Lucene search
K

25 matches found

RedhatCVE
RedhatCVE
added 2026/03/18 8:30 p.m.1 views

CVE-2026-32634

A flaw was found in glances. In Central Browser mode, Glances stores both the Zeroconf-advertised server name and the discovered IP address for dynamic servers, but later builds connection URIs from the untrusted advertised name instead of the discovered IP. When a dynamic server reports itself a...

8.1CVSS5.8AI score0.00018EPSS
Exploits1References2
OSV
OSV
added 2026/03/18 6:16 p.m.1 views

DEBIAN-CVE-2026-32634

Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.2, in Central Browser mode, Glances stores both the Zeroconf-advertised server name and the discovered IP address for dynamic servers, but later builds connection URIs from the untrusted advertised name instead ...

8.1CVSS5.4AI score0.00018EPSS
Exploits1References1
Debian CVE
Debian CVE
added 2026/03/18 5:55 p.m.4 views

CVE-2026-32634

Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.2, in Central Browser mode, Glances stores both the Zeroconf-advertised server name and the discovered IP address for dynamic servers, but later builds connection URIs from the untrusted advertised name instead ...

8.1CVSS5.4AI score0.00018EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2026/03/18 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2026-32634

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.2, in Central Browser mode, Glances stores both the Zeroconf-advertised...

8.1CVSS5.8AI score0.00018EPSS
Exploits1References3
vulnersOsv
vulnersOsv
added 2026/03/16 4:36 p.m.1 views

croparray (>=0.1.0 <=0.1.1) potentially affected by CVE-2026-32634 via glances (=3.2.7)

glances PYPI version =3.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on glances and may be impacted: - croparray =0.1.0, =0.1.1 Source cves: CVE-2026-32634 Source advisory: OSV:GHSA-VX5F-957P-QPVM...

8.1CVSS5.8AI score0.00018EPSS
Exploits1
Circl
Circl
added 2026/03/14 2:52 p.m.1 views

CVE-2026-32634

creationtimestamp| type| source ---|---|--- 2026-03-14 14:52:49+00:00| published-proof-of-concept| https://github.com/nicolargo/glances/security/advisories/GHSA-vx5f-957p-qpvm 2026-03-18 18:40:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhe56nei7t2v 2026-03-19...

8.1CVSS5.7AI score0.00018EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2025/05/23 3:49 a.m.4 views

CVE-2023-32634

An authentication bypass vulnerability exists in the CiRpcServerThread functionality of SoftEther VPN 5.01.9674 and 4.41-9782-beta. An attacker can perform a local man-in-the-middle attack to trigger this vulnerability...

7.8CVSS6.7AI score0.00033EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 12:41 a.m.3 views

CVE-2022-32634

In ccci, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07138646; Issue ID: ALPS07138646...

6.7CVSS7.1AI score0.00016EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/04/25 5:58 p.m.2 views

CVE-2025-32634

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mdedev Run Contests, Raffles, and Giveaways with ContestsWP contest-code-checker allows Reflected XSS.This issue affects Run Contests, Raffles, and Giveaways with ContestsWP: from n/a through = 2.1...

7.1CVSS7.2AI score0.00669EPSS
Exploits0References1
NVD
NVD
added 2025/04/17 4:15 p.m.2 views

CVE-2025-32634

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mdedev Run Contests, Raffles, and Giveaways with ContestsWP contest-code-checker allows Reflected XSS.This issue affects Run Contests, Raffles, and Giveaways with ContestsWP: from n/a through = 2.1...

7.1CVSS0.00669EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/17 3:47 p.m.23 views

CVE-2025-32634 WordPress Run Contests, Raffles, and Giveaways plugin <= 2.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mdedev Run Contests, Raffles, and Giveaways with ContestsWP contest-code-checker allows Reflected XSS.This issue affects Run Contests, Raffles, and Giveaways with ContestsWP: from n/a through = 2.1...

7.1CVSS0.00669EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/17 3:47 p.m.3 views

CVE-2025-32634 WordPress Run Contests, Raffles, and Giveaways plugin <= 2.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mdedev Run Contests, Raffles, and Giveaways with ContestsWP contest-code-checker allows Reflected XSS.This issue affects Run Contests, Raffles, and Giveaways with ContestsWP: from n/a through = 2.1...

7.1CVSS7.2AI score0.00669EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/04/15 6:53 a.m.3 views

WordPress Run Contests, Raffles, and Giveaways plugin <= 2.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Run Contests, Raffles, and Giveaways with ContestsWP versions = 2.1.1...

7.1CVSS8.2AI score0.00669EPSS
Exploits0Affected Software1
Vulnrichment
Vulnrichment
added 2024/04/16 8:57 a.m.14 views

CVE-2024-32634 Logically dead code

In huge memory get unmapped area check, code can never be reached because of a logical contradiction...

6.1CVSS7.1AI score0.00195EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/04/16 8:57 a.m.11 views

CVE-2024-32634 Logically dead code

In huge memory get unmapped area check, code can never be reached because of a logical contradiction...

6.1CVSS6.6AI score0.00195EPSS
Exploits0References1
Circl
Circl
added 2023/10/12 8:23 p.m.0 views

CVE-2023-32634

creationtimestamp| type| source ---|---|--- 2023-10-12 20:23:24+00:00| seen| https://t.me/cibsecurity/72186...

7.8CVSS7.7AI score0.00033EPSS
Exploits1References1
NVD
NVD
added 2023/10/12 4:15 p.m.15 views

CVE-2023-32634

An authentication bypass vulnerability exists in the CiRpcServerThread functionality of SoftEther VPN 5.01.9674 and 4.41-9782-beta. An attacker can perform a local man-in-the-middle attack to trigger this vulnerability...

7.8CVSS7.6AI score0.00033EPSS
Exploits1References3
Cvelist
Cvelist
added 2023/10/12 3:27 p.m.16 views

CVE-2023-32634

An authentication bypass vulnerability exists in the CiRpcServerThread functionality of SoftEther VPN 5.01.9674 and 4.41-9782-beta. An attacker can perform a local man-in-the-middle attack to trigger this vulnerability...

7.8CVSS8.7AI score0.00033EPSS
Exploits1References2
CVE
CVE
added 2023/10/12 3:27 p.m.43 views

CVE-2023-32634

CVE-2023-32634 affects SoftEther VPN (CiRpcServerThread) and enables an authentication bypass that can be exploited by a local attacker to mount a man-in-the-middle and access/modify communications. Public listings consistently name SoftEther VPN versions 5.01.9674 and 4.41-9782-beta as affected,...

7.8CVSS7.5AI score0.00033EPSS
Exploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/12 3:27 p.m.16 views

CVE-2023-32634

An authentication bypass vulnerability exists in the CiRpcServerThread functionality of SoftEther VPN 5.01.9674 and 4.41-9782-beta. An attacker can perform a local man-in-the-middle attack to trigger this vulnerability...

7.8CVSS7.6AI score0.00033EPSS
Exploits1References2
Rows per page
Query Builder