29 matches found
CVE-2026-46049
A flaw was found in the ALSA Advanced Linux Sound Architecture ctxfi driver in the Linux kernel. When processing S/PDIF Sony/Philips Digital Interface Format passthrough playback at 32000 Hz, a missing update to the pllrate can cause an infinite loop. This can lead to a denial of service DoS for ...
vantuz (>=3.3.2 <=3.3.7) potentially affected by CVE-2026-32000 via openclaw (=0.0.1)
openclaw NPM version =0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - vantuz =3.3.2, =3.3.7 Source cves: CVE-2026-32000 Source advisory: OSV:GHSA-7FCC-CW49-XM78...
Wordfence Intelligence Weekly WordPress Vulnerability Report (January 5, 2026 to January 11, 2026)
Did you know Wordfence runs aBug Bounty Program for all WordPress plugin and themes at no cost to vendors? Researchers can earn up to $31,200 per vulnerability , for all in-scope vulnerabilities submitted to our Bug Bounty Program! Find a vulnerability, submit the details directly to us, and we...
CVE-2023-32000
A Cross-Site Scripting XSS vulnerability found in UniFi Network Version 7.3.83 and earlier allows a malicious actor with Site Administrator credentials to escalate privileges by persuading an Administrator to visit a malicious web page...
CVE-2022-32000
Badminton Center Management System v1.0 is vulnerable to SQL Injection via /bcms/admin/?page=servicetransactions/manageservicetransaction=...
CVE-2024-32000
creationtimestamp| type| source ---|---|--- 2024-07-05 22:06:55+00:00| seen| https://t.me/cvedetector/128...
GHSA-W9MH-5X8J-9754 Malicious Matrix homeserver can leak truncated message content of messages it shouldn't have access to
Impact The fix for GHSA-wm4w-7h2q-3pf7 / CVE-2024-32000 included in matrix-appservice-irc 2.0.0 relied on the Matrix homeserver-provided timestamp to determine whether a user has access to the event they're replying to when determining whether or not to include a truncated version of the original...
CVE-2024-39691 Malicious Matrix homeserver can leak truncated message content of messages it shouldn't have access to
matrix-appservice-irc is a Node.js IRC bridge for the Matrix messaging protocol. The fix for GHSA-wm4w-7h2q-3pf7 / CVE-2024-32000 included in matrix-appservice-irc 2.0.0 relied on the Matrix homeserver-provided timestamp to determine whether a user has access to the event they're replying to when...
CVE-2024-39691 Malicious Matrix homeserver can leak truncated message content of messages it shouldn't have access to
matrix-appservice-irc is a Node.js IRC bridge for the Matrix messaging protocol. The fix for GHSA-wm4w-7h2q-3pf7 / CVE-2024-32000 included in matrix-appservice-irc 2.0.0 relied on the Matrix homeserver-provided timestamp to determine whether a user has access to the event they're replying to when...
CVE-2024-32000
matrix-appservice-irc is a Node.js IRC bridge for the Matrix messaging protocol. matrix-appservice-irc before version 2.0.0 can be exploited to leak the truncated body of a message if a malicious user sends a Matrix reply to an event ID they don't have access to. As a precondition to the attack,...
CVE-2024-32000 Truncated content of messages can be leaked from matrix-appservice-irc
matrix-appservice-irc is a Node.js IRC bridge for the Matrix messaging protocol. matrix-appservice-irc before version 2.0.0 can be exploited to leak the truncated body of a message if a malicious user sends a Matrix reply to an event ID they don't have access to. As a precondition to the attack,...
CVE-2024-32000 Truncated content of messages can be leaked from matrix-appservice-irc
matrix-appservice-irc is a Node.js IRC bridge for the Matrix messaging protocol. matrix-appservice-irc before version 2.0.0 can be exploited to leak the truncated body of a message if a malicious user sends a Matrix reply to an event ID they don't have access to. As a precondition to the attack,...
CVE-2024-32000 Truncated content of messages can be leaked from matrix-appservice-irc
matrix-appservice-irc is a Node.js IRC bridge for the Matrix messaging protocol. matrix-appservice-irc before version 2.0.0 can be exploited to leak the truncated body of a message if a malicious user sends a Matrix reply to an event ID they don't have access to. As a precondition to the attack,...
CVE-2023-32000
creationtimestamp| type| source ---|---|--- 2023-07-08 07:16:45+00:00| seen| https://t.me/cibsecurity/66236...
CVE-2023-32000
CVE-2023-32000 is a Cross-Site Scripting (XSS) flaw in UniFi Network versions 7.3.83 and earlier. The impact is privilege escalation by convincing a Site Administrator to visit a malicious page, requiring administrator credentials and user interaction. Mitigation per the connected PT-2023-23565 a...
CVE-2023-32000
A Cross-Site Scripting XSS vulnerability found in UniFi Network Version 7.3.83 and earlier allows a malicious actor with Site Administrator credentials to escalate privileges by persuading an Administrator to visit a malicious web page...
SUSE: Security Advisory (SUSE-SU-2022:3674-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLES15 Security Update : clone-master-clean-up (SUSE-SU-2022:3667-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:3667-1 advisory. - A UNIX Symbolic Link Symlink Following vulnerability in the clone-master-clean-up.sh script of clone- master-clean-up in SUSE Linux...
SUSE: Security Advisory (SUSE-SU-2022:3667-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE-SU-2022:3667-1 Security update for clone-master-clean-up
This update for clone-master-clean-up fixes the following issues: - CVE-2021-32000: Fixed some potentially dangerous file system operations bsc1181050. Bugfixes: - Fixed clone-master-clean-up failing to remove btrfs snapshots bsc1203651...