19 matches found
BELL-CVE-2025-38723
Bulletin has no description...
CVE-2025-38723
In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Fix jump offset calculation in tailcall The extra pass of bpfintjitcompile skips JIT context initialization which essentially skips offset calculation leaving outoffset = -1, so the jmpoffset in emitbpftailcall is...
MAL-2025-38723 Malicious code in vxyqhpbmkljiasgz (npm)
The package vxyqhpbmkljiasgz was found to contain malicious code...
CVE-2024-38723
Server-Side Request Forgery SSRF vulnerability in Bernhard Kux JSON Content Importer.This issue affects JSON Content Importer: from n/a through 1.5.6...
CVE-2024-38723
creationtimestamp| type| source ---|---|--- 2024-07-22 13:38:39+00:00| seen| https://t.me/cvedetector/1434...
CVE-2024-38723
Server-Side Request Forgery SSRF vulnerability in Bernhard Kux JSON Content Importer.This issue affects JSON Content Importer: from n/a through 1.5.6...
CVE-2024-38723
CVE-2024-38723 is a Server-Side Request Forgery (SSRF) in Bernhard Kux JSON Content Importer affecting WordPress JSON Content Importer
WordPress JSON Content Importer Plugin <= 1.5.6 is vulnerable to Server Side Request Forgery (SSRF)
Software JSON Content Importer Type Plugin Vulnerable versions = 1.5.6 Fixed in 1.6.0 OWASP Top 10 A10: Server-Side Request Forgery SSRF Classification Server Side Request Forgery SSRF CVE CVE-2024-38723 Patch priority Low CVSS severity Low 6.4 Developer Claim ownership PSID f916d2cf2c68 Credits...
Security Bulletin: IBM Maximo Manage application in IBM Maximo Application Suite is vulnerable to stored cross-site scripting (CVE-2023-38723)
Summary IBM Maximo Manage application in IBM Maximo Application Suite is vulnerable to stored cross-site scripting. Vulnerability Details CVEID:CVE-2023-38723 DESCRIPTION: IBM Maximo Application Suite is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary...
CVE-2023-38723
creationtimestamp| type| source ---|---|--- 2024-03-13 11:41:18+00:00| seen| https://t.me/ctinow/206592 2024-03-13 11:46:23+00:00| seen| https://t.me/ctinow/206598...
CVE-2023-38723
IBM Maximo Application Suite (CVE-2023-38723) is reported as a stored cross-site scripting vulnerability affecting the Maximo Manage component. The IBM Security Bulletin lists affected MAS versions: MAS Manage 8.10.0–8.6.0 and MAS Manage 8.11.0–8.6.0, with fixed releases recommended as MAS 8.10.7...
CVE-2022-38723
Gravitee API Management before 3.15.13 allows path traversal through HTML injection...
CVE-2022-38723
Gravitee API Management before 3.15.13 allows path traversal through HTML injection...
CVE-2022-38723
CVE-2022-38723 affects Gravitee API Management prior to version 3.15.13, where an HTML-injection flaw enables path traversal. Multiple connected sources confirm the vulnerability exists in Gravitee API Management before 3.15.13 and describe the underlying issue as HTML injection that allows path ...
CVE-2021-38723
creationtimestamp| type| source ---|---|--- 2021-09-09 18:29:37+00:00| seen| Telegram/vTbRMP48Sy9zUMBiSQjFsqTDck8wGjflYwfjCxd5taZVorE...
CVE-2021-38723
FUEL CMS 1.5.0 allows SQL Injection via parameter 'col' in /fuel/index.php/fuel/pages/items...
CVE-2021-38723
FUEL CMS 1.5.0 allows SQL Injection via parameter 'col' in /fuel/index.php/fuel/pages/items...
CVE-2021-38723
CVE-2021-38723 affects FUEL CMS 1.5.0 with a SQL injection vulnerability exposed through the col parameter in /fuel/index.php/fuel/pages/items. The connected sources confirm the affected software and the injection vector, but do not provide exploit details, in-the-wild usage, or a confirmed remed...
creativity-online.com XSS vulnerability
Vulnerable URL: http://creativity-online.com/search?searchphrase=999%22%3E%3Csvg%2Fonload%3Dprompt%28%2FXSSPOSED%2F%29%3E=endeca Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 09:27 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...