org.scala-sbt:sbt (>=0.99.2, <=1.0.0-m4), org.scala-sbt:scripted-plugin_2.10 (>=0.99.2, <=1.0.0-m4) +1 more potentially affected by CVE-2026-32948 via org.scala-sbt:main_2.11 (>=0.99.2, <=1.0.0-m4)

org.scala-sbt:main2.11 MAVEN version =0.99.2, =0.99.2, =0.99.2, =0.99.2, =1.0.0-m4 Source cves: CVE-2026-32948 Source advisory: SNYK:JAVA-ORGSCALASBT-15763414...

CVE-2026-32948

creationtimestamp| type| source ---|---|--- 2026-03-24 01:12:51+00:00| seen| https://bsky.app/profile/eed3si9n.com/post/3mhrfgtnjbs24 2026-03-24 16:04:12+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-x4ff-q6h8-v7gw 2026-03-26 21:32:41+00:00| published-proof-of-concept|...

CVE-2021-32948

An out-of-bounds write issue exists in the DWG file-reading procedure in the Drawings SDK All versions prior to 2022.4 resulting from the lack of proper validation of user-supplied data. This can result in a write past the end of an allocated buffer and allow attackers to cause a denial-of-servic...

CVE-2025-32948

creationtimestamp| type| source ---|---|--- 2025-04-15 19:57:10+00:00| seen| https://t.me/cvedetector/22970...

CVE-2025-32948

The vulnerability allows any attacker to cause the PeerTube server to stop functioning, or in special cases send requests to arbitrary URLs Blind SSRF. Attackers can send ActivityPub activities to PeerTube's "inbox" endpoint. By abusing the "Create Activity" functionality, it is possible to creat...

CVE-2025-32948 PeerTube ActivityPub Playlist Creation Blind SSRF and DoS

The vulnerability allows any attacker to cause the PeerTube server to stop functioning, or in special cases send requests to arbitrary URLs Blind SSRF. Attackers can send ActivityPub activities to PeerTube's "inbox" endpoint. By abusing the "Create Activity" functionality, it is possible to creat...

CVE-2025-32948 PeerTube ActivityPub Playlist Creation Blind SSRF and DoS

The vulnerability allows any attacker to cause the PeerTube server to stop functioning, or in special cases send requests to arbitrary URLs Blind SSRF. Attackers can send ActivityPub activities to PeerTube's "inbox" endpoint. By abusing the "Create Activity" functionality, it is possible to creat...

CVE-2024-32948

CVE-2024-32948 corresponds to a Missing Authorization vulnerability in ARMember (Repute Infosystems) affecting ARMember up to version 4.0.28. The vulnerability is categorized as network-exploitable with no user interaction, enabling an attacker with no privileges to access or modify restricted re...

WordPress ARMember Plugin <= 4.0.28 is vulnerable to Broken Access Control

Software ARMember Type Plugin Vulnerable versions = 4.0.28 Fixed in 4.0.29 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-32948 Patch priority High CVSS severity High 9.1 Developer Claim ownership PSID c0512654aaef Credits luc Required privilege...

CVE-2022-32948

CVE-2022-32948 describes an out-of-bounds read that could allow an app to execute arbitrary code with kernel privileges. The vulnerability is associated with Apple’s Neural Engine and is fixed in Apple software updates: iOS 15.6, iPadOS 15.6, and macOS Monterey 12.5. The initial entry indicates t...

CVE-2022-32948

creationtimestamp| type| source ---|---|--- 2022-11-11 21:17:44+00:00| published-proof-of-concept| https://t.me/proxybar/1170 2022-11-12 12:52:39+00:00| published-proof-of-concept| https://t.me/breachdetector/140722 2022-11-12 14:57:45+00:00| published-proof-of-concept|...

About the security content of iOS 15.6 and iPadOS 15.6

About the security content of iOS 15.6 and iPadOS 15.6 This document describes the security content of iOS 15.6 and iPadOS 15.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...

CVE-2021-32948

CVE-2021-32948 describes an out-of-bounds write in the DWG file-reading procedure of the Open Design Alliance Drawings SDK (prior to 2022.4), caused by insufficient validation of user-supplied data. This can write past the end of an allocated buffer and may lead to denial of service or code execu...