20 matches found
ROOT-OS-DEBIAN-12-CVE-2025-37917 CVE-2025-37917 in rootio-linux - Patched by Root
Root has patched CVE-2025-37917 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2025-37917 CVE-2025-37917 in rootio-linux - Patched by Root
Root has patched CVE-2025-37917 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
CVE-2022-37917
Vulnerabilities in the AirWave Management Platform web-based management interface exist which expose some URLs to a lack of proper access controls. These vulnerabilities could allow a remote attacker with limited privileges to gain access to sensitive information and/or change network...
EUVD-2022-37917
Malicious code in bioql PyPI...
CVE-2023-37917
KubePi is an opensource kubernetes management panel. A normal user has permission to create/update users, they can become admin by editing the isadmin value in the request. As a result any user may take administrative control of KubePi. This issue has been addressed in version 1.6.5. Users are...
BELL-CVE-2025-37917
Bulletin has no description...
CVE-2025-37917
No description is available for this CVE...
SUSE CVE-2025-37917
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll Use spinlockirqsave and spinunlockirqrestore instead of spinlock and spinunlock in mtkstaremac driver to avoid spinlock recursion occurrence that can happe...
CVE-2025-37917
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll Use spinlockirqsave and spinunlockirqrestore instead of spinlock and spinunlock in mtkstaremac driver to avoid spinlock recursion occurrence that can happe...
CVE-2022-37917
creationtimestamp| type| source ---|---|--- 2025-04-23 16:04:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13067...
CVE-2024-37917
Pexip Infinity before 35.0 has improper input validation that allows remote attackers to trigger a denial of service software abort via a crafted signalling message...
CVE-2024-37917
creationtimestamp| type| source ---|---|--- 2025-04-03 15:35:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10249...
CVE-2024-37917
Pexip Infinity before 35.0 has improper input validation that allows remote attackers to trigger a denial of service software abort via a crafted signalling message...
CVE-2023-37917 Privilege Escalation in kubepi
KubePi is an opensource kubernetes management panel. A normal user has permission to create/update users, they can become admin by editing the isadmin value in the request. As a result any user may take administrative control of KubePi. This issue has been addressed in version 1.6.5. Users are...
CVE-2023-37917
KubePi Privilege Escalation vulnerability: a normal user can elevate privileges by editing the isadmin field in requests, gaining admin control. Root cause is improper authorization in user-create/update flow. Impact is administrative access with high confidentiality/integrity/availability concer...
CVE-2023-37917 Privilege Escalation in kubepi
KubePi is an opensource kubernetes management panel. A normal user has permission to create/update users, they can become admin by editing the isadmin value in the request. As a result any user may take administrative control of KubePi. This issue has been addressed in version 1.6.5. Users are...
CVE-2023-37917
creationtimestamp| type| source ---|---|--- 2023-07-21 15:05:31+00:00| published-proof-of-concept| https://github.com/1Panel-dev/KubePi/security/advisories/GHSA-757p-vx43-fp9r...
CVE-2022-37917 Broken Access Control for some Web-based Management URLs in AirWave Management Platform
Vulnerabilities in the AirWave Management Platform web-based management interface exist which expose some URLs to a lack of proper access controls. These vulnerabilities could allow a remote attacker with limited privileges to gain access to sensitive information and/or change network...
CVE-2022-37917
CVE-2022-37917 affects Aruba AirWave Management Platform, exposing some web-based management URLs to broken access control. An attacker with limited privileges could access sensitive information or modify network configurations with higher-privilege effects. Impact is tied to AirWave versions 8.2...
CVE-2022-37917 Broken Access Control for some Web-based Management URLs in AirWave Management Platform
Vulnerabilities in the AirWave Management Platform web-based management interface exist which expose some URLs to a lack of proper access controls. These vulnerabilities could allow a remote attacker with limited privileges to gain access to sensitive information and/or change network...