Lucene search
K

48 matches found

Circl
Circl
added 2026/04/07 9:7 p.m.4 views

CVE-2026-39348

creationtimestamp| type| source ---|---|--- 2026-04-07 21:07:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miwoparzbx2t...

5.3CVSS5.9AI score0.00165EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:33 a.m.8 views

CVE-2024-39348

Download of code without integrity check vulnerability in AirPrint functionality in Synology Router Manager SRM before 1.2.5-8227-11 and 1.3.1-9346-8 allows man-in-the-middle attackers to execute arbitrary code via unspecified vectors...

7.5CVSS7.9AI score0.00266EPSS
Exploits0References1
OSV
OSV
added 2025/08/14 6:52 p.m.2 views

MAL-2025-39348 Malicious code in wisp-lightning-cin551-project (npm)

The package wisp-lightning-cin551-project was found to contain malicious code...

7.2AI score
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/21 8:23 p.m.11 views

CVE-2025-39348

Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Object Injection.This issue affects Grand Restaurant: from n/a through = 7.0...

9.8CVSS7.2AI score0.00396EPSS
Exploits0References1
OSV
OSV
added 2025/05/19 8:15 p.m.0 views

CVE-2025-39348

Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Restaurant WordPress allows Object Injection.This issue affects Grand Restaurant WordPress: from n/a through 7.0...

9.8CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2025/05/19 8:15 p.m.25 views

CVE-2025-39348

Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Object Injection.This issue affects Grand Restaurant: from n/a through = 7.0...

9.8CVSS0.00396EPSS
Exploits0References1
CVE
CVE
added 2025/05/19 7:52 p.m.38 views

CVE-2025-39348

CVE-2025-39348 affects the WordPress Grand Restaurant WordPress theme, version 7.0 and earlier. The issue is Deserialization of Untrusted Data leading to PHP Object Injection, per public records. CVSS 3.1 base score 9.8 (CRITICAL) with network attack vector, no user interaction, and high impact o...

9.8CVSS7.2AI score0.00396EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2025/05/19 7:52 p.m.26 views

CVE-2025-39348 WordPress Grand Restaurant WordPress theme <= 7.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Object Injection.This issue affects Grand Restaurant: from n/a through = 7.0...

9.8CVSS0.00396EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2022-39348

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Twisted is an event-based framework for internet applications. Started with version 0.9.4, when the host header does not match a configured host...

5.4CVSS6.2AI score0.01156EPSS
Exploits1References2
CBLMariner
CBLMariner
added 2025/01/12 9:15 a.m.26 views

CVE-2022-39348 affecting package python-twisted 20.3.0-4

CVE-2022-39348 affecting package python-twisted 20.3.0-4. No patch is available currently...

5.4CVSS7.5AI score0.01156EPSS
Exploits1
Debian
Debian
added 2024/11/28 3:34 p.m.16 views

[SECURITY] [DLA 3970-1] twisted security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3970-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler November 28, 2024 https://wiki.debian.org/LTS -...

8.3CVSS6.8AI score0.01156EPSS
Exploits2
Tenable Nessus
Tenable Nessus
added 2024/11/28 12:0 a.m.15 views

Debian dla-3970 : python3-twisted - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3970 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3970-1 [email protected]...

8.3CVSS6.1AI score0.01156EPSS
Exploits2References10
NVD
NVD
added 2024/06/28 7:15 a.m.19 views

CVE-2024-39348

Download of code without integrity check vulnerability in AirPrint functionality in Synology Router Manager SRM before 1.2.5-8227-11 and 1.3.1-9346-8 allows man-in-the-middle attackers to execute arbitrary code via unspecified vectors...

7.5CVSS0.00266EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/06/28 6:30 a.m.30 views

CVE-2024-39348

Download of code without integrity check vulnerability in AirPrint functionality in Synology Router Manager SRM before 1.2.5-8227-11 and 1.3.1-9346-8 allows man-in-the-middle attackers to execute arbitrary code via unspecified vectors...

7.5CVSS0.00266EPSS
Exploits0References1
CVE
CVE
added 2024/06/28 6:30 a.m.46 views

CVE-2024-39348

CVE-2024-39348 affects Synology Router Manager (SRM) by a vulnerability in the AirPrint functionality where code is downloaded without integrity checks. This can allow a remote attacker to execute arbitrary code via unspecified vectors, with network access and user interaction required. Affected ...

7.5CVSS7.9AI score0.00266EPSS
Exploits0References1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2024/01/31 11:29 p.m.37 views

Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to an HTTP header injection in Twisted [CVE-2022-39348]

Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to an HTTP header injection in Twisted, caused by improper validation of input by the NameVirtualHost Host header CVE-2022-39348. Twisted is used as a component of our Speech runtimes. This vulnerabilitiy has be...

5.4CVSS5.6AI score0.01156EPSS
Exploits1Affected Software1
OpenVAS
OpenVAS
added 2024/01/11 12:0 a.m.23 views

Ubuntu: Security Advisory (USN-6575-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.4CVSS5.8AI score0.01156EPSS
Exploits2References2
Ubuntu
Ubuntu
added 2024/01/10 1:39 p.m.65 views

USN-6575-1: Twisted vulnerabilities

It was discovered that Twisted incorrectly escaped host headers in certain 404 responses. A remote attacker could possibly use this issue to perform HTML and script injection attacks. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. CVE-2022-39348 It was discovered that Twisted...

5.4CVSS6.4AI score0.01156EPSS
Exploits2
OSV
OSV
added 2024/01/10 1:39 p.m.7 views

USN-6575-1 twisted vulnerabilities

It was discovered that Twisted incorrectly escaped host headers in certain 404 responses. A remote attacker could possibly use this issue to perform HTML and script injection attacks. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. CVE-2022-39348 It was discovered that Twisted...

5.4CVSS6.4AI score0.01156EPSS
Exploits2References3
Tenable Nessus
Tenable Nessus
added 2024/01/10 12:0 a.m.35 views

Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10 : Twisted vulnerabilities (USN-6575-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6575-1 advisory. It was discovered that Twisted incorrectly escaped host headers in certain 404 responses. A remote attacker could possibly us...

5.4CVSS6.5AI score0.01156EPSS
Exploits2References3
Rows per page
Query Builder