7 matches found
CVE-2026-42975
creationtimestamp| type| source ---|---|--- 2026-07-14 18:12:15+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116919680066922390 2026-07-14 19:01:34+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0231 2026-07-14 19:48:34+00:00| seen|...
CVE-2022-42975
socket/transport.ex in Phoenix before 1.6.14 mishandles checkorigin wildcarding. NOTE: LiveView applications are unaffected by default because of the presence of a LiveView CSRF token...
CVE-2025-42975
creationtimestamp| type| source ---|---|--- 2025-08-12 02:43:09+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115013490316314202 2025-08-12 04:20:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lw6hidw4j62k...
CVE-2022-42975
creationtimestamp| type| source ---|---|--- 2022-10-17 12:12:57+00:00| seen| https://t.me/cibsecurity/51548 2025-05-10 03:25:51+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15864...
CVE-2022-42975
Phoenix prior to 1.6.14 contains a vulnerability in socket/transport.ex where check_origin wildcarding is mishandled. LiveView applications are unaffected by default because of the LiveView CSRF token. Affected versions: Phoenix before 1.6.14. Remediation: upgrade to Phoenix 1.6.14 or later or re...
CVE-2022-42975
socket/transport.ex in Phoenix before 1.6.14 mishandles checkorigin wildcarding. NOTE: LiveView applications are unaffected by default because of the presence of a LiveView CSRF token...
XDcms suffers from SQL injection vulnerability (CNVD-2021-42975)
XDcms is a general purpose content management system. XDcms suffers from a SQL injection vulnerability, which can be exploited by an attacker to obtain sensitive database information...