Lucene search
K

15 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 3:48 a.m.3 views

CVE-2023-32354

An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, iOS 16.5 and iPadOS 16.5. An app may be able to disclose kernel memory...

5.5CVSS5.6AI score0.00045EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:57 p.m.3 views

CVE-2022-32354

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/?page=user/manageuser=...

7.2CVSS8.1AI score0.00274EPSS
Exploits1References1
Circl
Circl
added 2025/04/29 7:20 p.m.0 views

CVE-2025-32354

creationtimestamp| type| source ---|---|--- 2025-04-29 19:20:42+00:00| seen| https://t.me/cvedetector/24023...

8.8CVSS8.9AI score0.00379EPSS
Exploits0References1
NVD
NVD
added 2025/04/29 4:15 p.m.10 views

CVE-2025-32354

In Zimbra Collaboration ZCS 9.0 through 10.1, a Cross-Site Request Forgery CSRF vulnerability exists in the GraphQL endpoint /service/extension/graphql of Zimbra webmail due to a lack of CSRF token validation. This allows attackers to perform unauthorized GraphQL operations, such as modifying...

8.8CVSS0.00379EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/04/29 12:0 a.m.5 views

CVE-2025-32354

In Zimbra Collaboration ZCS 9.0 through 10.1, a Cross-Site Request Forgery CSRF vulnerability exists in the GraphQL endpoint /service/extension/graphql of Zimbra webmail due to a lack of CSRF token validation. This allows attackers to perform unauthorized GraphQL operations, such as modifying...

8.7AI score0.00379EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/04/29 12:0 a.m.9 views

CVE-2025-32354

In Zimbra Collaboration ZCS 9.0 through 10.1, a Cross-Site Request Forgery CSRF vulnerability exists in the GraphQL endpoint /service/extension/graphql of Zimbra webmail due to a lack of CSRF token validation. This allows attackers to perform unauthorized GraphQL operations, such as modifying...

0.00379EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/02/14 5:50 a.m.7 views

CVE-2024-32354

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain a command injection vulnerability via the 'timeout' parameter in the setSSServer function at /cgi-bin/cstecgi.cgi...

6CVSS7.9AI score0.00609EPSS
Exploits1References1
NVD
NVD
added 2024/05/14 4:17 p.m.11 views

CVE-2024-32354

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain a command injection vulnerability via the 'timeout' parameter in the setSSServer function at /cgi-bin/cstecgi.cgi...

6CVSS7.6AI score0.00609EPSS
Exploits1References2
Cvelist
Cvelist
added 2024/05/14 3:59 p.m.10 views

CVE-2024-32354

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain a command injection vulnerability via the 'timeout' parameter in the setSSServer function at /cgi-bin/cstecgi.cgi...

7.8AI score0.00609EPSS
Exploits1References2
Cvelist
Cvelist
added 2023/06/23 12:0 a.m.18 views

CVE-2023-32354

An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, iOS 16.5 and iPadOS 16.5. An app may be able to disclose kernel memory...

6.1AI score0.00045EPSS
Exploits0References3
CVE
CVE
added 2023/06/23 12:0 a.m.65 views

CVE-2023-32354

CVE-2023-32354 is an Apple vulnerability described as an out-of-bounds read that could allow an app to disclose kernel memory. The public descriptions tie this issue to Apple OS updates: watchOS 9.5, tvOS 16.5, iOS 16.5, and iPadOS 16.5. The fixed condition is “improved input validation” (per mul...

5.5CVSS4.2AI score0.00045EPSS
Exploits0References3Affected Software4
Vulnrichment
Vulnrichment
added 2023/06/23 12:0 a.m.19 views

CVE-2023-32354

An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, iOS 16.5 and iPadOS 16.5. An app may be able to disclose kernel memory...

5.6AI score0.00045EPSS
Exploits0References3
Circl
Circl
added 2022/06/15 12:19 a.m.0 views

CVE-2022-32354

creationtimestamp| type| source ---|---|--- 2022-06-15 00:19:27+00:00| seen| https://t.me/cibsecurity/44467...

7.2CVSS7AI score0.00274EPSS
Exploits1References1
CVE
CVE
added 2022/06/14 8:24 p.m.54 views

CVE-2022-32354

Product Show Room Site v1.0 is vulnerable to SQL injection in the admin page parameter /psrs/admin/?page=user/manage_user&id= (CVE-2022-32354). Connected sources consistently describe SQL injection without detailing root cause, affected versions beyond v1.0, or exploitation status. No remediation...

7.2CVSS7.4AI score0.00274EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 1976/01/01 12:0 a.m.9 views

CVE-2024-32354

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain a command injection vulnerability via the 'timeout' parameter in the setSSServer function at /cgi-bin/cstecgi.cgi...

8AI score0.00609EPSS
Exploits1References2
Rows per page
Query Builder