79 matches found
CVE-2025-3532
creationtimestamp| type| source ---|---|--- 2025-04-13 06:52:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11556 2025-04-13 09:24:00+00:00| seen| https://t.me/cvedetector/22802 2025-04-13 10:18:05+00:00| seen|...
CVE-2025-3532
A vulnerability classified as problematic was found in YouDianCMS 9.5.21. This vulnerability affects unknown code of the file /App/Tpl/Member/Default/Order/index.html.Attackers. The manipulation of the argument OrderNumber leads to cross site scripting. The attack can be initiated remotely. The...
CVE-2025-3532 YouDianCMS index.html.Attackers cross site scripting
A vulnerability classified as problematic was found in YouDianCMS 9.5.21. This vulnerability affects unknown code of the file /App/Tpl/Member/Default/Order/index.html.Attackers. The manipulation of the argument OrderNumber leads to cross site scripting. The attack can be initiated remotely. The...
CVE-2025-3532
CVE-2025-3532 (YouDianCMS 9.5.21) : A cross-site scripting vulnerability exists in unknown code of /App/Tpl/Member/Default/Order/index.html, triggered by manipulating the OrderNumber parameter. The issue appears to allow remote exploitation and has publicly disclosed exploits. Multiple connected ...
CVE-2025-3532 YouDianCMS index.html.Attackers cross site scripting
A vulnerability classified as problematic was found in YouDianCMS 9.5.21. This vulnerability affects unknown code of the file /App/Tpl/Member/Default/Order/index.html.Attackers. The manipulation of the argument OrderNumber leads to cross site scripting. The attack can be initiated remotely. The...
Linux Distros Unpatched Vulnerability : CVE-2014-3532
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6, when running on Linux 2.6.37-rc4 or later, allows local users to cause a denial of service system-bus disconnec...
CVE-2024-3532
creationtimestamp| type| source ---|---|--- 2025-02-19 22:21:29+00:00| seen| Telegram/IWcx56qmwCs6fQyLv4DVW6uwXvyNTAbAYMW0fdDOBYDV4o...
CVE-2020-3532
creationtimestamp| type| source ---|---|--- 2024-11-18 16:00:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113504788422161700 2025-09-25 00:36:28+00:00| seen| MISP/1c5c38d6-3401-41ac-be0e-4cf361fa6f51...
CVE-2024-3532 Campcodes Complete Online Student Management System attendance_view.php cross site scripting
A vulnerability classified as problematic has been found in Campcodes Complete Online Student Management System 1.0. Affected is an unknown function of the file attendanceview.php. The manipulation of the argument FirstRecord leads to cross site scripting. It is possible to launch the attack...
CVE-2021-3532
A flaw was found in Ansible. Confidential information is disclosed in asyncfiles when the user changes the jobdir to a world-readable directory. Any confidential information in an async status file will be readable by a malicious user on that system...
CVE-2023-3532
creationtimestamp| type| source ---|---|--- 2023-07-07 07:25:56+00:00| seen| https://t.me/cibsecurity/66176...
CVE-2023-3532 Cross-site Scripting (XSS) - Stored in outline/outline
Cross-site Scripting XSS - Stored in GitHub repository outline/outline prior to 0.70.1...
CVE-2023-3532 Cross-site Scripting (XSS) - Stored in outline/outline
Cross-site Scripting XSS - Stored in GitHub repository outline/outline prior to 0.70.1...
CVE-2023-3532
CVE-2023-3532 concerns a stored XSS in Outline (outline/outline) prior to version 0.70.1. The root cause described in connected sources is improper handling of user-supplied content stored for display, enabling injection of malicious scripts when documents or embeds are viewed. Specific attack ve...
FreeBSD : py-ansible -- data leak vulnerability (f418cd50-561a-49a2-a133-965d03ede72a)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the f418cd50-561a-49a2-a133-965d03ede72a advisory. - A flaw was found in Ansible where the secret information present in asyncfiles are getting disclosed...
SUSE CVE-2014-3532
dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6, when running on Linux 2.6.37-rc4 or later, allows local users to cause a denial of service system-bus disconnect of other services or applications by sending a message containing a file descriptor, then exceeding the maximum recursion depth before...
CVE-2022-3532
creationtimestamp| type| source ---|---|--- 2022-10-17 12:12:59+00:00| seen| https://t.me/cibsecurity/51550...
Mageia: Security Advisory (MGASA-2014-0294)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-3532
Rejected reason: This CVE is marked as INVALID and not a bug...
CVE-2021-3532
CVE-2021-3532 entry is corroborated by connected documents indicating a data leak in Ansible where secret information in async_files can be disclosed when the jobdir is changed to a world-readable directory. The vulnerability affects Ansible Tower 3.7 and Ansible Automation Platform 1.2, and is d...