CyberPower - SQL Injection

A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3. id: CVE-2024-32738 info: name: CyberPower - SQL Injection author: DhiyaneshDk severity: high description: | A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3...

ROOT-OS-DEBIAN-13-CVE-2026-32738 CVE-2026-32738 in rootio-libheif - Patched by Root

Root has patched CVE-2026-32738 in the rootio-libheif package for Root:Debian:13. Multiple fixed versions available...

CVE-2024-32738

creationtimestamp| type| source ---|---|--- 2026-06-15 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2026-06-15 2026-06-19 12:45:06+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f4c874d0-efe3-4080-99e3-295aaae1d5b8...

BELL-CVE-2026-32738

Bulletin has no description...

CVE-2026-32738

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and below, a crafted 792-byte HEIF sequence file with samplesperchunk=0 in the stsc box causes an unsigned integer underflow in the Chunk constructor mlastsample = 0 + 0 - 1 = UINT32MAX, mapping all samples to an empty...

CVE-2021-32738

js-stellar-sdk is a Javascript library for communicating with a Stellar Horizon server. The Utils.readChallengeTx function used in SEP-10 Stellar Web Authentication states in its function documentation that it reads and validates the challenge transaction including verifying that the...

CVE-2025-32738

Missing authentication for critical function issue exists in I-O DATA network attached hard disk 'HDL-T Series' firmware Ver.1.21 and earlier. If exploited, a remote unauthenticated attacker may change the product settings...

CVE-2025-32738

CVE-2025-32738 affects I-O DATA HDL-T Series network-attached HDDs with firmware versions 1.21 and earlier. The flaw is a missing authentication for a critical function, enabling a remote unauthenticated attacker to change product settings. Public sources (JVNDB/Red Hat/US CVE feeds) confirm the ...

less security update

530-3 - Fix CVE-2024-32487 - Resolves: RHEL-32738...

CVE-2024-32738

A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated remote attacker can leak sensitive information via the "queryptasklean" function within MCUDBHelper...

CVE-2024-32738 CyberPower PowerPanel Enterprise SQL Injection

A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior to v2.8.3. An unauthenticated remote attacker can leak sensitive information via the "queryptasklean" function within MCUDBHelper...

CVE-2023-32738

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Alkaweb Eonet Manual User Approve plugin = 2.1.3 versions...

CVE-2023-32738

CVE-2023-32738: Stored XSS in WordPress plugin Eonet Manual User Approve (

CVE-2022-32738

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none...

Improper Authentication

Overview The Utils.readChallengeTx function used in SEP-10 Stellar Web Authentication states in its function documentation that it reads and validates the challenge transaction including verifying that the serverAccountID has signed the transaction. The function does not verify that the server ha...

@1llet.xyz/erc4337-gasless-sdk (>=0.4.10 <=0.4.73), @adebaraayomide/synchro_sdk (>=0.0.3 <=0.1.0-synchro-sdk) +209 more potentially affected by CVE-2021-32738 via stellar-sdk (>=0.10.0 <=7.0.0)

stellar-sdk NPM version =0.10.0, =0.4.10, =0.0.3, =3.8.0, =1.0.0, =0.7.0, =1.0.0, =0.0.0-semantic-release-managed, =0.0.0-semantic-release-managed, =0.0.0-semantic-release-managed, =0.0.0-semantic-release-managed, =2.0.73-alpha.212 and more Source cves: CVE-2021-32738 Source advisory:...

CVE-2021-32738

js-stellar-sdk is a Javascript library for communicating with a Stellar Horizon server. The Utils.readChallengeTx function used in SEP-10 Stellar Web Authentication states in its function documentation that it reads and validates the challenge transaction including verifying that the...

CVE-2021-32738

js-stellar-sdk is a Javascript library for communicating with a Stellar Horizon server. The Utils.readChallengeTx function used in SEP-10 Stellar Web Authentication states in its function documentation that it reads and validates the challenge transaction including verifying that the...

CVE-2021-32738 Utils.readChallengeTx does not verify the server account signature

js-stellar-sdk is a Javascript library for communicating with a Stellar Horizon server. The Utils.readChallengeTx function used in SEP-10 Stellar Web Authentication states in its function documentation that it reads and validates the challenge transaction including verifying that the...

CVE-2021-32738

CVE-2021-32738 affects the js-stellar-sdk library used to interact with Stellar Horizon. The vulnerability lies in Utils.readChallengeTx, which, before version 8.2.3, did not verify that the server signature was present on the challenge transaction; however, signature verification via Utils.verif...