Lucene search
K

17 matches found

vulnersOsv
vulnersOsv
added 2026/03/12 2:20 p.m.4 views

@bigegg/parse-server-schema-config (>=1.0.5 <=1.0.10), @kontaa/subgraph (>=1.0.1 <=1.2.3) +27 more potentially affected by CVE-2026-32098 via parse-server (>=2.0.8 <=7.5.4)

parse-server NPM version =2.0.8, =1.0.5, =1.0.1, =1.2.1, =2.4.46, =2.4.8, =1.0.0, =1.0.0, =1.0.1, =0.1.1, =0.0.2, =1.0.0, =0.1.0, =0.1.7, =0.0.1, =0.0.29 - parse-cli-server2 =0.0.30 and more Source cves: CVE-2026-32098 Source advisory: OSV:GHSA-J7MM-F4RV-6Q6Q...

7.5CVSS5.8AI score0.00052EPSS
Exploits0
vulnersOsv
vulnersOsv
added 2026/03/11 10:40 p.m.3 views

@openinc/parse-server-opendash (>=4.0.0 <=4.0.4) potentially affected by CVE-2026-32098 via parse-server (>=9.6.0-alpha.37 <=9.6.0-alpha.43)

parse-server NPM version =9.6.0-alpha.37, =4.0.0, =4.0.4 Source cves: CVE-2026-32098 Source advisory: SNYK:JS-PARSESERVER-15469210...

7.5CVSS5.8AI score0.00052EPSS
Exploits0
Circl
Circl
added 2026/03/11 7:16 p.m.0 views

CVE-2026-32098

creationtimestamp| type| source ---|---|--- 2026-03-11 19:16:18+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-32098...

7.5CVSS5.7AI score0.00052EPSS
Exploits0References1
Circl
Circl
added 2025/09/02 7:40 p.m.3 views

CVE-2025-32098

creationtimestamp| type| source ---|---|--- 2025-09-02 19:40:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxuuobkx7627...

5.3CVSS4.8AI score0.00064EPSS
Exploits0References1
OSV
OSV
added 2025/09/02 6:15 p.m.3 views

CVE-2025-32098

An issue was discovered in Samsung Magician 6.3 through 8.3 on Windows. An attacker can achieve Elevation of Privileges to SYSTEM by exploiting insecure file delete operations during the update process...

5.3CVSS5.6AI score0.00064EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 9:19 p.m.4 views

CVE-2021-32098

Artica Pandora FMS 742 allows unauthenticated attackers to perform Phar deserialization...

9.8CVSS7AI score0.02773EPSS
Exploits1References1
NVD
NVD
added 2024/04/15 8:15 a.m.14 views

CVE-2024-32098

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Page Visit Counter Advanced Page Visit Counter.This issue affects Advanced Page Visit Counter: from n/a through 8.0.6...

7.6CVSS7.9AI score0.0037EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/04/15 7:39 a.m.16 views

CVE-2024-32098 WordPress Advanced Page Visit Counter plugin <= 8.0.6 - Auth. SQL Injection (SQLi) vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Page Visit Counter Advanced Page Visit Counter.This issue affects Advanced Page Visit Counter: from n/a through 8.0.6...

7.6CVSS8.1AI score0.0037EPSS
Exploits0References1
CVE
CVE
added 2024/04/15 7:39 a.m.51 views

CVE-2024-32098

CVE-2024-32098 describes an SQL Injection in the WordPress plugin Advanced Page Visit Counter (affected versions: up to 8.0.6). The root cause is improper neutralization of SQL elements in the plugin, enabling an attacker with Administrator+ privileges (per the document) to influence SQL queries....

7.6CVSS5.6AI score0.0037EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/04/11 12:0 a.m.9 views

WordPress Advanced Page Visit Counter Plugin <= 8.0.6 is vulnerable to SQL Injection

Software Advanced Page Visit Counter Type Plugin Vulnerable versions = 8.0.6 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-32098 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 091c37cd4699 Credits Le Ngoc Anh Required privilege...

7.6CVSS6.8AI score0.0037EPSS
Exploits0References1Affected Software1
Circl
Circl
added 2023/05/18 10:32 p.m.4 views

CVE-2023-32098

creationtimestamp| type| source ---|---|--- 2023-05-18 22:32:29+00:00| seen| https://t.me/cibsecurity/64418 2025-01-21 22:01:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2495...

7.5CVSS7.3AI score0.00346EPSS
Exploits0References2
OSV
OSV
added 2023/05/18 7:15 p.m.17 views

CVE-2023-32098

Compiler removal of buffer clearing in slisesignmessage in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM...

7.5CVSS7.2AI score
Exploits0References2
Cvelist
Cvelist
added 2023/05/18 6:46 p.m.13 views

CVE-2023-32098 Key duplication in GSDK

Compiler removal of buffer clearing in slisesignmessage in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM...

5.3CVSS7.8AI score0.00346EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2023/05/18 6:46 p.m.11 views

CVE-2023-32098 Key duplication in GSDK

Compiler removal of buffer clearing in slisesignmessage in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM...

5.3CVSS7AI score0.00346EPSS
Exploits0References2
CVE
CVE
added 2023/05/18 6:46 p.m.48 views

CVE-2023-32098

The vulnerability CVE-2023-32098 affects Silicon Labs Gecko Platform SDK (Gecko SDK) up to v4.2.1. The root cause is a compiler removal of a buffer-clearing operation in sli_se_sign_message, which results in key material being duplicated in RAM. Documented impact is exposure of sensitive key mate...

7.5CVSS6.3AI score0.00346EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2021/05/07 4:15 a.m.8 views

CVE-2021-32098

Artica Pandora FMS 742 allows unauthenticated attackers to perform Phar deserialization...

9.8CVSS0.02773EPSS
Exploits1References3
CVE
CVE
added 2021/05/07 3:51 a.m.46 views

CVE-2021-32098

CVE-2021-32098 affects Artica Pandora FMS 742. Connected documents corroborate a deserialization vulnerability in Phar deserialization that allows unauthenticated access. The vulnerability details (affected version, root cause, impact) are consistently described across sources; no explicit fix or...

9.8CVSS9.4AI score0.02773EPSS
Exploits1References3Affected Software1
Rows per page
Query Builder