SolarWinds Web Help Desk < 2026.2.1 SAML Authentication Bypass (CVE-2026-28323)

The version of SolarWinds Web Help Desk installed on the remote host is prior to 2026.2.1. It is, therefore, affected by a SAML authentication bypass vulnerability: - SolarWinds Web Help Desk is found to be affected by a SAML authentication bypass vulnerability. This requires the SAML 2.0...

CVE-2026-28323

creationtimestamp| type| source ---|---|--- 2026-07-30 16:56:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mruvtcjthk2z 2026-07-31 02:53:42+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mrvx7w6dy72z 2026-07-31 16:45:13+00:00| seen|...

CVE-2024-28323

RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

CVE-2024-28323

creationtimestamp| type| source ---|---|--- 2024-03-14 15:26:47+00:00| seen| https://t.me/ctinow/207862...

CVE-2024-28323

The bwdates-report-result.php file in Phpgurukul User Registration & Login and User Management System 3.1 contains a potential security vulnerability related to user input validation. The script retrieves user-provided date inputs without proper validation, making it susceptible to SQL injection...

CVE-2024-28323

The bwdates-report-result.php file in Phpgurukul User Registration & Login and User Management System 3.1 contains a potential security vulnerability related to user input validation. The script retrieves user-provided date inputs without proper validation, making it susceptible to SQL injection...

CVE-2024-28323

The bwdates-report-result.php file in Phpgurukul User Registration & Login and User Management System 3.1 contains a potential security vulnerability related to user input validation. The script retrieves user-provided date inputs without proper validation, making it susceptible to SQL injection...

CVE-2024-28323

The vulnerability CVE-2024-28323 affects Phpgurukul User Registration & Login and User Management System v3.1. The bwdates-report-result.php script accepts user-provided date inputs without proper validation, enabling SQL injection via that input path. This could impact data integrity and confide...

CVE-2023-28323

creationtimestamp| type| source ---|---|--- 2023-07-01 07:15:43+00:00| seen| https://t.me/cibsecurity/65838...

CVE-2023-28323

CVE-2023-28323 affects Ivanti Endpoint Manager (EPM) versions prior to 2022 SU3, via a deserialization of untrusted data that allows an unauthenticated user to escalate privileges. The described impact is unauthenticated remote privilege escalation, potentially enabling escalation alongside other...

CVE-2023-28323

A deserialization of untrusted data exists in EPM 2022 Su3 and all prior versions that allows an unauthenticated user to elevate rights. This exploit could potentially be used in conjunction with other OS Operating System vulnerabilities to escalate privileges on the machine or be used as a...

CVE-2022-28323

creationtimestamp| type| source ---|---|--- 2022-04-30 20:26:08+00:00| seen| https://t.me/cibsecurity/41692...

CVE-2022-28323

An issue was discovered in MediaWiki through 1.37.2. The SecurePoll extension allows a leak because sorting by timestamp is supported,...

CVE-2022-28323

CVE-2022-28323 concerns MediaWiki up to 1.37.2 with the SecurePoll extension. The issue is a leak caused by sorting by timestamp being supported, enabling exposure of information that should be restricted. The CVSS metrics indicate base scores of 5.0 (AV:N/AC:L/PR:N/UI:N/S:U/C:P/I:N/A:N) and 7.5 ...

CVE-2021-28323

Windows DNS Information Disclosure Vulnerability...

CVE-2021-28323

Technical details about CVE-2021-28323 are not provided in the supplied documents. Public disclosures, impacted products, root cause, and fixes are not specified here. Monitor for updates.

CVE-2021-28323 Windows DNS Information Disclosure Vulnerability

...

KB5001342: Windows 10 version 1809 / Windows Server 2019 Security Update (Apr 2021)

The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Win32k Elevation of Privilege Vulnerability CVE-2021-27072, CVE-2021-28310 - Windows Media Photo Codec Information Disclosure Vulnerability CVE-2021-27079 - Windows Event Tracing Elevati...

KB5001389: Windows Server 2008 Security Update (Apr 2021)

The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Microsoft Internet Messaging API Remote Code Execution Vulnerability CVE-2021-27089 - Windows Kernel Information Disclosure Vulnerability CVE-2021-27093, CVE-2021-28309 - Windows Media...

KB5001347: Windows 10 version 1607 / Windows Server 2016 Security Update (Apr 2021)

The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Win32k Elevation of Privilege Vulnerability CVE-2021-27072 - Windows Media Photo Codec Information Disclosure Vulnerability CVE-2021-27079 - Microsoft Internet Messaging API Remote Code...