ROOT-OS-UBUNTU-2404-CVE-2026-43332 CVE-2026-43332 in rootio-linux - Patched by Root

Root has patched CVE-2026-43332 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

Linux Distros Unpatched Vulnerability : CVE-2026-43332

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - thermal: core: Fix thermal zone device registration error path If thermalzonedeviceregisterwithtrips fails after registering a thermal zone device, it needs to...

BELL-CVE-2026-43332

Bulletin has no description...

DEBIAN-CVE-2026-43332

In the Linux kernel, the following vulnerability has been resolved: thermal: core: Fix thermal zone device registration error path If thermalzonedeviceregisterwithtrips fails after registering a thermal zone device, it needs to wait for the tz-removal completion like thermalzonedeviceunregister, ...

CVE-2026-43332

In the Linux kernel thermal subsystem, CVE-2026-43332 affects the thermal_zone_device_register_with_trips() error path. The root cause is a missing wait_for_completion() after registering a thermal zone device, which can allow the thermal zone object to be freed prematurely if user space holds a ...

CVE-2025-43332

creationtimestamp| type| source ---|---|--- 2025-09-16 04:32:04+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lywih32cxa2t...

CVE-2024-43332

Missing Authorization vulnerability in Jordy Meow Photo Engine allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Photo Engine: from n/a through 6.4.0...

Linux Distros Unpatched Vulnerability : CVE-2021-43332

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In GNU Mailman before 2.1.36, the CSRF token for the Cgi/admindb.py admindb page contains an encrypted version of the list admin password. This could potentiall...

CVE-2024-43332

Missing Authorization vulnerability in Jordy Meow Photo Engine allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Photo Engine: from n/a through 6.4.0...

CVE-2024-43332

Missing Authorization vulnerability in Jordy Meow Photo Engine allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Photo Engine: from n/a through 6.4.0...

CVE-2024-43332

CVE-2024-43332 is a Missing Authorization vulnerability in the WordPress Photo Engine (WPLR-Sync) plugin, affecting Photo Engine versions n/a through 6.4.0. The issue stems from incorrectly configured access control, enabling unauthorized access to protected resources. Public references note High...

CVE-2024-43332 WordPress Photo Engine plugin <= 6.4.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Jordy Meow Photo Engine allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Photo Engine: from n/a through 6.4.0...

WordPress Photo Engine Plugin <= 6.4.0 is vulnerable to Broken Access Control

Software Photo Engine Type Plugin Vulnerable versions = 6.4.0 Fixed in 6.4.1 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-43332 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 6c8a51b120f7 Credits Majed Refaea Required privilege...

RHEL 7 : mailman (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - mailman: XSS in Cgi/options.py via crafted URL CVE-2021-43331 - mailman: a list moderator can crack the...

SUSE CVE-2021-43332

In GNU Mailman before 2.1.36, the CSRF token for the Cgi/admindb.py admindb page contains an encrypted version of the list admin password. This could potentially be cracked by a moderator via an offline brute-force attack...

CVE-2022-43332

CVE-2022-43332 affects WonderCMS v3.3.4. The vulnerability is a cross-site scripting (XSS) flaw exploitable via the Craft payload injected into the Site title field in the Configuration Panel, allowing execution of arbitrary web scripts/HTML. Notable impact details are that the issue concerns the...

CVE-2022-43332

A cross-site scripting XSS vulnerability in Wondercms v3.3.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Site title field of the Configuration Panel...

CVE-2022-43332

creationtimestamp| type| source ---|---|--- 2022-11-11 11:00:19+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/7146 2022-11-18 02:18:14+00:00| seen| https://t.me/cibsecurity/53128 2025-04-29 15:11:32+00:00| published-proof-of-concept|...

Debian: Security Advisory (DLA-3049-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3049-1] mailman security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3049-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler June 09, 2022 https://wiki.debian.org/LTS -...