Lucene search
K

20 matches found

Circl
Circl
added 2026/03/25 5:0 a.m.1 views

CVE-2026-32016

creationtimestamp| type| source ---|---|--- 2026-03-25 05:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhucmelm6t2q...

7.8CVSS5.7AI score0.00017EPSS
Exploits0References1
vulnersOsv
vulnersOsv
added 2026/03/03 12:41 a.m.1 views

vantuz (>=3.3.2 <=3.3.7) potentially affected by CVE-2026-32016 via openclaw (=0.0.1)

openclaw NPM version =0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - vantuz =3.3.2, =3.3.7 Source cves: CVE-2026-32016 Source advisory: OSV:GHSA-7F4Q-9RQH-X36P...

7.8CVSS5.8AI score0.00017EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/22 7:44 p.m.5 views

CVE-2021-32016

An issue was discovered in JUMP AMS 3.6.0.04.009-2487. A JUMP SOAP endpoint permitted the writing of arbitrary files to a user-controlled location on the remote filesystem with user-controlled content via directory traversal, potentially leading to remote code and command execution...

9.9CVSS7.7AI score0.00809EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/04/11 4:3 p.m.11 views

CVE-2025-32016

Microsoft Identity Web is a library which contains a set of reusable classes used in conjunction with ASP.NET Core for integrating with the Microsoft identity platform formerly Azure AD v2.0 endpoint and AAD B2C. This vulnerability affects confidential client applications, including daemons, web...

4.7CVSS6.5AI score0.00131EPSS
Exploits0References1
NVD
NVD
added 2025/04/09 4:15 p.m.6 views

CVE-2025-32016

Microsoft Identity Web is a library which contains a set of reusable classes used in conjunction with ASP.NET Core for integrating with the Microsoft identity platform formerly Azure AD v2.0 endpoint and AAD B2C. This vulnerability affects confidential client applications, including daemons, web...

4.7CVSS0.00131EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/09 3:48 p.m.9 views

CVE-2025-32016 Microsoft Identity Web Exposes Client Secrets and Certificate Information in Service Logs

Microsoft Identity Web is a library which contains a set of reusable classes used in conjunction with ASP.NET Core for integrating with the Microsoft identity platform formerly Azure AD v2.0 endpoint and AAD B2C. This vulnerability affects confidential client applications, including daemons, web...

4.7CVSS0.00131EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/09 3:48 p.m.6 views

CVE-2025-32016 Microsoft Identity Web Exposes Client Secrets and Certificate Information in Service Logs

Microsoft Identity Web is a library which contains a set of reusable classes used in conjunction with ASP.NET Core for integrating with the Microsoft identity platform formerly Azure AD v2.0 endpoint and AAD B2C. This vulnerability affects confidential client applications, including daemons, web...

4.7CVSS6.5AI score0.00131EPSS
Exploits0References1
CVE
CVE
added 2025/04/09 3:48 p.m.63 views

CVE-2025-32016

This CVE affects Microsoft Identity Web (and related Microsoft.Identity.Abstractions) used with ASP.NET Core for Azure AD v2.0 / AAD B2C integrations. Under certain conditions, service logs can expose sensitive credentials, including local file paths with passwords, Base64-encoded values, and Cli...

4.7CVSS4.7AI score0.00131EPSS
Exploits0References1
Circl
Circl
added 2023/06/14 7:34 a.m.1 views

CVE-2023-32016

creationtimestamp| type| source ---|---|--- 2023-06-14 07:34:03+00:00| seen| https://t.me/cibsecurity/65206...

5.5CVSS6.6AI score0.00226EPSS
Exploits0References1
NVD
NVD
added 2023/06/14 12:15 a.m.16 views

CVE-2023-32016

Windows Installer Information Disclosure Vulnerability...

5.5CVSS7AI score0.00226EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2023/06/14 12:0 a.m.31 views

Microsoft Windows Multiple Vulnerabilities (KB5027215)

This host is missing an important security update according to Microsoft KB5027215 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

9.8CVSS7.4AI score0.30285EPSS
Exploits2References3
Vulnrichment
Vulnrichment
added 2023/06/13 11:26 p.m.35 views

CVE-2023-32016 Windows Installer Information Disclosure Vulnerability

...

5.5CVSS5.5AI score0.00226EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/06/13 11:26 p.m.24 views

CVE-2023-32016 Windows Installer Information Disclosure Vulnerability

...

5.5CVSS7.6AI score0.00226EPSS
Exploits0References1
CVE
CVE
added 2023/06/13 11:26 p.m.148 views

CVE-2023-32016

Technical details about CVE-2023-32016 are not publicly available in the provided connected documents. Monitor for updates from Microsoft and security feeds for affected products, vulnerable components, and fixes.

5.5CVSS7AI score0.00226EPSS
Exploits0References1Affected Software12
Circl
Circl
added 2022/06/02 8:25 p.m.0 views

CVE-2022-32016

creationtimestamp| type| source ---|---|--- 2022-06-02 20:25:49+00:00| seen| https://t.me/cibsecurity/43732...

7.2CVSS7AI score0.00274EPSS
Exploits1References1
OSV
OSV
added 2022/06/02 4:15 p.m.0 views

CVE-2022-32016

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=result&searchfor=bycompany...

7.2CVSS7.1AI score
Exploits0References1
Cvelist
Cvelist
added 2022/06/02 3:24 p.m.11 views

CVE-2022-32016

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=result&searchfor=bycompany...

7.7AI score0.00274EPSS
Exploits1References1
CVE
CVE
added 2022/06/02 3:24 p.m.61 views

CVE-2022-32016

CVE-2022-32016 affects Complete Online Job Search System v1.0, with a SQL Injection vulnerability in the web path /eris/index.php?q=result&searchfor=bycompany. The issue stems from unsafely constructed SQL statements in the affected page, enabling an attacker to manipulate queries and potentially...

7.2CVSS7.4AI score0.00274EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2021/08/03 5:55 p.m.11 views

CVE-2021-32016

An issue was discovered in JUMP AMS 3.6.0.04.009-2487. A JUMP SOAP endpoint permitted the writing of arbitrary files to a user-controlled location on the remote filesystem with user-controlled content via directory traversal, potentially leading to remote code and command execution...

9.9CVSS10AI score0.00809EPSS
Exploits0References2
CVE
CVE
added 2021/08/03 5:55 p.m.34 views

CVE-2021-32016

CVE-2021-32016 affects JUMP AMS 3.6.0.04.009-2487. A JUMP SOAP endpoint permits writing arbitrary files to a user-controlled location on the remote filesystem via directory traversal, potentially leading to remote code and command execution. The connected sources reiterate this description; no fu...

9.9CVSS9AI score0.00809EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder