Avaya Aura Device Services - OS Command Injection

An OS command injection vulnerability was found in the Avaya Aura Device Services Web application which could allow remote code execution as the Web server user via a malicious uploaded file. This issue affects Avaya Aura Device Services version 8.1.4.0 and earlier. id: CVE-2023-3722 info: name:...

CVE-2026-3722

creationtimestamp| type| source ---|---|--- 2026-06-02 08:58:16+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mnca3jnsiy2t 2026-06-23 07:16:26+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mowu6rf33a2z...

RHCOS 4 : OpenShift Container Platform 4.17.0 (RHSA-2024:3722)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:3722 advisory. - go-retryablehttp: url might write sensitive information to log file CVE-2024-6104 - golang: archive/zip: Incorrect handling of...

SUSE: Security Advisory (SUSE-SU-2025:3722-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15 / SLES15 Security Update : protobuf (SUSE-SU-2025:3722-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:3722-1 advisory. - CVE-2025-4565: parsing of untrusted Protocol Buffers data containing an arbitrary number of recursive groups or...

EUVD-2005-3720

Malware in sbrugna...

CVE-2025-3722

creationtimestamp| type| source ---|---|--- 2025-06-26 11:51:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19589 2025-06-26 12:49:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsj5z7tkcj2r...

CVE-2024-3722

The Swift Performance Lite plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the ajaxhandler function in all versions up to, and including, 2.3.6.18. This makes it possible for authenticated attackers, with subscriber-level access and above, to retriev...

CVE-2011-3722

Coppermine Photo Gallery CPG 1.5.12 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by include/inspekt.php and certain other files...

CVE-2023-3722

creationtimestamp| type| source ---|---|--- 2024-11-19 19:43:20+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/9091 2025-06-12 21:02:26+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lrgszikoaa24...

Exploit for Unrestricted Upload of File with Dangerous Type in Avaya Aura_Device_Services

CVE-2023-3722 Python POC for CVE-2023-3722 Avaya Aura Device S...

CVE-2024-3722 Swift Performance Lite <= 2.3.6.18 - Incorrect Authorization to Authenticated (Subscriber+) Settings Modification

The Swift Performance Lite plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the ajaxhandler function in all versions up to, and including, 2.3.6.18. This makes it possible for authenticated attackers, with subscriber-level access and above, to retriev...

CVE-2024-3722

The CVE-2024-3722 entry concerns the Swift Performance Lite WordPress plugin. It describes an unauthorized access vulnerability caused by a missing capability check in ajax_handler(), affecting all versions up to and including 2.3.6.18. The issue can be exploited by authenticated attackers with s...

WordPress Swift Performance Lite Plugin <= 2.3.6.18 is vulnerable to Broken Access Control

Software Swift Performance Lite Type Plugin Vulnerable versions = 2.3.6.18 Fixed in 2.3.6.19 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-3722 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 4365655c4219 Credits Lucio Sá Required...

openSUSE: Security Advisory for rust, rust1.72 (SUSE-SU-2023:3722-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-3722

Vulnerability summary (CVE-2023-3722) Avaya Aura Device Services Web, versions 8.1.4.0 and earlier, suffers an OS command injection via a malicious uploaded file, allowing remote code execution with the web server’s privileges. The issue affects the web interface and is documented as unauthentica...

Oracle Linux 9 : openssl (ELSA-2023-3722)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-3722 advisory. - Fix possible DoS translating ASN.1 object identifiers Resolves: CVE-2023-2650 Tenable has extracted the preceding description block directly from the...

Debian: Security Advisory (DSA-1962-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE CVE-2009-3722

The handledr function in arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 2.6.31.1 does not properly verify the Current Privilege Level CPL before accessing a debug register, which allows guest OS users to cause a denial of service trap on the host OS via a crafted application...

ColumnPack:ColumnPack-plugin (=1.0.3), CustomHistory:CustomHistory (>=1.1 <=1.3) +1594 more potentially affected by CVE-2016-3722 via org.jenkins-ci.main:jenkins-core (>=1.396 <=2.29)

org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =1.1, =0.0.1, =1.0, =1.0, =0.0.1, =0.1.0, =1.0, =0.9, =1.3, =1.0.5.0, =1.0.6.1 and more Source cves: CVE-2016-3722 Source advisory: OSV:GHSA-3857-XM38-JMQ2...