BELL-CVE-2025-40122

Bulletin has no description...

EUVD-2025-40122

Malicious code in cindy-lapis69-miaww npm...

CVE-2023-40122

In applyCustomDescription of SaveUi.java, there is a possible way to view other user's images due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2022-40122

creationtimestamp| type| source ---|---|--- 2025-05-22 14:44:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17298...

CVE-2023-40122

creationtimestamp| type| source ---|---|--- 2024-02-16 03:21:46+00:00| seen| https://t.me/ctinow/186079 2025-02-03 19:33:09+00:00| seen| https://vulnerability.circl.lu/bundle/cf59c148-4047-4ccd-8ba0-26fb7197899c...

CVE-2023-40122

In applyCustomDescription of SaveUi.java, there is a possible way to view other user's images due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-40122

A vulnerability in SaveUi.java within the Framework component of Android allows for local information disclosure. Due to a confused deputy flaw in the applyCustomDescription function, an attacker can view images belonging to other users without requiring additional execution privileges or user in...

CVE-2022-40122

CVE-2022-40122 affects Online Banking System v1.0. A SQL injection vulnerability exists in the cust_id parameter of /net-banking/edit_customer_action.php (SQLi via cust_id). The CVSSv3.1 base score is 9.8 (CRITICAL) with network access, no authentication, and no user interaction required; impact ...

CVE-2022-40122

Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the custid parameter at /net-banking/editcustomeraction.php...

CVE-2021-40122

creationtimestamp| type| source ---|---|--- 2021-10-21 07:36:26+00:00| seen| https://t.me/cibsecurity/30935...

CVE-2021-40122

The CVE-2021-40122 issue affects Cisco Meeting Server (Call Bridge API). Affected component: Call Bridge API handling of large series of message requests. Root cause: improper handling leading to denial of service when an unauthenticated remote attacker sends a flood of messages. Impact: device r...

Vulnerability fixed in Cisco Meeting Server

A vulnerability has been fixed in Cisco Meeting Server. The vulnerability has been labeled CVE-2021-40122 and allows an unauthenticated remote malicious party to cause a Denial-of-Service DoS attack. By sending a large amount of messages to the vulnerable API Call Bridge, a malicious party can...