Lucene search
+L

20 matches found

Circl
Circl
added 2026/03/15 9:44 a.m.24 views

CVE-2026-32755

creationtimestamp| type| source ---|---|--- 2026-03-15 09:44:12+00:00| published-proof-of-concept| https://github.com/Admidio/admidio/security/advisories/GHSA-h8gr-qwr6-m9gx...

5.7CVSS5.8AI score0.00149EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 12:52 a.m.5 views

CVE-2022-32755

IBM Security Directory Server 6.4.0 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 228505...

9.1CVSS6.5AI score0.00714EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:46 p.m.17 views

CVE-2021-32755

Wire is a collaboration platform. wire-ios-transport handles authentication of requests, network failures, and retries for the iOS implementation of Wire. In the 3.82 version of the iOS application, a new web socket implementation was introduced for users running iOS 13 or higher. This new...

5.4CVSS6.9AI score0.00314EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/04/12 12:8 p.m.40 views

CVE-2025-32755

In jenkins/ssh-slave Docker images based on Debian, SSH host keys are generated on image creation for images based on Debian, causing all containers based on images of the same version use the same SSH host keys, allowing attackers able to insert themselves into the network path between the SSH...

9.1CVSS6.9AI score0.00466EPSS
Exploits0References1
NVD
NVD
added 2025/04/10 12:15 p.m.50 views

CVE-2025-32755

In jenkins/ssh-slave Docker images based on Debian, SSH host keys are generated on image creation for images based on Debian, causing all containers based on images of the same version use the same SSH host keys, allowing attackers able to insert themselves into the network path between the SSH...

9.1CVSS0.00466EPSS
Exploits0References1
Circl
Circl
added 2025/04/10 11:49 a.m.22 views

CVE-2025-32755

creationtimestamp| type| source ---|---|--- 2025-04-10 11:49:12+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11221 2025-04-10 13:50:05+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114313986374409007 2025-04-10 15:21:41+00:00| seen| https://t.me/cvedetector/22648 2025-04-10...

9.1CVSS7.7AI score0.00466EPSS
Exploits0References6
CVE
CVE
added 2025/04/10 11:21 a.m.101 views

CVE-2025-32755

CVE-2025-32755 affects Jenkins’ ssh-slave Docker images built on Debian. In these images, SSH host keys are generated at image creation, causing all containers derived from the same image version to share identical host keys. This enables an attacker who can position themselves in the network pat...

9.1CVSS6.9AI score0.00466EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2025/04/10 11:21 a.m.41 views

CVE-2025-32755

In jenkins/ssh-slave Docker images based on Debian, SSH host keys are generated on image creation for images based on Debian, causing all containers based on images of the same version use the same SSH host keys, allowing attackers able to insert themselves into the network path between the SSH...

0.00466EPSS
Exploits0References1
AlpineLinux
AlpineLinux
added 2025/04/10 11:21 a.m.7 views

CVE-2025-32755

In jenkins/ssh-slave Docker images based on Debian, SSH host keys are generated on image creation for images based on Debian, causing all containers based on images of the same version use the same SSH host keys, allowing attackers able to insert themselves into the network path between the SSH...

9.1CVSS7.2AI score0.00466EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/07/02 1:38 p.m.20 views

CVE-2024-32755 American Dynamics Illustra Essentials Gen 4 - Log Filter Input Validation

Under certain circumstances the web interface will accept characters unrelated to the expected input...

9.1CVSS6.9AI score0.00512EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/07/02 1:38 p.m.29 views

CVE-2024-32755 American Dynamics Illustra Essentials Gen 4 - Log Filter Input Validation

Under certain circumstances the web interface will accept characters unrelated to the expected input...

9.1CVSS0.00512EPSS
Exploits0References2
Circl
Circl
added 2023/10/14 6:30 p.m.6 views

CVE-2022-32755

creationtimestamp| type| source ---|---|--- 2023-10-14 18:30:03+00:00| seen| https://t.me/cibsecurity/72287...

9.1CVSS8.6AI score0.00714EPSS
Exploits0References1
CVE
CVE
added 2023/10/14 2:25 p.m.87 views

CVE-2022-32755

CVE-2022-32755 affects IBM Security Directory Server 6.4.0. It is described as an XML External Entity (XXE) injection when processing XML data, enabling a remote attacker to expose sensitive information or cause memory/resource usage. Remediation referenced in the IBM bulletin: apply IBM Security...

9.1CVSS6.4AI score0.00714EPSS
Exploits0References2Affected Software3
Circl
Circl
added 2023/08/25 12:16 p.m.7 views

CVE-2023-32755

creationtimestamp| type| source ---|---|--- 2023-08-25 12:16:58+00:00| seen| https://t.me/cibsecurity/69172...

5.3CVSS5.5AI score0.00479EPSS
Exploits0References1
NVD
NVD
added 2023/08/25 7:15 a.m.16 views

CVE-2023-32755

e-Excellence U-Office Force generates an error message in webiste service. An unauthenticated remote attacker can obtain partial sensitive system information from error message by sending a crafted command...

5.3CVSS5AI score0.00479EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/08/25 6:48 a.m.15 views

CVE-2023-32755 e-Excellence U-Office Force - Error Message Leakage

e-Excellence U-Office Force generates an error message in webiste service. An unauthenticated remote attacker can obtain partial sensitive system information from error message by sending a crafted command...

5.3CVSS6.5AI score0.00479EPSS
Exploits0References1
CVE
CVE
added 2023/08/25 6:48 a.m.45 views

CVE-2023-32755

CVE-2023-32755 affects e-Excellence U-Office Force. The web service may reveal partial sensitive system information via crafted commands in error messages; no concrete patch/version is provided in the sources. Monitor for updates and advisories from multiple vendors.

5.3CVSS5AI score0.00479EPSS
Exploits0References1Affected Software1
Circl
Circl
added 2021/07/14 12:19 a.m.9 views

CVE-2021-32755

creationtimestamp| type| source ---|---|--- 2021-07-14 00:19:33+00:00| seen| https://t.me/cibsecurity/26129...

5.4CVSS4.7AI score0.00314EPSS
Exploits0References1
Cvelist
Cvelist
added 2021/07/13 8:55 p.m.25 views

CVE-2021-32755 Certificate pinning is not enforced on the web socket connection

Wire is a collaboration platform. wire-ios-transport handles authentication of requests, network failures, and retries for the iOS implementation of Wire. In the 3.82 version of the iOS application, a new web socket implementation was introduced for users running iOS 13 or higher. This new...

5.4CVSS5.7AI score0.00314EPSS
Exploits0References1
CVE
CVE
added 2021/07/13 8:55 p.m.69 views

CVE-2021-32755

CVE-2021-32755 affects Wire’s iOS transport (wire-ios-transport) introduced in the 3.82 iOS app update for iOS 13+, where the new WebSocket implementation does not enforce certificate pinning. The issue is that certificate pinning is enforced starting with version 3.84, meaning versions prior to ...

5.4CVSS4.6AI score0.00314EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder