Lucene search
K

17 matches found

Vulnrichment
Vulnrichment
added 2026/04/14 4:58 p.m.2 views

CVE-2026-32076 Windows Storage Spaces Controller Elevation of Privilege Vulnerability

...

7.8CVSS5.8AI score0.00057EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-32076

Malicious code in bioql PyPI...

7.8CVSS6.6AI score0.00016EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/04/13 4:46 p.m.24 views

CVE-2025-32076

Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Visual Data Extension allows HTTP DoS.This issue affects Mediawiki - Visual Data Extension: from 1.39 through 1.43...

6.9CVSS7AI score0.00423EPSS
Exploits0References4
NVD
NVD
added 2025/04/11 5:15 p.m.16 views

CVE-2025-32076

Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Visual Data Extension allows HTTP DoS.This issue affects Mediawiki - Visual Data Extension: from 1.39 through 1.43...

6.9CVSS0.00423EPSS
Exploits0References2
Circl
Circl
added 2025/04/11 4:51 p.m.2 views

CVE-2025-32076

creationtimestamp| type| source ---|---|--- 2025-04-11 16:51:00+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11453 2025-04-11 19:43:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmkrosg6fm2z 2025-04-11 20:38:14+00:00| seen| https://t.me/cvedetector/22769...

6.9CVSS4.8AI score0.00423EPSS
Exploits0References3
CVE
CVE
added 2025/04/11 4:23 p.m.56 views

CVE-2025-32076

The CVE-2025-32076 entry describes an Improper Input Validation vulnerability in The Wikimedia Foundation MediaWiki Visual Data Extension, affecting versions 1.39 through 1.43. The underlying issue is improper input validation in the extension’s handling of user-provided data, which can be exploi...

6.9CVSS6.6AI score0.00423EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/04/11 4:23 p.m.11 views

CVE-2025-32076 Evil regex used to process user-provided data in VisualData

Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Visual Data Extension allows HTTP DoS.This issue affects Mediawiki - Visual Data Extension: from 1.39 through 1.43...

6.9CVSS0.00423EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2023-32076

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - in-toto is a framework to protect supply chain integrity. The in-toto configuration is read from various directories and allows users to configure the behavior ...

5.5CVSS6AI score0.00071EPSS
Exploits0References3
Circl
Circl
added 2023/05/10 10:19 p.m.0 views

CVE-2023-32076

creationtimestamp| type| source ---|---|--- 2023-05-10 22:19:31+00:00| seen| https://t.me/cibsecurity/63827...

5.5CVSS5.4AI score0.00071EPSS
Exploits0References1
vulnersOsv
vulnersOsv
added 2023/05/10 6:15 p.m.0 views

ddev (>=1.4.2 <=2.1.0), hoppr (>=1.7.0 <=1.13.2) +2 more potentially affected by CVE-2023-32076 via in-toto (>=1.0.1 <=1.4.0)

in-toto PYPI version =1.0.1, =1.4.2, =1.7.0, =1.0.18, =1.4.9 - hoppr-openssf-scorecard =0.0.1 Source cves: CVE-2023-32076 Source advisory: OSV:PYSEC-2023-63...

5.5CVSS6AI score0.00071EPSS
Exploits0
Debian CVE
Debian CVE
added 2023/05/10 5:58 p.m.16 views

CVE-2023-32076

in-toto is a framework to protect supply chain integrity. The in-toto configuration is read from various directories and allows users to configure the behavior of the framework. The files are from directories following the XDG base directory specification. In versions 1.4.0 and prior, among the...

5.5CVSS5.7AI score0.00071EPSS
Exploits0
Vulnrichment
Vulnrichment
added 2023/05/10 5:58 p.m.5 views

CVE-2023-32076 in-toto vulnerable to Configuration Read From Local Directory

in-toto is a framework to protect supply chain integrity. The in-toto configuration is read from various directories and allows users to configure the behavior of the framework. The files are from directories following the XDG base directory specification. In versions 1.4.0 and prior, among the...

5.5CVSS5.7AI score0.00071EPSS
Exploits0References4
CVE
CVE
added 2023/05/10 5:58 p.m.67 views

CVE-2023-32076

Summary of CVE-2023-32076 (in-toto) : The vulnerability affects in-toto up to version 1.4.0, where the framework reads configuration from XDG directories and includes the hidden file .in_totorc. If an attacker controls inputs to a supply chain step, they can inject a crafted .in_totorc with exclu...

5.5CVSS5.6AI score0.00071EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2023/05/10 5:58 p.m.10 views

CVE-2023-32076 in-toto vulnerable to Configuration Read From Local Directory

in-toto is a framework to protect supply chain integrity. The in-toto configuration is read from various directories and allows users to configure the behavior of the framework. The files are from directories following the XDG base directory specification. In versions 1.4.0 and prior, among the...

5.5CVSS5.8AI score0.00071EPSS
Exploits0References6
Circl
Circl
added 2021/08/26 4:40 p.m.0 views

CVE-2021-32076

creationtimestamp| type| source ---|---|--- 2021-08-26 16:40:28+00:00| seen| https://t.me/D4RKW0R1D/6958 2021-08-26 18:26:52+00:00| seen| https://t.me/cibsecurity/27903 2021-08-26 18:40:25+00:00| seen| https://t.me/D4RKW0R1D/874...

5.3CVSS5.5AI score0.00485EPSS
Exploits0References3
Cvelist
Cvelist
added 2021/08/26 2:53 p.m.32 views

CVE-2021-32076 Access Restriction bypass vulnerability via referrer spoof - Business Logic Bypass

Access Restriction Bypass via referrer spoof was discovered in SolarWinds Web Help Desk 12.7.2. An attacker can access the 'Web Help Desk Getting Started Wizard', especially the admin account creation page, from a non-privileged IP address network range or loopback address by intercepting the HTT...

5.3CVSS5.5AI score0.00485EPSS
Exploits0References1
CVE
CVE
added 2021/08/26 2:53 p.m.69 views

CVE-2021-32076

SolarWinds Web Help Desk 12.7.2 is affected by an Access Restriction Bypass via referrer spoof. An attacker can reach the Web Help Desk Getting Started Wizard, including the admin account creation page, by intercepting an HTTP request and changing the referrer from the public IP to the loopback, ...

5.3CVSS5.2AI score0.00485EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder