20 matches found
CVE-2026-32755
creationtimestamp| type| source ---|---|--- 2026-03-15 09:44:12+00:00| published-proof-of-concept| https://github.com/Admidio/admidio/security/advisories/GHSA-h8gr-qwr6-m9gx...
CVE-2022-32755
IBM Security Directory Server 6.4.0 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 228505...
CVE-2021-32755
Wire is a collaboration platform. wire-ios-transport handles authentication of requests, network failures, and retries for the iOS implementation of Wire. In the 3.82 version of the iOS application, a new web socket implementation was introduced for users running iOS 13 or higher. This new...
CVE-2025-32755
In jenkins/ssh-slave Docker images based on Debian, SSH host keys are generated on image creation for images based on Debian, causing all containers based on images of the same version use the same SSH host keys, allowing attackers able to insert themselves into the network path between the SSH...
CVE-2025-32755
In jenkins/ssh-slave Docker images based on Debian, SSH host keys are generated on image creation for images based on Debian, causing all containers based on images of the same version use the same SSH host keys, allowing attackers able to insert themselves into the network path between the SSH...
CVE-2025-32755
creationtimestamp| type| source ---|---|--- 2025-04-10 11:49:12+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11221 2025-04-10 13:50:05+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114313986374409007 2025-04-10 15:21:41+00:00| seen| https://t.me/cvedetector/22648 2025-04-10...
CVE-2025-32755
CVE-2025-32755 affects Jenkins’ ssh-slave Docker images built on Debian. In these images, SSH host keys are generated at image creation, causing all containers derived from the same image version to share identical host keys. This enables an attacker who can position themselves in the network pat...
CVE-2025-32755
In jenkins/ssh-slave Docker images based on Debian, SSH host keys are generated on image creation for images based on Debian, causing all containers based on images of the same version use the same SSH host keys, allowing attackers able to insert themselves into the network path between the SSH...
CVE-2025-32755
In jenkins/ssh-slave Docker images based on Debian, SSH host keys are generated on image creation for images based on Debian, causing all containers based on images of the same version use the same SSH host keys, allowing attackers able to insert themselves into the network path between the SSH...
CVE-2024-32755 American Dynamics Illustra Essentials Gen 4 - Log Filter Input Validation
Under certain circumstances the web interface will accept characters unrelated to the expected input...
CVE-2024-32755 American Dynamics Illustra Essentials Gen 4 - Log Filter Input Validation
Under certain circumstances the web interface will accept characters unrelated to the expected input...
CVE-2022-32755
creationtimestamp| type| source ---|---|--- 2023-10-14 18:30:03+00:00| seen| https://t.me/cibsecurity/72287...
CVE-2022-32755
CVE-2022-32755 affects IBM Security Directory Server 6.4.0. It is described as an XML External Entity (XXE) injection when processing XML data, enabling a remote attacker to expose sensitive information or cause memory/resource usage. Remediation referenced in the IBM bulletin: apply IBM Security...
CVE-2023-32755
creationtimestamp| type| source ---|---|--- 2023-08-25 12:16:58+00:00| seen| https://t.me/cibsecurity/69172...
CVE-2023-32755
e-Excellence U-Office Force generates an error message in webiste service. An unauthenticated remote attacker can obtain partial sensitive system information from error message by sending a crafted command...
CVE-2023-32755 e-Excellence U-Office Force - Error Message Leakage
e-Excellence U-Office Force generates an error message in webiste service. An unauthenticated remote attacker can obtain partial sensitive system information from error message by sending a crafted command...
CVE-2023-32755
CVE-2023-32755 affects e-Excellence U-Office Force. The web service may reveal partial sensitive system information via crafted commands in error messages; no concrete patch/version is provided in the sources. Monitor for updates and advisories from multiple vendors.
CVE-2021-32755
creationtimestamp| type| source ---|---|--- 2021-07-14 00:19:33+00:00| seen| https://t.me/cibsecurity/26129...
CVE-2021-32755 Certificate pinning is not enforced on the web socket connection
Wire is a collaboration platform. wire-ios-transport handles authentication of requests, network failures, and retries for the iOS implementation of Wire. In the 3.82 version of the iOS application, a new web socket implementation was introduced for users running iOS 13 or higher. This new...
CVE-2021-32755
CVE-2021-32755 affects Wire’s iOS transport (wire-ios-transport) introduced in the 3.82 iOS app update for iOS 13+, where the new WebSocket implementation does not enforce certificate pinning. The issue is that certificate pinning is enforced starting with version 3.84, meaning versions prior to ...