21 matches found
vantuz (>=3.3.2 <=3.3.7) potentially affected by CVE-2026-32037 via openclaw (=0.0.1)
openclaw NPM version =0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - vantuz =3.3.2, =3.3.7 Source cves: CVE-2026-32037 Source advisory: OSV:GHSA-W76H-8M22-HPGH...
CVE-2025-32037
Improper access control for some IntelR PresentMon before version 2.3.1 within Ring 3: User Applications may allow a denial of service. Network adversary with a privileged user combined with a high complexity attack may enable denial of service. This result may potentially occur via adjacent acce...
Intel® PresentMon Software Advisory
Summary: Potential security vulnerabilities for some Intel® PresentMon software may allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2025-30518 Description: Incorrect default...
EUVD-2025-32037
Malicious code in bioql PyPI...
CVE-2024-32037
GeoNetwork is a catalog application to manage spatially referenced resources. In versions prior to 4.2.10 and 4.4.5, the search end-point response headers contain information about Elasticsearch software in use. This information is valuable from a security point of view because it allows software...
GHSA-52RF-25HQ-5M33 GeoNetwork search end-point information disclosure in response headers
Impact The search end-point response headers contain information about Elasticsearch software in use. This information is sensitive from a security point of view because it allows software used by the server to be easily identified. Patches GeoNetwork 4.4.5 / 4.2.10 Workarounds None References -...
CVE-2024-32037
GeoNetwork is a catalog application to manage spatially referenced resources. In versions prior to 4.2.10 and 4.4.5, the search end-point response headers contain information about Elasticsearch software in use. This information is valuable from a security point of view because it allows software...
CVE-2024-32037 GeoNetwork vulnerable to search end-point information disclosure in response headers
GeoNetwork is a catalog application to manage spatially referenced resources. In versions prior to 4.2.10 and 4.4.5, the search end-point response headers contain information about Elasticsearch software in use. This information is valuable from a security point of view because it allows software...
CVE-2023-32037 Windows Layer-2 Bridge Network Driver Information Disclosure Vulnerability
...
CVE-2023-32037
CVE-2023-32037 is a Windows Layer-2 Bridge Network Driver information disclosure vulnerability. The vulnerability is described as high confidentiality impact with adjacent-network exploitation, no privileges required, and no user interaction. The connected documents do not provide explicit exploi...
CVE-2023-32037 Windows Layer-2 Bridge Network Driver Information Disclosure Vulnerability
...
CVE-2022-32037
creationtimestamp| type| source ---|---|--- 2022-07-01 22:40:00+00:00| seen| https://t.me/cibsecurity/45514...
CVE-2022-32037
Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetAPCfg...
CVE-2022-32037
Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetAPCfg...
CVE-2022-32037
CVE-2022-32037 affects Tenda M3 V1.0.0.12. Multiple sources document a stack overflow in the formSetAPCfg function caused by insufficient input length validation, leading to a denial-of-service impact. There is no public information in these documents about a tested exploit or affected firmware b...
MongoDB DoS Vulnerability (SERVER-59071) - Windows
MongoDB is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mongodb:mongodb"; if...
MongoDB DoS Vulnerability (SERVER-59071) - Linux
MongoDB is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mongodb:mongodb"; if...
CVE-2021-32037
creationtimestamp| type| source ---|---|--- 2021-11-24 18:27:03+00:00| seen| https://t.me/cibsecurity/32949...
CVE-2021-32037 User may trigger invariant when allowed to send commands directly to shards
An authorized user may trigger an invariant which may result in denial of service or server exit if a relevant aggregation request is sent to a shard. Usually, the requests are sent via mongos and special privileges are required in order to know the address of the shards and to log in to the shar...
CVE-2021-32037
MongoDB Server vulnerability CVE-2021-32037 affects MongoDB Server v5.0 versions prior to and including 5.0.2. An authorized user can trigger an invariant by sending a relevant aggregation request to a shard via mongos, with privileges needed to know shard addresses and to log in to shards in an ...