Lucene search
K

21 matches found

vulnersOsv
vulnersOsv
added 2026/03/03 6:10 p.m.4 views

vantuz (>=3.3.2 <=3.3.7) potentially affected by CVE-2026-32037 via openclaw (=0.0.1)

openclaw NPM version =0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - vantuz =3.3.2, =3.3.7 Source cves: CVE-2026-32037 Source advisory: OSV:GHSA-W76H-8M22-HPGH...

6.5CVSS5.8AI score0.00042EPSS
Exploits0
Vulnrichment
Vulnrichment
added 2025/11/11 4:50 p.m.1 views

CVE-2025-32037

Improper access control for some IntelR PresentMon before version 2.3.1 within Ring 3: User Applications may allow a denial of service. Network adversary with a privileged user combined with a high complexity attack may enable denial of service. This result may potentially occur via adjacent acce...

2CVSS6AI score0.00016EPSS
Exploits0References1
Intel
Intel
added 2025/11/11 12:0 a.m.4 views

Intel® PresentMon Software Advisory

Summary: Potential security vulnerabilities for some Intel® PresentMon software may allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2025-30518 Description: Incorrect default...

6.7CVSS6.6AI score0.00016EPSS
Exploits0
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-32037

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00043EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/02/14 1:16 p.m.6 views

CVE-2024-32037

GeoNetwork is a catalog application to manage spatially referenced resources. In versions prior to 4.2.10 and 4.4.5, the search end-point response headers contain information about Elasticsearch software in use. This information is valuable from a security point of view because it allows software...

6.4AI score0.0094EPSS
Exploits0References1
OSV
OSV
added 2025/02/11 10:47 p.m.6 views

GHSA-52RF-25HQ-5M33 GeoNetwork search end-point information disclosure in response headers

Impact The search end-point response headers contain information about Elasticsearch software in use. This information is sensitive from a security point of view because it allows software used by the server to be easily identified. Patches GeoNetwork 4.4.5 / 4.2.10 Workarounds None References -...

5.3CVSS3.6AI score0.0094EPSS
Exploits0References7
NVD
NVD
added 2025/02/11 10:15 p.m.11 views

CVE-2024-32037

GeoNetwork is a catalog application to manage spatially referenced resources. In versions prior to 4.2.10 and 4.4.5, the search end-point response headers contain information about Elasticsearch software in use. This information is valuable from a security point of view because it allows software...

5.3CVSS0.0094EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/02/11 9:50 p.m.16 views

CVE-2024-32037 GeoNetwork vulnerable to search end-point information disclosure in response headers

GeoNetwork is a catalog application to manage spatially referenced resources. In versions prior to 4.2.10 and 4.4.5, the search end-point response headers contain information about Elasticsearch software in use. This information is valuable from a security point of view because it allows software...

0.0094EPSS
Exploits0References4
Cvelist
Cvelist
added 2023/07/11 5:2 p.m.22 views

CVE-2023-32037 Windows Layer-2 Bridge Network Driver Information Disclosure Vulnerability

...

6.5CVSS8.1AI score0.00206EPSS
Exploits0References1
CVE
CVE
added 2023/07/11 5:2 p.m.92 views

CVE-2023-32037

CVE-2023-32037 is a Windows Layer-2 Bridge Network Driver information disclosure vulnerability. The vulnerability is described as high confidentiality impact with adjacent-network exploitation, no privileges required, and no user interaction. The connected documents do not provide explicit exploi...

6.5CVSS7.6AI score0.00206EPSS
Exploits0References1Affected Software7
Vulnrichment
Vulnrichment
added 2023/07/11 5:2 p.m.20 views

CVE-2023-32037 Windows Layer-2 Bridge Network Driver Information Disclosure Vulnerability

...

6.5CVSS7.2AI score0.00206EPSS
Exploits0References1
Circl
Circl
added 2022/07/01 10:40 p.m.1 views

CVE-2022-32037

creationtimestamp| type| source ---|---|--- 2022-07-01 22:40:00+00:00| seen| https://t.me/cibsecurity/45514...

7.5CVSS7.3AI score0.00354EPSS
Exploits1References1
NVD
NVD
added 2022/07/01 6:15 p.m.15 views

CVE-2022-32037

Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetAPCfg...

7.5CVSS0.00354EPSS
Exploits1References1
Cvelist
Cvelist
added 2022/07/01 5:27 p.m.18 views

CVE-2022-32037

Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetAPCfg...

7.9AI score0.00354EPSS
Exploits1References1
CVE
CVE
added 2022/07/01 5:27 p.m.75 views

CVE-2022-32037

CVE-2022-32037 affects Tenda M3 V1.0.0.12. Multiple sources document a stack overflow in the formSetAPCfg function caused by insufficient input length validation, leading to a denial-of-service impact. There is no public information in these documents about a tested exploit or affected firmware b...

7.5CVSS7.7AI score0.00354EPSS
Exploits1References1Affected Software1
OpenVAS
OpenVAS
added 2022/02/07 12:0 a.m.17 views

MongoDB DoS Vulnerability (SERVER-59071) - Windows

MongoDB is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mongodb:mongodb"; if...

6.5CVSS6.3AI score0.00474EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2022/02/07 12:0 a.m.14 views

MongoDB DoS Vulnerability (SERVER-59071) - Linux

MongoDB is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mongodb:mongodb"; if...

6.5CVSS6.3AI score0.00474EPSS
Exploits0References1
Circl
Circl
added 2021/11/24 6:27 p.m.1 views

CVE-2021-32037

creationtimestamp| type| source ---|---|--- 2021-11-24 18:27:03+00:00| seen| https://t.me/cibsecurity/32949...

6.5CVSS6.3AI score0.00474EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2021/11/24 10:40 a.m.12 views

CVE-2021-32037 User may trigger invariant when allowed to send commands directly to shards

An authorized user may trigger an invariant which may result in denial of service or server exit if a relevant aggregation request is sent to a shard. Usually, the requests are sent via mongos and special privileges are required in order to know the address of the shards and to log in to the shar...

6.5CVSS6.4AI score0.00474EPSS
Exploits0References1
CVE
CVE
added 2021/11/24 10:40 a.m.101 views

CVE-2021-32037

MongoDB Server vulnerability CVE-2021-32037 affects MongoDB Server v5.0 versions prior to and including 5.0.2. An authorized user can trigger an invariant by sending a relevant aggregation request to a shard via mongos, with privileges needed to know shard addresses and to log in to shards in an ...

6.5CVSS6.3AI score0.00474EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder