in helmTemplate within repository.go. This weakness can allow an attacker with access to Helm charts to traverse directories and potentially read YAML files containing credentials, depending on chart co...

CVE-2022-24348

creationtimestamp| type| source ---|---|--- 2022-02-04 19:47:38+00:00| seen| https://t.me/cibsecurity/36862 2022-02-05 00:31:17+00:00| seen| https://t.me/cibsecurity/36888 2022-02-06 06:49:12+00:00| exploited| https://t.me/thehackernews/1860 2022-02-06 14:46:31+00:00| seen| https://t.me/cKure/871...

CVE-2021-24348

The menu delete functionality of the Side Menu – add fixed side buttons WordPress plugin before 3.1.5, available to Administrator users takes the did GET parameter and uses it into an SQL statement without proper sanitisation, validation or escaping, therefore leading to a SQL Injection issue...

CVE-2021-24348

The menu delete functionality of the Side Menu – add fixed side buttons WordPress plugin before 3.1.5, available to Administrator users takes the did GET parameter and uses it into an SQL statement without proper sanitisation, validation or escaping, therefore leading to a SQL Injection issue...

CVE-2021-24348

The CVE-2021-24348 affects the WordPress Side Menu plugin (versions before 3.1.5). The vulnerability arises in the menu delete functionality where an administrator-accessible did GET parameter is interpolated into an SQL statement without proper sanitisation, validation, or escaping, enabling SQL...

CVE-2020-24348

njs through 0.4.3, used in NGINX, has an out-of-bounds read in njsjsonstringifyiterator in njsjson.c...