72 matches found
Avaya Aura Device Services - OS Command Injection
An OS command injection vulnerability was found in the Avaya Aura Device Services Web application which could allow remote code execution as the Web server user via a malicious uploaded file. This issue affects Avaya Aura Device Services version 8.1.4.0 and earlier. id: CVE-2023-3722 info: name:...
CVE-2026-3722
creationtimestamp| type| source ---|---|--- 2026-06-02 08:58:16+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mnca3jnsiy2t 2026-06-23 07:16:26+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mowu6rf33a2z...
RHCOS 4 : OpenShift Container Platform 4.17.0 (RHSA-2024:3722)
The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:3722 advisory. - go-retryablehttp: url might write sensitive information to log file CVE-2024-6104 - golang: archive/zip: Incorrect handling of...
SUSE: Security Advisory (SUSE-SU-2025:3722-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLED15 / SLES15 Security Update : protobuf (SUSE-SU-2025:3722-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:3722-1 advisory. - CVE-2025-4565: parsing of untrusted Protocol Buffers data containing an arbitrary number of recursive groups or...
EUVD-2005-3720
Malware in sbrugna...
CVE-2025-3722
creationtimestamp| type| source ---|---|--- 2025-06-26 11:51:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19589 2025-06-26 12:49:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsj5z7tkcj2r...
CVE-2024-3722
The Swift Performance Lite plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the ajaxhandler function in all versions up to, and including, 2.3.6.18. This makes it possible for authenticated attackers, with subscriber-level access and above, to retriev...
CVE-2011-3722
Coppermine Photo Gallery CPG 1.5.12 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by include/inspekt.php and certain other files...
CVE-2023-3722
creationtimestamp| type| source ---|---|--- 2024-11-19 19:43:20+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/9091 2025-06-12 21:02:26+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lrgszikoaa24 2026-08-10 11:00:29+00:00| exploited|...
Exploit for Unrestricted Upload of File with Dangerous Type in Avaya Aura_Device_Services
CVE-2023-3722 Python POC for CVE-2023-3722 Avaya Aura Device S...
CVE-2024-3722
The CVE-2024-3722 entry concerns the Swift Performance Lite WordPress plugin. It describes an unauthorized access vulnerability caused by a missing capability check in ajax_handler(), affecting all versions up to and including 2.3.6.18. The issue can be exploited by authenticated attackers with s...
CVE-2024-3722 Swift Performance Lite <= 2.3.6.18 - Incorrect Authorization to Authenticated (Subscriber+) Settings Modification
The Swift Performance Lite plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the ajaxhandler function in all versions up to, and including, 2.3.6.18. This makes it possible for authenticated attackers, with subscriber-level access and above, to retriev...
WordPress Swift Performance Lite Plugin <= 2.3.6.18 is vulnerable to Broken Access Control
Software Swift Performance Lite Type Plugin Vulnerable versions = 2.3.6.18 Fixed in 2.3.6.19 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-3722 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 4365655c4219 Credits Lucio Sá Required...
openSUSE: Security Advisory for rust, rust1.72 (SUSE-SU-2023:3722-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-3722
A critical OS command injection vulnerability exists in the Avaya Aura Device Services Web application (version 8.1.4.0 and earlier ). The root cause is an unrestricted file upload feature that allows an unauthenticated attacker to upload malicious PHP files. By exploiting this, an attacker can a...
Oracle Linux 9 : openssl (ELSA-2023-3722)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-3722 advisory. - Fix possible DoS translating ASN.1 object identifiers Resolves: CVE-2023-2650 Tenable has extracted the preceding description block directly from the...
Debian: Security Advisory (DSA-1962-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE CVE-2009-3722
The handledr function in arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 2.6.31.1 does not properly verify the Current Privilege Level CPL before accessing a debug register, which allows guest OS users to cause a denial of service trap on the host OS via a crafted application...