11 matches found
CVE-2022-41252
creationtimestamp| type| source ---|---|--- 2025-10-06 13:41:55+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3m2jqiej6wbp2...
CVE-2025-41252
Description: VMware NSX contains a username enumeration vulnerability. An unauthenticated malicious actor may exploit this to enumerate valid usernames, potentially leading to unauthorized access attempts. Impact: Username enumeration → facilitates unauthorized access. Attack Vector: Remote,...
CVE-2025-41252
creationtimestamp| type| source ---|---|--- 2025-09-30 07:18:53+00:00| seen| https://gist.github.com/Darkcrai86/7a0e42f4d9d6f3b52da3d5535b536783 2025-09-30 17:38:36+00:00| seen| https://t.me/truesecator/7477 2025-09-30 23:24:40+00:00| seen|...
CVE-2022-41252
Missing permission checks in Jenkins CONS3RT Plugin 1.0.0 and earlier allows users with Overall/Read permission to enumerate credentials ID of credentials stored in Jenkins...
CVE-2024-41252
An Incorrect Access Control vulnerability was found in /smsa/adminstudentregisterapproval.php and /smsa/adminstudentregisterapprovalsubmit.php in Kashipara Responsive School Management System v3.2.0, which allows remote unauthenticated attackers to view and approve student registration...
CVE-2023-41252
The CVE-2023-41252 issue affects Intel® QAT software drivers for Windows prior to version QAT1.7-W-1.11.0. The root cause is an out-of-bounds read in these drivers, which could allow an authenticated user to trigger a denial of service via local access. Intel’s advisory and multiple aggregators c...
Intel® QAT Software Drivers Advisory
Summary: A potential security vulnerability in some Intel® QuickAssist Technology QAT software drivers for Windows may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-41252 Description: Out-of-bounds rea...
CVE-2022-41252
The CVE CVE-2022-41252 affects Jenkins CONS3RT Plugin 1.0.0 and earlier. Description: missing permission checks in several HTTP endpoints allow users with Overall/Read permission to enumerate credentials IDs stored in Jenkins, enabling potential credential exposure. Root cause: insufficient acces...
CVE-2022-41252
Missing permission checks in Jenkins CONS3RT Plugin 1.0.0 and earlier allows users with Overall/Read permission to enumerate credentials ID of credentials stored in Jenkins...
CVE-2021-41252
Kirby CMS vulnerability CVE-2021-41252 affects the writer field in Kirby’s site frontend: unsanitized HTML content can be injected and executed as XSS when a logged-in Panel user saves content via the API. The issue stems from inadequate escaping of HTML in the writer field, enabling malicious HT...
CVE-2021-41252 Cross-site scripting (XSS) from writer field content in the site frontend
Kirby is an open source file structured CMS Impact Kirby's writer field stores its formatted content as HTML code. Unlike with other field types, it is not possible to escape HTML special characters against cross-site scripting XSS attacks, otherwise the formatting would be lost. If the user is...