25 matches found
CVE-2021-41703
此存储库没有 README。...
VMware Fusion 25.x < 26.0.0 Information Disclosure (VMSA-2026-0006)
The version of VMware Fusion installed on the remote macOS host is 25.x 25H2 prior to 26.0.0 26H1. It is, therefore, affected by a vulnerability as referenced in the VMSA-2026-0006.1 advisory: - VMware ESX, Workstation, and Fusion contain an out-of-bounds read vulnerability. A malicious actor wit...
VMware ESX 8.0 / 9.0 / 9.1 Out-of-Bounds Read (VMSA-2026-0006)
The version of VMware ESX installed on the remote host is 8.0 prior to build 25205845 8.0 Update 3i, or 9.0 prior to build 25595025 9.0.2.0100, or 9.1 prior to build 25370933 9.1.0.0. It is, therefore, affected by a vulnerability as referenced in the VMSA-2026-0006.1 advisory: - VMware ESX,...
CVE-2026-41703
creationtimestamp| type| source ---|---|--- 2026-07-29 13:00:55+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0269 2026-07-29 16:45:12+00:00| seen| https://www.ncsc.nl/alerts/kritieke-kwetsbaarheden-in-vmware-vcenter-en-esx-producten-update-onmiddellijk 2026-07-29 17:00:04+00:00|...
PT-2026-65829
Name of the Vulnerable Software and Affected Versions VMware ESX affected versions not specified Description An out-of-bounds write issue exists in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a virtual machine using the VMXNET3 adapter can exploi...
PT-2026-65827
VMware ESX, Workstation, and Fusion contain an out-of-bounds read vulnerability. A malicious actor with VM deployment privileges could trigger an out-of-bounds read, potentially leading to information disclosure or more likely a Denial-of-Service DoS condition of the host process. On Workstation...
VMware Workstation 25.x < 26.0.0 Vulnerability (VMSA-2026-0006)
The version of VMware Workstation installed on the remote host is 25.x 25H2 prior to 26.0.0 26H1. It is, therefore, affected by a vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...
PT-2026-65832
Name of the Vulnerable Software and Affected Versions VMware vCenter affected versions not specified Description An authentication bypass exists in the VMware Directory Service. A malicious actor with network access to vCenter can exploit this flaw to bypass authentication mechanisms and gain...
EUVD-2025-41703
Malicious code in andi-bakwan91-riris npm...
CVE-2025-41703
creationtimestamp| type| source ---|---|--- 2025-10-14 13:40:15+00:00| seen| https://infosec.exchange/users/certvde/statuses/115372799750920973 2025-10-17 08:37:12+00:00| seen| https://bsky.app/profile/blackhatnews.tokyo/post/3m3eulxahcx2d 2025-10-18 07:11:13+00:00| seen|...
CVE-2024-41703
LibreChat through 0.7.4-rc1 has incorrect access control for message updates...
CVE-2023-41703
User ID references at mentions in document comments were not correctly sanitized. Script code could be injected to a users session when working with a malicious document. Please deploy the provided updates and patch releases. User-defined content like comments and mentions are now filtered to avo...
CVE-2022-41703
A vulnerability in the SQL Alchemy connector of Apache Superset allows an authenticated user with read access to a specific database to add subqueries to the WHERE and HAVING fields referencing tables on the same database that the user should not have access to, despite the user having the featur...
CVE-2022-41703
creationtimestamp| type| source ---|---|--- 2025-04-08 20:46:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11004...
vulnerability-disclosures
REA Group Security Vulnerability Disclosures REA Groupht...
CVE-2024-41703
creationtimestamp| type| source ---|---|--- 2024-07-22 07:46:25+00:00| seen| https://t.me/cvedetector/1378...
CVE-2024-41703
LibreChat through 0.7.4-rc1 has incorrect access control for message updates...
CVE-2024-41703
LibreChat up to version 0.7.4-rc1 has an incorrect access control for message updates. The issue is documented across multiple sources (NVD, Red Hat, OSV, CVE lists) with the same description. The CVSS-based impact is listed as critical in NVD (high confidentiality, integrity, and availability im...
CVE-2023-41703
creationtimestamp| type| source ---|---|--- 2024-02-12 10:21:56+00:00| seen| https://t.me/ctinow/182998 2024-03-03 15:21:59+00:00| seen| https://t.me/ctinow/198781...
CVE-2023-41703
User ID references at mentions in document comments were not correctly sanitized. Script code could be injected to a users session when working with a malicious document. Please deploy the provided updates and patch releases. User-defined content like comments and mentions are now filtered to avo...