Lucene search
K

51 matches found

OSV
OSV
added 2 days ago4 views

ROOT-APP-NPM-CVE-2022-37601 CVE-2022-37601 in @rootio/loader-utils - Patched by Root

Root has patched CVE-2022-37601 in the @rootio/loader-utils package for Root:npm. Multiple fixed versions available...

9.8CVSS5.8AI score0.18844EPSS
Exploits1
Circl
Circl
added 2026/04/14 5:52 p.m.0 views

CVE-2026-37601

creationtimestamp| type| source ---|---|--- 2026-04-14 17:52:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjhx44uxzz2t...

2.7CVSS5.7AI score0.0003EPSS
Exploits0References1
NVD
NVD
added 2026/04/14 3:16 p.m.0 views

CVE-2026-37601

SourceCodester Patient Appointment Scheduler System v1.0 is vulnerable to SQL Injection in the file /scheduler/admin/appointments/manageappointment.php...

2.7CVSS0.0003EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/14 12:0 a.m.0 views

CVE-2026-37601

SourceCodester Patient Appointment Scheduler System v1.0 is vulnerable to SQL Injection in the file /scheduler/admin/appointments/manageappointment.php...

5.9AI score0.0003EPSS
Exploits0References2
Wolfi
Wolfi
added 2026/01/07 1:51 a.m.2 views

CVE-2022-37601 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu...

9.8CVSS7AI score0.18844EPSS
Exploits1
Chainguard
Chainguard
added 2026/01/07 1:30 a.m.2 views

CVE-2022-37601 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu...

9.8CVSS7AI score0.18844EPSS
Exploits1
Circl
Circl
added 2025/12/27 8:39 p.m.2 views

CVE-2022-37601

creationtimestamp| type| source ---|---|--- 2025-12-27 20:39:07+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3mayo25zzxk2s...

9.8CVSS5.8AI score0.18844EPSS
Exploits1References1
EUVD
EUVD
added 2025/11/04 4:27 a.m.2 views

EUVD-2025-37601

The Visit Counter plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing or incorrect nonce validation on the widgets.php page. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged...

6.1CVSS5.3AI score0.00013EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2021-37601

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - muc.lib.lua in Prosody 0.11.0 through 0.11.9 allows remote attackers to obtain sensitive information list of admins, members, owners, and banned entities of a...

7.5CVSS7.2AI score0.00406EPSS
Exploits1References2
OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-37601 Malicious code in ui_assets (npm)

The package uiassets was found to contain malicious code...

7.2AI score
Exploits0
IBM Security Bulletins
IBM Security Bulletins
added 2025/06/25 4:30 p.m.3 views

Security Bulletin: IBM Storage Fusion Data Foundation is affected DOS caused by specially crafted regex or prototype pollution flaw (CVE-2022-37599, CVE-2022-37603, CVE-2022-37601)

Summary IBM Storage Fusion Data Foundation is used by IBM Storage Fusion Data Foundation. The application server takes input and crafted regex can cause the exploit to Denial of service. CVE-2022-37599, CVE-2022-37603, CVE-2022-37601. Vulnerability Details CVEID:CVE-2022-37599 DESCRIPTION:...

9.8CVSS7.9AI score0.18844EPSS
Exploits2Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/06/20 6:48 a.m.2 views

Security Bulletin: IBM Cloud Pak for Data is vulnerable to to prototype pollution due to webpack loader-utils ( CVE-2022-37601 )

Summary Potential vulnerabilities in webpack loader-utils module has been identified that may affect IBM Cloud Pak for Data. Refer to details for additional information. Vulnerability Details CVEID:CVE-2022-37601 DESCRIPTION: Prototype pollution vulnerability in function parseQuery in parseQuery....

9.8CVSS9AI score0.18844EPSS
Exploits1Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/23 4:4 a.m.5 views

CVE-2023-37601

Office Suite Premium v10.9.1.42602 was discovered to contain a local file inclusion LFI vulnerability via the component /etc/hosts...

7.5CVSS7.2AI score0.00142EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2022-37601

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Prototype pollution vulnerability in function parseQuery in parseQuery.js in webpack loader-utils via the name variable in parseQuery.js. This affects all...

9.8CVSS7.2AI score0.18844EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2025/02/15 12:24 a.m.3 views

CVE-2024-37601

An issue was discovered in Mercedes Benz NTG New Telematics Generation 6. A possible heap buffer overflow exists in the user data import/export function of NTG 6 head units. To perform this attack, local access to the USB interface of the car is needed. With prepared data, an attacker can cause t...

4.6CVSS7AI score0.00238EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/02/13 12:0 a.m.6 views

CVE-2024-37601

An issue was discovered in Mercedes Benz NTG New Telematics Generation 6. A possible heap buffer overflow exists in the user data import/export function of NTG 6 head units. To perform this attack, local access to the USB interface of the car is needed. With prepared data, an attacker can cause t...

0.00238EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/02/13 12:0 a.m.3 views

CVE-2024-37601

An issue was discovered in Mercedes Benz NTG New Telematics Generation 6. A possible heap buffer overflow exists in the user data import/export function of NTG 6 head units. To perform this attack, local access to the USB interface of the car is needed. With prepared data, an attacker can cause t...

7.1AI score0.00238EPSS
Exploits0References1
CVE
CVE
added 2025/02/13 12:0 a.m.47 views

CVE-2024-37601

CVE-2024-37601 : Mercedes-Benz NTG (New Telematics Generation) 6 contains a heap buffer overflow in the UserData/UD2 decoding path used for import/export via USB. The vulnerability requires local USB access to trigger, and exploitation can crash the UserData service, with the system subsequently ...

4.6CVSS7.1AI score0.00238EPSS
Exploits0References1Affected Software1
Circl
Circl
added 2025/01/17 1:35 p.m.3 views

CVE-2024-37601

creationtimestamp| type| source ---|---|--- 2025-01-17 13:35:06+00:00| seen| https://poliverso.org/objects/0477a01e-45ff02b8-52616ac586aa8672 2025-01-20 18:30:05+00:00| seen| https://t.me/truesecator/6638 2025-02-13 23:15:47+00:00| seen|...

4.6CVSS7.1AI score0.00238EPSS
Exploits0References10
IBM Security Bulletins
IBM Security Bulletins
added 2024/07/24 5:15 p.m.39 views

Security Bulletin: IBM QRadar Data Synchronization App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. IBM QRadar Data Synchronization App for IBM QRadar SIEM has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2022-37601 DESCRIPTION: webpack...

9.8CVSS9AI score0.18844EPSS
Exploits9Affected Software1
Rows per page
Query Builder