15 matches found
CVE-2020-37165 AbsoluteTelnet 11.12 - "license name" Denial of Service
AbsoluteTelnet 11.12 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an oversized license name. Attackers can generate a 2500-character payload and paste it into the license name field to trigger an application crash...
CVE-2020-37165
AbsoluteTelnet 11.12 is affected by a local-denial-of-service vulnerability in the license-name field. The issue is triggered by supplying an oversized 2500-character license name, which crashes the application. The PT-2026-6831 advisory confirms the vulnerability and notes there is no publicly d...
CVE-2025-37165
A vulnerability in the router mode configuration of HPE Instant On Access Points exposed certain network configuration details to unintended interfaces. A malicious actor could gain knowledge of internal network configuration details through inspecting impacted packets...
CVE-2025-37165
creationtimestamp| type| source ---|---|--- 2026-01-13 18:09:05+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115889127099102508...
CVE-2025-37165 Exposure of VLAN information in unintended network interfaces
A vulnerability in the router mode configuration of HPE Instant On Access Points exposed certain network configuration details to unintended interfaces. A malicious actor could gain knowledge of internal network configuration details through inspecting impacted packets...
EUVD-2025-37165
Malicious code in epic-core npm...
CVE-2023-37165
Millhouse-Project v1.414 was discovered to contain a remote code execution RCE vulnerability via the component /addpostsql.php...
CVE-2024-37165
creationtimestamp| type| source ---|---|--- 2024-07-30 18:15:11+00:00| seen| https://t.me/cvedetector/2042...
CVE-2024-37165 Discourse has an XSS via Onebox system
Discourse is an open source discussion platform. Prior to 3.2.3 and 3.3.0.beta3, improperly sanitized Onebox data could lead to an XSS vulnerability in some situations. This vulnerability only affects Discourse instances which have disabled the default Content Security Policy. This vulnerability ...
CVE-2023-37165
Millhouse-Project v1.414 was discovered to contain a remote code execution RCE vulnerability via the component /addpostsql.php...
CVE-2023-37165
CVE-2023-37165 affects Millhouse-Project v1.414 with a remote code execution (RCE) via the /add_post_sql.php component. The CVSS v3.1 base score is 9.8 (CRITICAL) with network attack vector, low complexity, no privileges required, and high impact to confidentiality, integrity, and availability. M...
CVE-2023-37165
Millhouse-Project v1.414 was discovered to contain a remote code execution RCE vulnerability via the component /addpostsql.php...
Swisslog Healthcare Translogic PTS
1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Swisslog Healthcare Equipment: Translogic PTS Pneumatic Tube Systems Vulnerabilities: Use of Hard-coded Password, Execution with Unnecessary Privileges, Improper Authentication, Download of Code without...
CVE-2021-37165
A buffer overflow issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. When a message is sent to the HMI TCP socket, it is forwarded to the hmiProcessMsg function through the pendingQ, and may lead t...
CVE-2021-37165
Technical details about CVE-2021-37165 are not publicly available in the provided Connected documents. The initial description notes a buffer overflow enabling remote code execution in Nexus Panel software prior to 7.2.5.7, but no confirmed exploit or remediation is documented here.