22 matches found
CVE-2026-41703
creationtimestamp| type| source ---|---|--- 2026-07-29 13:00:55+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0269 2026-07-29 16:45:12+00:00| seen| https://www.ncsc.nl/alerts/kritieke-kwetsbaarheden-in-vmware-vcenter-en-esx-producten-update-onmiddellijk 2026-07-29 17:00:04+00:00|...
PT-2026-65829
Name of the Vulnerable Software and Affected Versions VMware ESX affected versions not specified Description An out-of-bounds write issue exists in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a virtual machine using the VMXNET3 adapter can exploi...
VMware Workstation 25H2.x < 26H1 / 25H2.x < 26H1 Vulnerability (VMSA-2026-0006)
The version of VMware Workstation installed on the remote host is 25H2.x prior to 26H1 or 25H2.x prior to 26H1. It is, therefore, affected by a vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...
PT-2026-65827
VMware ESX, Workstation, and Fusion contain an out-of-bounds read vulnerability. A malicious actor with VM deployment privileges could trigger an out-of-bounds read, potentially leading to information disclosure or more likely a Denial-of-Service DoS condition of the host process. On Workstation...
PT-2026-65832
VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with network access to vCenter may exploit this issue to bypass authentication and gain unauthorized access to the system...
EUVD-2025-41703
Malicious code in andi-bakwan91-riris npm...
CVE-2025-41703
creationtimestamp| type| source ---|---|--- 2025-10-14 13:40:15+00:00| seen| https://infosec.exchange/users/certvde/statuses/115372799750920973 2025-10-17 08:37:12+00:00| seen| https://bsky.app/profile/blackhatnews.tokyo/post/3m3eulxahcx2d 2025-10-18 07:11:13+00:00| seen|...
CVE-2024-41703
LibreChat through 0.7.4-rc1 has incorrect access control for message updates...
CVE-2023-41703
User ID references at mentions in document comments were not correctly sanitized. Script code could be injected to a users session when working with a malicious document. Please deploy the provided updates and patch releases. User-defined content like comments and mentions are now filtered to avo...
CVE-2022-41703
A vulnerability in the SQL Alchemy connector of Apache Superset allows an authenticated user with read access to a specific database to add subqueries to the WHERE and HAVING fields referencing tables on the same database that the user should not have access to, despite the user having the featur...
CVE-2022-41703
creationtimestamp| type| source ---|---|--- 2025-04-08 20:46:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11004...
vulnerability-disclosures
REA Group Security Vulnerability Disclosures REA Groupht...
CVE-2024-41703
creationtimestamp| type| source ---|---|--- 2024-07-22 07:46:25+00:00| seen| https://t.me/cvedetector/1378...
CVE-2024-41703
LibreChat through 0.7.4-rc1 has incorrect access control for message updates...
CVE-2024-41703
LibreChat up to version 0.7.4-rc1 has an incorrect access control for message updates. The issue is documented across multiple sources (NVD, Red Hat, OSV, CVE lists) with the same description. The CVSS-based impact is listed as critical in NVD (high confidentiality, integrity, and availability im...
CVE-2023-41703
creationtimestamp| type| source ---|---|--- 2024-02-12 10:21:56+00:00| seen| https://t.me/ctinow/182998 2024-03-03 15:21:59+00:00| seen| https://t.me/ctinow/198781...
CVE-2023-41703
User ID references at mentions in document comments were not correctly sanitized. Script code could be injected to a users session when working with a malicious document. Please deploy the provided updates and patch releases. User-defined content like comments and mentions are now filtered to avo...
CVE-2023-41703
CVE-2023-41703 affects Open-Xchange App Suite. The flaw arises from inadequate sanitization of User ID references at mentions in document comments, allowing script code to be injected into a user session when handling a malicious document. The issue is mitigated by applying provided updates/patch...
CVE-2023-41703
User ID references at mentions in document comments were not correctly sanitized. Script code could be injected to a users session when working with a malicious document. Please deploy the provided updates and patch releases. User-defined content like comments and mentions are now filtered to avo...
CVE-2023-41703
User ID references at mentions in document comments were not correctly sanitized. Script code could be injected to a users session when working with a malicious document. Please deploy the provided updates and patch releases. User-defined content like comments and mentions are now filtered to avo...