13 matches found
CVE-2022-37721
PyroCMS 3.9 is vulnerable to a stored Cross Site Scripting XSS when a low privileged user such as an author, injects a crafted html and javascript payload in a blog post, leading to full admin account takeover or privilege escalation...
EUVD-2024-37721
Malicious code in bioql PyPI...
MAL-2025-37721 Malicious code in understory-editor (npm)
The package understory-editor was found to contain malicious code...
CVE-2021-37721
A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software versions: Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.4, 8.6.0.9, 8.5.0.13, 8.3.0.16, 6.5.4.20, 6.4.4.25. Aruba has released patches for Aruba SD-WAN Software and...
CVE-2023-37721
creationtimestamp| type| source ---|---|--- 2023-07-14 07:12:02+00:00| seen| https://t.me/cibsecurity/66715...
CVE-2023-37721
Tenda F1202 V1.0BRV1.2.0.20408, FH1202V1.2.0.19EN were discovered to contain a stack overflow in the page parameter in the function fromSafeMacFilter...
CVE-2023-37721
The CVE-2023-37721 entry relates to a stack overflow in the page parameter of the fromSafeMacFilter() function in Tenda F1202/FH1202 devices. Affected products and versions are Tenda F1202 V1.0BR_V1.2.0.20(408) and Tenda FH1202_V1.2.0.19_EN. The root cause is a stack overflow triggered by the pag...
Siemens SCALANCE Command Injection (CVE-2021-37721)
A remote arbitrary command execution vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software versions: Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.4, 8.6.0.9, 8.5.0.13, 8.3.0.16, 6.5.4.20, 6.4.4.25. Aruba has released patches for Aruba SD-WAN Software and...
CVE-2022-37721
creationtimestamp| type| source ---|---|--- 2022-11-25 20:15:50+00:00| seen| https://t.me/cibsecurity/53524...
CVE-2022-37721
PyroCMS 3.9 is vulnerable to a stored Cross Site Scripting XSS when a low privileged user such as an author, injects a crafted html and javascript payload in a blog post, leading to full admin account takeover or privilege escalation...
CVE-2022-37721
PyroCMS 3.9 is vulnerable to a stored Cross-Site Scripting (XSS) attack in blog posts. A low-privileged user (e.g., author) can inject crafted HTML/JavaScript, which may execute in other users’ browsers and lead to admin account takeover or privilege escalation. The CVSS 3.1 base score is 9.0 (CR...
CVE-2021-37721
creationtimestamp| type| source ---|---|--- 2021-09-07 16:17:23+00:00| seen| https://t.me/cibsecurity/28338...
CVE-2021-37721
CVE-2021-37721 is a remote arbitrary command execution vulnerability affecting Aruba SD-WAN Software and Gateways and ArubaOS. Affected versions include Aruba SD-WAN Software prior to 8.6.0.4-2.2.0.4 and prior to 8.7.1.4, 8.6.0.9, 8.5.0.13, 8.3.0.16, 6.5.4.20, 6.4.4.25; Aruba has released patches...