Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 10:42 a.m.6 views

CVE-2022-26448

In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07063849; Issue ID: ALPS07063849...

6.7CVSS7.2AI score0.00015EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2025-26448

Malicious code in bioql PyPI...

3.7CVSS4.8AI score0.00073EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/09/06 5:21 p.m.3 views

CVE-2025-26448

In writeToParcel of CursorWindow.cpp, there is a possible out of bounds read due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS5.6AI score0.00009EPSS
Exploits0References1
Circl
Circl
added 2025/07/30 7:59 a.m.1 views

CVE-2025-26448

creationtimestamp| type| source ---|---|--- 2025-07-30 07:59:24+00:00| seen| https://vulnerability.circl.lu/bundle/9d7fef5d-952d-4ecc-880d-94d02304e7a3...

5.5CVSS4.8AI score0.00009EPSS
Exploits0References1
Circl
Circl
added 2023/08/02 4:39 p.m.2 views

CVE-2023-26448

creationtimestamp| type| source ---|---|--- 2023-08-02 16:39:17+00:00| seen| https://t.me/cibsecurity/67579...

5.4CVSS5.5AI score0.00105EPSS
Exploits0References1
NVD
NVD
added 2023/08/02 1:15 p.m.11 views

CVE-2023-26448

Custom log-in and log-out locations are used-defined as jslob but were not checked to contain malicious protocol handlers. Malicious script code can be executed within the victims context. This can lead to session hijacking or triggering unwanted actions via the web interface and API. To exploit...

5.4CVSS5.6AI score0.00105EPSS
Exploits0References4
CVE
CVE
added 2023/08/02 12:23 p.m.2492 views

CVE-2023-26448

Open-Xchange AppSuite is affected by CVE-2023-26448 due to unsafe handling of customized login/logout locations defined as jslob, which were not validated for malicious protocol handlers. The underlying issue allows malicious script code to execute in the victim’s context, potentially enabling se...

5.4CVSS5.6AI score0.00105EPSS
Exploits0References4Affected Software1
CVE
CVE
added 2022/09/06 5:19 p.m.54 views

CVE-2022-26448

CVE-2022-26448 affects the apusys component and is caused by a missing bounds check resulting in an out-of-bounds write. The vulnerability can lead to local privilege escalation with System privileges, and does not require user interaction to exploit. Patch ALPS07063849 (Issue ALPS07063849) is id...

6.7CVSS6.7AI score0.00015EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder