Lucene search
K

12 matches found

OSV
OSV
added 2025/11/14 6:5 a.m.1 views

BELL-CVE-2025-40122 CVE-2025-40122 does not affect BellSoft software

Bulletin has no description...

5.8AI score0.00028EPSS
Exploits0References1
EUVD
EUVD
added 2025/11/10 4:5 a.m.1 views

EUVD-2025-40122

Malicious code in cindy-lapis69-miaww npm...

6.6AI score
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/23 4:42 a.m.3 views

CVE-2023-40122

In applyCustomDescription of SaveUi.java, there is a possible way to view other user's images due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.3CVSS6.2AI score0.00073EPSS
Exploits0
Circl
Circl
added 2025/05/22 2:44 p.m.2 views

CVE-2022-40122

creationtimestamp| type| source ---|---|--- 2025-05-22 14:44:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17298...

9.8CVSS8.7AI score0.00245EPSS
Exploits1References1
Circl
Circl
added 2024/02/16 3:21 a.m.1 views

CVE-2023-40122

creationtimestamp| type| source ---|---|--- 2024-02-16 03:21:46+00:00| seen| https://t.me/ctinow/186079 2025-02-03 19:33:09+00:00| seen| https://vulnerability.circl.lu/bundle/cf59c148-4047-4ccd-8ba0-26fb7197899c...

5.3CVSS5.7AI score0.00073EPSS
Exploits0References2
NVD
NVD
added 2024/02/16 2:15 a.m.11 views

CVE-2023-40122

In applyCustomDescription of SaveUi.java, there is a possible way to view other user's images due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.3CVSS5.9AI score0.00073EPSS
Exploits0References2
CVE
CVE
added 2024/02/16 12:8 a.m.148 views

CVE-2023-40122

CVE-2023-40122 : Affected component is Android’s SaveUi.java (applyCustomDescription). The issue enables a confused deputy to disclose another user’s images via local information disclosure, requiring no additional execution privileges and no user interaction. This is a local vulnerability; no re...

5.3CVSS6AI score0.00073EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2022/09/23 9:16 p.m.57 views

CVE-2022-40122

CVE-2022-40122 affects Online Banking System v1.0. A SQL injection vulnerability exists in the cust_id parameter of /net-banking/edit_customer_action.php (SQLi via cust_id). The CVSSv3.1 base score is 9.8 (CRITICAL) with network access, no authentication, and no user interaction required; impact ...

9.8CVSS9.8AI score0.00245EPSS
Exploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2022/09/23 9:16 p.m.5 views

CVE-2022-40122

Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the custid parameter at /net-banking/editcustomeraction.php...

9.8AI score0.00245EPSS
Exploits1References2
Circl
Circl
added 2021/10/21 7:36 a.m.2 views

CVE-2021-40122

creationtimestamp| type| source ---|---|--- 2021-10-21 07:36:26+00:00| seen| https://t.me/cibsecurity/30935...

7.5CVSS5.9AI score0.00376EPSS
Exploits0References1
CVE
CVE
added 2021/10/21 2:50 a.m.52 views

CVE-2021-40122

The CVE-2021-40122 issue affects Cisco Meeting Server (Call Bridge API). Affected component: Call Bridge API handling of large series of message requests. Root cause: improper handling leading to denial of service when an unauthenticated remote attacker sends a flood of messages. Impact: device r...

7.5CVSS6.3AI score0.00376EPSS
Exploits0References1Affected Software1
NCSC
NCSC
added 2021/10/21 12:0 a.m.5 views

Vulnerability fixed in Cisco Meeting Server

A vulnerability has been fixed in Cisco Meeting Server. The vulnerability has been labeled CVE-2021-40122 and allows an unauthenticated remote malicious party to cause a Denial-of-Service DoS attack. By sending a large amount of messages to the vulnerable API Call Bridge, a malicious party can...

7.8CVSS7AI score0.00376EPSS
Exploits0
Rows per page
Query Builder