21 matches found
CVE-2026-30290
An arbitrary file overwrite vulnerability in InTouch Contacts & Caller ID APP v6.38.1 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure...
EUVD-2025-30290
Malicious code in bioql PyPI...
CVE-2022-30290
In OpenCTI through 5.2.4, a broken access control vulnerability has been identified in the profile endpoint. An attacker can abuse the identified vulnerability in order to arbitrarily change their registered e-mail address as well as their API key, even though such action is not possible through...
CVE-2021-30290
Possible null pointer dereference due to race condition between timeline fence signal and time line fence destroy in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...
CVE-2025-30290
creationtimestamp| type| source ---|---|--- 2025-04-08 21:22:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmdftyfwwd2q 2025-04-08 21:48:52+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114304544409013946 2025-04-09 00:02:56+00:00| seen|...
CVE-2025-30290 ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could lead to a security feature bypass. A high privileged attacker could exploit this vulnerability to bypass security...
CVE-2024-30290 Adobe FrameMaker WEBP File Parsing Out Of Bound Write
Adobe Framemaker versions 2020.5, 2022.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2022-30290
creationtimestamp| type| source ---|---|--- 2022-07-05 16:13:35+00:00| seen| https://t.me/cibsecurity/45587...
CVE-2022-30290
CVE-2022-30290 affects OpenCTI up to version 5.2.4, where a broken access control issue in the profile endpoint lets an attacker change their registered email and API key despite these actions not being possible through the legitimate interface. Affected component: profile endpoint in OpenCTI. Ro...
CVE-2021-30290
CVE-2021-30290 describes a race condition in Qualcomm/Snapdragon components that could lead to a null pointer dereference when a timeline fence signal and its destroy occur concurrently. Affected are Snapdragon Auto, Connectivity, Industrial IOT, and Mobile platforms. The CVE has high/very high p...
ONAP SO Authorization Issue Vulnerability
ONAP SO is a service orchestration program for ONAP from the ONAP project. An authorization issue vulnerability exists in ONAP SO Dublin and prior versions. An attacker can use ports 30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and/or 30271 to gain full privileges to the ONAP service...
CVE-2019-12128
In ONAP SO through Dublin, by accessing an applicable port 30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and/or 30271, an attacker gains full access to the respective ONAP services without any authentication. All ONAP Operations Manager OOM setups are affected...
Authentication flaw
In ONAP MSB through Dublin, by accessing an applicable port 30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and/or 30271, an attacker gains full access to the respective ONAP services without any authentication. All ONAP Operations Manager OOM setups are affected...
Authentication flaw
In ONAP SO through Dublin, by accessing an applicable port 30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and/or 30271, an attacker gains full access to the respective ONAP services without any authentication. All ONAP Operations Manager OOM setups are affected...
PT-2020-9290
Name of the Vulnerable Software and Affected Versions ONAP DCAE versions through Dublin ONAP Operations Manager OOM setups affected versions not specified Description The issue allows an attacker to gain full access to ONAP services without authentication by accessing specific ports. The affected...
PT-2020-9291
Name of the Vulnerable Software and Affected Versions ONAP OOM versions through Dublin Description The issue allows an attacker to gain full access to ONAP services without authentication by accessing specific ports. All ONAP Operations Manager setups are affected. Recommendations For versions...
PT-2020-9293
Name of the Vulnerable Software and Affected Versions ONAP MSB versions through Dublin Description The issue allows an attacker to gain full access to ONAP services without authentication by accessing specific ports, including 30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and 30271. All...
PT-2020-9289
Name of the Vulnerable Software and Affected Versions ONAP Logging through Dublin affected versions not specified ONAP Operations Manager OOM setups affected versions not specified Description The issue allows an attacker to gain full access to ONAP services without authentication by accessing...
PT-2020-9292
Name of the Vulnerable Software and Affected Versions ONAP SO through Dublin ONAP Operations Manager OOM setups affected versions not specified Description The issue allows an attacker to gain full access to ONAP services without authentication by accessing specific ports, including 30234, 30290,...
CVE-2019-12125: Missing Authentication for Critical Function
In ONAP Logging through Dublin, by accessing an applicable port 30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and/or 30271, an attacker gains full access to the respective ONAP services without any authentication. All ONAP Operations Manager OOM setups are affected...