12 matches found
BELL-CVE-2025-40122 CVE-2025-40122 does not affect BellSoft software
Bulletin has no description...
EUVD-2025-40122
Malicious code in cindy-lapis69-miaww npm...
CVE-2023-40122
In applyCustomDescription of SaveUi.java, there is a possible way to view other user's images due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2022-40122
creationtimestamp| type| source ---|---|--- 2025-05-22 14:44:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17298...
CVE-2023-40122
creationtimestamp| type| source ---|---|--- 2024-02-16 03:21:46+00:00| seen| https://t.me/ctinow/186079 2025-02-03 19:33:09+00:00| seen| https://vulnerability.circl.lu/bundle/cf59c148-4047-4ccd-8ba0-26fb7197899c...
CVE-2023-40122
In applyCustomDescription of SaveUi.java, there is a possible way to view other user's images due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2023-40122
CVE-2023-40122 : Affected component is Android’s SaveUi.java (applyCustomDescription). The issue enables a confused deputy to disclose another user’s images via local information disclosure, requiring no additional execution privileges and no user interaction. This is a local vulnerability; no re...
CVE-2022-40122
CVE-2022-40122 affects Online Banking System v1.0. A SQL injection vulnerability exists in the cust_id parameter of /net-banking/edit_customer_action.php (SQLi via cust_id). The CVSSv3.1 base score is 9.8 (CRITICAL) with network access, no authentication, and no user interaction required; impact ...
CVE-2022-40122
Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the custid parameter at /net-banking/editcustomeraction.php...
CVE-2021-40122
creationtimestamp| type| source ---|---|--- 2021-10-21 07:36:26+00:00| seen| https://t.me/cibsecurity/30935...
CVE-2021-40122
The CVE-2021-40122 issue affects Cisco Meeting Server (Call Bridge API). Affected component: Call Bridge API handling of large series of message requests. Root cause: improper handling leading to denial of service when an unauthenticated remote attacker sends a flood of messages. Impact: device r...
Vulnerability fixed in Cisco Meeting Server
A vulnerability has been fixed in Cisco Meeting Server. The vulnerability has been labeled CVE-2021-40122 and allows an unauthenticated remote malicious party to cause a Denial-of-Service DoS attack. By sending a large amount of messages to the vulnerable API Call Bridge, a malicious party can...