24 matches found
ROOT-OS-UBUNTU-2404-CVE-2025-38728 CVE-2025-38728 in linux - Patched by Root
Root has patched CVE-2025-38728 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2025-38728 CVE-2025-38728 in linux - Patched by Root
Root has patched CVE-2025-38728 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
CVE-2026-38728
An issue in Nodemailer smtpserver before v.3.18.3 allows a remote attacker to cause a denial of service via the SMTPStream.write, lib/smtp-stream.js components...
CVE-2026-38728
creationtimestamp| type| source ---|---|--- 2026-05-16 18:00:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlyghafqts2w...
@cedarjs/studio (>=1.0.0, <=2.0.1), @donswayo/wildduckiu (>=1.30.3, <=1.30.6) +65 more potentially affected by CVE-2026-38728 via smtp-server (>=3.0.1, <=3.18.2)
smtp-server NPM version =3.0.1, =1.0.0, =1.30.3, =1.40.10, =8.0.1, =7.0.0, =1.1.0, =5.8.38, =5.8.40 and more Source cves: CVE-2026-38728 Source advisory: OSV:GHSA-FV2F-RW9F-V9CM...
@cedarjs/studio (>=1.0.0, <=2.0.1), @donswayo/wildduckiu (>=1.30.3, <=1.30.6) +65 more potentially affected by CVE-2026-38728 via smtp-server (>=3.0.1, <=3.18.2)
smtp-server NPM version =3.0.1, =1.0.0, =1.30.3, =1.40.10, =8.0.1, =7.0.0, =1.1.0, =5.8.38, =5.8.40 and more Source cves: CVE-2026-38728 Source advisory: SNYK:JS-SMTPSERVER-17705947...
CVE-2026-38728
An issue in Nodemailer smtpserver before v.3.18.3 allows a remote attacker to cause a denial of service via the SMTPStream.write, lib/smtp-stream.js components...
SUSE-SU-2026:20845-1 Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-53817: crypto: lib/mpi - avoid null pointer deref in mpicmpui bsc1254992. - CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm...
SUSE: Security Advisory (SUSE-SU-2026:20015-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
BELL-CVE-2025-38728
Bulletin has no description...
AZL-73845 CVE-2025-38728 affecting package kernel 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: smb3: fix for slab out of bounds on mount to ksmbd With KASAN enabled, it is possible to get a slab out of bounds during mount to ksmbd due to missing check in parseserverinterfaces see below: BUG: KASAN: slab-out-of-bounds in...
CVE-2025-38728
In the Linux kernel, the following vulnerability has been resolved: smb3: fix for slab out of bounds on mount to ksmbd With KASAN enabled, it is possible to get a slab out of bounds during mount to ksmbd due to missing check in parseserverinterfaces see below: BUG: KASAN: slab-out-of-bounds in...
CVE-2021-38728
SEMCMS SHOP v 1.1 is vulnerable to Cross Site Scripting XSS via AntMCoup.php...
CVE-2024-38728
creationtimestamp| type| source ---|---|--- 2024-07-22 13:38:40+00:00| seen| https://t.me/cvedetector/1435...
CVE-2024-38728
Server-Side Request Forgery SSRF vulnerability in Seraphinite Solutions Seraphinite Post .DOCX Source.This issue affects Seraphinite Post .DOCX Source: from n/a through 2.16.9...
CVE-2024-38728 WordPress Seraphinite Post .DOCX Source plugin <= 2.16.9 - Server Side Request Forgery (SSRF) vulnerability
Server-Side Request Forgery SSRF vulnerability in Seraphinite Solutions Seraphinite Post .DOCX Source.This issue affects Seraphinite Post .DOCX Source: from n/a through 2.16.9...
CVE-2024-38728
The CVE-2024-38728 entry concerns a Server-Side Request Forgery (SSRF) vulnerability in the Seraphinite Post .DOCX Source WordPress plugin (Seraphinite Post .DOCX Source). Affected versions are listed as n/a through 2.16.9. Public references indicate this is an SSRF issue where an attacker could ...
WordPress Seraphinite Post .DOCX Source Plugin <= 2.16.9 is vulnerable to Server Side Request Forgery (SSRF)
Software Seraphinite Post .DOCX Source Type Plugin Vulnerable versions = 2.16.9 Fixed in 2.16.10 OWASP Top 10 A10: Server-Side Request Forgery SSRF Classification Server Side Request Forgery SSRF CVE CVE-2024-38728 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID...
Security Bulletin: IBM® Db2® is vulnerable to denial of service with a specially crafted XML query statement (CVE-2023-38728)
Summary IBM® Db2® is vulnerable to denial of service with a specially crafted XML query statement. Vulnerability Details CVEID:CVE-2023-38728 DESCRIPTION: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server is vulnerable to denial of service with a specially crafted XML query statemen...