13 matches found
CVE-2025-46279
creationtimestamp| type| source ---|---|--- 2025-12-16 06:48:31+00:00| seen| https://vulnerability.circl.lu/bundle/c5b7cfe4-31dc-48ad-9aad-8e8bd3c6bf83 2025-12-17 22:00:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ma7nx5w5vo2y...
EUVD-2025-46279
Malicious code in mulyono-toge85-sukiwir npm...
org.apache.dubbo:dubbo-spring-boot-actuator (=3.1.5), org.apache.dubbo:dubbo-spring-boot-actuator-compatible (=3.1.5) +5 more potentially affected by CVE-2023-46279 via org.apache.dubbo:dubbo (=3.1.5)
org.apache.dubbo:dubbo MAVEN version =3.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.dubbo:dubbo and may be impacted: - org.apache.dubbo:dubbo-spring-boot-actuator =3.1.5 - org.apache.dubbo:dubbo-spring-boot-actuator-compatible =3.1.5...
CVE-2023-46279
CVE-2023-46279 describes a Deserialization of Untrusted Data vulnerability in Apache Dubbo , affecting only version 3.1.5 . Multiple sources (NVD entry and Red Hat/CNVDOSV mirrors) confirm the issue stems from unsafe deserialization and leads to a high-impact compromise if exploited. The NVD metr...
CVE-2023-46279 Apache Dubbo: Bypass deny serialize list check in Apache Dubbo
Deserialization of Untrusted Data vulnerability in Apache Dubbo.This issue only affects Apache Dubbo 3.1.5. Users are recommended to upgrade to the latest version, which fixes the issue...
CVE-2022-46279
Improper access control in the IntelR Retail Edge android application before version 3.0.301126-RELEASE may allow an authenticated user to potentially enable information disclosure via local access...
CVE-2022-46279
Improper access control in the IntelR Retail Edge android application before version 3.0.301126-RELEASE may allow an authenticated user to potentially enable information disclosure via local access...
CVE-2022-46279
CVE-2022-46279 : The issue is an improper access control in the Intel(R) Retail Edge Android application prior to version 3.0.301126-RELEASE , which may allow an authenticated user to enable information disclosure via local access . Connected sources corroborate this vulnerability in the Android ...
CVE-2022-46279
Improper access control in the IntelR Retail Edge android application before version 3.0.301126-RELEASE may allow an authenticated user to potentially enable information disclosure via local access...
Intel® Retail Edge Mobile App Advisory
Summary: Potential security vulnerabilities in the Intel® Retail Edge Mobile application may allow escalation of privilege, denial of service or information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-41690...
CVE-2021-46279
creationtimestamp| type| source ---|---|--- 2022-10-24 18:25:49+00:00| seen| https://t.me/cibsecurity/51980...
CVE-2021-46279
CVE-2021-46279 affects Lanner Inc IAC-AST2500A firmware 1.10.0. Reported vulnerabilities are session fixation and insufficient session expiration that enable session hijacking. Public details note the issue is tied to Lanner IAC-AST2500A and propose mitigation such as disabling the session manage...
CVE-2021-46279 Session Fixation and Insufficient Session Expiration
Session fixation and insufficient session expiration vulnerabilities allow an attacker to perfom session hijacking attacks against users. This issue affects: Lanner Inc IAC-AST2500A standard firmware version 1.10.0...