Lucene search
+L

20 matches found

Circl
Circl
•added 2026/03/15 9:44 a.m.•35 views

CVE-2026-32755

creationtimestamp| type| source ---|---|--- 2026-03-15 09:44:12+00:00| published-proof-of-concept| https://github.com/Admidio/admidio/security/advisories/GHSA-h8gr-qwr6-m9gx...

5.7CVSS5.8AI score0.00174EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 12:52 a.m.•10 views

CVE-2022-32755

IBM Security Directory Server 6.4.0 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 228505...

9.1CVSS6.5AI score0.00913EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 7:46 p.m.•28 views

CVE-2021-32755

Wire is a collaboration platform. wire-ios-transport handles authentication of requests, network failures, and retries for the iOS implementation of Wire. In the 3.82 version of the iOS application, a new web socket implementation was introduced for users running iOS 13 or higher. This new...

5.4CVSS6.9AI score0.00314EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/04/12 12:08 p.m.•52 views

CVE-2025-32755

In jenkins/ssh-slave Docker images based on Debian, SSH host keys are generated on image creation for images based on Debian, causing all containers based on images of the same version use the same SSH host keys, allowing attackers able to insert themselves into the network path between the SSH...

9.1CVSS6.9AI score0.00469EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/10 12:15 p.m.•60 views

CVE-2025-32755

In jenkins/ssh-slave Docker images based on Debian, SSH host keys are generated on image creation for images based on Debian, causing all containers based on images of the same version use the same SSH host keys, allowing attackers able to insert themselves into the network path between the SSH...

9.1CVSS0.00469EPSS
SaveExploits0References1
Circl
Circl
•added 2025/04/10 11:49 a.m.•31 views

CVE-2025-32755

creationtimestamp| type| source ---|---|--- 2025-04-10 11:49:12+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11221 2025-04-10 13:50:05+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114313986374409007 2025-04-10 15:21:41+00:00| seen| https://t.me/cvedetector/22648 2025-04-10...

9.1CVSS8.5AI score0.00469EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2025/04/10 11:21 a.m.•59 views

CVE-2025-32755

In jenkins/ssh-slave Docker images based on Debian, SSH host keys are generated on image creation for images based on Debian, causing all containers based on images of the same version use the same SSH host keys, allowing attackers able to insert themselves into the network path between the SSH...

0.00469EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/10 11:21 a.m.•122 views

CVE-2025-32755

The jenkins/ssh-slave Docker images based on Debian are vulnerable to an SSH host key reuse issue. This occurs because SSH host keys are generated during image creation, resulting in all containers of the same version sharing identical host keys. This flaw stems from errors in the pseudorandom nu...

9.1CVSS6.9AI score0.00469EPSS
SaveExploits0References1Affected Software1
AlpineLinux
AlpineLinux
•added 2025/04/10 11:21 a.m.•19 views

CVE-2025-32755

In jenkins/ssh-slave Docker images based on Debian, SSH host keys are generated on image creation for images based on Debian, causing all containers based on images of the same version use the same SSH host keys, allowing attackers able to insert themselves into the network path between the SSH...

9.1CVSS7.2AI score0.00469EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/07/02 1:38 p.m.•25 views

CVE-2024-32755 American Dynamics Illustra Essentials Gen 4 - Log Filter Input Validation

Under certain circumstances the web interface will accept characters unrelated to the expected input...

9.1CVSS6.9AI score0.00512EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/07/02 1:38 p.m.•45 views

CVE-2024-32755 American Dynamics Illustra Essentials Gen 4 - Log Filter Input Validation

Under certain circumstances the web interface will accept characters unrelated to the expected input...

9.1CVSS0.00512EPSS
SaveExploits0References2
Circl
Circl
•added 2023/10/14 6:30 p.m.•15 views

CVE-2022-32755

creationtimestamp| type| source ---|---|--- 2023-10-14 18:30:03+00:00| seen| https://t.me/cibsecurity/72287...

9.1CVSS8.6AI score0.00913EPSS
SaveExploits0References1
CVE
CVE
•added 2023/10/14 2:25 p.m.•103 views

CVE-2022-32755

CVE-2022-32755 affects IBM Security Directory Server 6.4.0. It is described as an XML External Entity (XXE) injection when processing XML data, enabling a remote attacker to expose sensitive information or cause memory/resource usage. Remediation referenced in the IBM bulletin: apply IBM Security...

9.1CVSS6.4AI score0.00913EPSS
SaveExploits0References2Affected Software3
Circl
Circl
•added 2023/08/25 12:16 p.m.•16 views

CVE-2023-32755

creationtimestamp| type| source ---|---|--- 2023-08-25 12:16:58+00:00| seen| https://t.me/cibsecurity/69172...

5.3CVSS5.5AI score0.00636EPSS
SaveExploits0References1
NVD
NVD
•added 2023/08/25 7:15 a.m.•23 views

CVE-2023-32755

e-Excellence U-Office Force generates an error message in webiste service. An unauthenticated remote attacker can obtain partial sensitive system information from error message by sending a crafted command...

5.3CVSS5AI score0.00636EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/08/25 6:48 a.m.•18 views

CVE-2023-32755 e-Excellence U-Office Force - Error Message Leakage

e-Excellence U-Office Force generates an error message in webiste service. An unauthenticated remote attacker can obtain partial sensitive system information from error message by sending a crafted command...

5.3CVSS6.5AI score0.00636EPSS
SaveExploits0References1
CVE
CVE
•added 2023/08/25 6:48 a.m.•58 views

CVE-2023-32755

CVE-2023-32755 affects e-Excellence U-Office Force. The web service may reveal partial sensitive system information via crafted commands in error messages; no concrete patch/version is provided in the sources. Monitor for updates and advisories from multiple vendors.

5.3CVSS5AI score0.00636EPSS
SaveExploits0References1Affected Software1
Circl
Circl
•added 2021/07/14 12:19 a.m.•18 views

CVE-2021-32755

creationtimestamp| type| source ---|---|--- 2021-07-14 00:19:33+00:00| seen| https://t.me/cibsecurity/26129...

5.4CVSS4.7AI score0.00314EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2021/07/13 8:55 p.m.•41 views

CVE-2021-32755 Certificate pinning is not enforced on the web socket connection

Wire is a collaboration platform. wire-ios-transport handles authentication of requests, network failures, and retries for the iOS implementation of Wire. In the 3.82 version of the iOS application, a new web socket implementation was introduced for users running iOS 13 or higher. This new...

5.4CVSS5.7AI score0.00314EPSS
SaveExploits0References1
CVE
CVE
•added 2021/07/13 8:55 p.m.•81 views

CVE-2021-32755

CVE-2021-32755 affects Wire’s iOS transport (wire-ios-transport) introduced in the 3.82 iOS app update for iOS 13+, where the new WebSocket implementation does not enforce certificate pinning. The issue is that certificate pinning is enforced starting with version 3.84, meaning versions prior to ...

5.4CVSS4.6AI score0.00314EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder