CVE-2026-28066

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Legrand legrand allows PHP Local File Inclusion.This issue affects Legrand: from n/a through = 2.17...

CVE-2024-28066

The Unify CP IP Phone running firmware version 1.10.4.3 is susceptible to a security vulnerability involving weak credentials . Specifically, the firmware contains a hardcoded root password , which could allow unauthorized access to the device. As a temporary workaround until a formal patch is re...

CVE-2024-28066

In Unify CP IP Phone firmware 1.10.4.3, Weak Credentials are used a hardcoded root password...

CVE-2023-28066

CVE-2023-28066 affects Dell OS Recovery Tool, specifically versions 2.2.4013 and 2.3.7012.0. The vulnerability is described as Improper Access Control, where a local authenticated non-administrator user could potentially elevate privileges on the system. The available connected documents confirm ...

CVE-2023-28066

Dell OS Recovery Tool, versions 2.2.4013 and 2.3.7012.0, contain an Improper Access Control Vulnerability. A local authenticated non-administrator user could potentially exploit this vulnerability in order to elevate privileges on the system...

GLSA-202208-26 : libarchive: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202208-26 libarchive: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in libarchive. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block...

CVE-2022-28066 affecting package libarchive for versions less than 3.6.1-1

CVE-2022-28066 affecting package libarchive for versions less than 3.6.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-28066

creationtimestamp| type| source ---|---|--- 2022-05-04 18:35:10+00:00| seen| https://t.me/cibsecurity/41915...

CVE-2022-28066

CVE-2022-28066 is listed as a duplicate of CVE-2022-26280 and is not the active entry. Connected documents provide concrete details for the underlying issue in libarchive: an out-of-bounds read via the zipx_lzma_alone_init in libarchive versions older than 3.6.1-1. This affects libarchive (3.6.0 ...