CVE-2022-41720 vulnerabilities

Vulnerabilities for packages: kubeflow-katib...

CVE-2026-41720

CVE-2026-41720 affects Spring LDAP, where DirContextAuthenticationStrategy implementations fail to reject a bind request that uses a non-empty username with an empty or null password. Affected versions include 2.4.0–2.4.4, 3.2.0–3.2.17, 3.3.0–3.3.7, and 4.0.0–4.0.3. The CVE description in both th...

CVE-2026-41720

creationtimestamp| type| source ---|---|--- 2026-06-08 07:18:37+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/spring-security-advisory-av26-558...

ai.h2o:h2o-orc-parser (>=3.10.0.5 <=3.10.3.6), cc.chensoul.nacos:core-test (=2.5.2) +232 more potentially affected by CVE-2026-41720 via org.springframework.ldap:spring-ldap-core (>=2.4.0 <=2.4.4)

org.springframework.ldap:spring-ldap-core MAVEN version =2.4.0, =3.10.0.5, =1.2.0, =4.6.0, =4.6.0, =4.6.0, =4.6.0, =4.6.0, =4.7.0 and more Source cves: CVE-2026-41720 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKLDAP-17260845...

ai.wavemaker.runtime:wavemaker-app-runtime-core (>=1.0.0-20260516144515 <=1.0.0.ee-20260528111216), cc.zzzyu.nacos:default-auth-plugin (=3.1.1) +145 more potentially affected by CVE-2026-41720 via org.springframework.ldap:spring-ldap-core (>=3.2.0 <=3.3.7)

org.springframework.ldap:spring-ldap-core MAVEN version =3.2.0, =1.0.0-20260516144515, =0.0.13, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.12.0 and more Source cves: CVE-2026-41720 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKLDAP-17260845...

com.erudika:para-jar (>=1.51.2 <=1.51.4), com.erudika:para-server (>=1.51.2 <=1.54.7) +52 more potentially affected by CVE-2026-41720 via org.springframework.ldap:spring-ldap-core (>=4.0.0-M1 <=4.0.3)

org.springframework.ldap:spring-ldap-core MAVEN version =4.0.0-M1, =1.51.2, =1.51.2, =0.2.2, =2.0.0, =2.0.0, =3.2.1, =3.2.1, =3.2.1, =2.5.0, =2.4.0, =2.4.0, =2.5.2 and more Source cves: CVE-2026-41720 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKLDAP-17260845...

CVE-2024-41720

Incorrect permission assignment for critical resource issue exists in ZWX-2000CSW2-HN firmware versions prior to Ver.0.3.15, which may allow a network-adjacent authenticated attacker to alter the configuration of the device...

CVE-2025-41720

creationtimestamp| type| source ---|---|--- 2025-10-22 16:10:11+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115418687746464898...

Linux Distros Unpatched Vulnerability : CVE-2022-41720

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - On Windows, restricted files can be accessed via os.DirFS and http.Dir. The os.DirFS function and http.Dir type provide access to a tree of files rooted at a...

CVE-2024-41720

creationtimestamp| type| source ---|---|--- 2024-08-05 08:03:06+00:00| seen| https://t.me/cvedetector/2427...

CVE-2024-41720

Incorrect permission assignment for critical resource issue exists in ZWX-2000CSW2-HN firmware versions prior to Ver.0.3.15, which may allow a network-adjacent authenticated attacker to alter the configuration of the device...

CVE-2024-41720

CVE-2024-41720 affects ZWX-2000CSW2-HN firmware versions prior to 0.3.15. The issue is an incorrect permission assignment for a critical resource (CWE-732) that may permit a network-adjacent authenticated attacker to alter the device configuration. Impact is reported as high (C/I/A: HIGH) with an...

CVE-2024-41720

Incorrect permission assignment for critical resource issue exists in ZWX-2000CSW2-HN firmware versions prior to Ver.0.3.15, which may allow a network-adjacent authenticated attacker to alter the configuration of the device...

CVE-2024-41720

Incorrect permission assignment for critical resource issue exists in ZWX-2000CSW2-HN firmware versions prior to Ver.0.3.15, which may allow a network-adjacent authenticated attacker to alter the configuration of the device...

CVE-2023-41720

creationtimestamp| type| source ---|---|--- 2024-01-10 15:41:35+00:00| seen| https://t.me/ctinow/165871...

CVE-2023-41720

CVE-2023-41720 affects Ivanti Connect Secure (ICS) on the 22.x branch prior to 22.6R2. An attacker with foothold on an ICS appliance can escalate privileges by exploiting a vulnerable installed application, gaining elevated execution privileges on the system. Affected versions include 22.x varian...

CVE-2023-41720

A vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker with a foothold on an Ivanti Connect Secure ICS appliance can escalate their privileges by exploiting a vulnerable installed application. This vulnerability allows the attacker to gain elevated executio...

Security patch release - Ivanti Connect Secure 22.6R2 and 22.6R2.1

Resolutions for Ivanti Connect Secure Security Issues: As part of Ivanti's commitment to continuous security hardening, Ivanti has released a security update for Ivanti Connect Secure. This update resolves important vulnerabilities. To our knowledge, none of the CVEs identified in this review hav...

SUSE: Security Advisory (SUSE-SU-2023:2312-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2023:0871-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...