21 matches found
PT-2025-44967
Name of the Vulnerable Software and Affected Versions Qualcomm wlan STA driver affected versions not specified Description An out-of-bounds write issue exists in the wlan STA driver due to an incorrect bounds check. Successful exploitation could lead to local escalation of privilege, requiring Us...
CVE-2025-47115
creationtimestamp| type| source ---|---|--- 2025-06-11 02:03:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrccwsjbgl2k 2025-06-11 15:31:58+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18081...
CVE-2025-47115 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...
Security Bulletin: AIX is vulnerable to arbitrary command execution due to invscout (CVE-2024-47115)
Summary A vulnerability in the AIX invscout command could allow a non-privileged local user to execute arbitrary commands CVE-2024-47115. Vulnerability Details CVEID:CVE-2024-47115 DESCRIPTION: IBM AIX could allow a local user to execute arbitrary commands on the system due to improper...
CVE-2024-47115
IBM AIX 7.2, 7.3 and VIOS 3.1 and 4.1 could allow a local user to execute arbitrary commands on the system due to improper neutralization of input...
CVE-2024-47115 IBM AIX command execution
IBM AIX 7.2, 7.3 and VIOS 3.1 and 4.1 could allow a local user to execute arbitrary commands on the system due to improper neutralization of input...
CVE-2024-47115
CVE-2024-47115 affects IBM AIX 7.2/7.3 and VIOS 3.1/4.1, due to improper neutralization of input in the invscout component that could allow a local user to execute arbitrary commands. The vulnerable fileset is invscout.rte (AIX) with versions 2.2.0.0–2.2.0.26. IBM’s advisory (invscout_intro) list...
AIX is vulnerable to arbitrary command execution due to invscout (CVE-2024-47115)
IBM SECURITY ADVISORY First Issued: Thu Dec 5 15:38:05 CST 2024 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/invscoutadvisory7.asc Security Bulletin: AIX is vulnerable to arbitrary command execution due to invscout CVE-2024-47115...
CVE-2021-47115
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority for the following reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2021-47115
creationtimestamp| type| source ---|---|--- 2024-03-15 22:26:59+00:00| seen| https://t.me/ctinow/209203 2024-03-16 20:31:22+00:00| seen| https://t.me/ctinow/209705...
CVE-2021-47115
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2021-47115
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2021-47115
...
CVE-2021-47115
...
CVE-2021-47115
CVE-2021-47115 is rejected by its CNA and not an active vulnerability entry.
CVE-2023-47115
Label Studio is an a popular open source data labeling tool. Versions prior to 1.9.2 have a cross-site scripting XSS vulnerability that could be exploited when an authenticated user uploads a crafted image file for their avatar that gets rendered as a HTML file on the website. Executing arbitrary...
CVE-2023-47115 Label Studio XSS Vulnerability on Avatar Upload
Label Studio is an a popular open source data labeling tool. Versions prior to 1.9.2 have a cross-site scripting XSS vulnerability that could be exploited when an authenticated user uploads a crafted image file for their avatar that gets rendered as a HTML file on the website. Executing arbitrary...
CVE-2023-47115
creationtimestamp| type| source ---|---|--- 2024-01-23 22:24:16+00:00| published-proof-of-concept| https://github.com/HumanSignal/label-studio/security/advisories/GHSA-q68h-xwq5-mm7x 2024-01-24 00:26:57+00:00| seen| https://t.me/ctinow/172427 2024-02-01 20:16:36+00:00| seen|...
CVE-2022-47115
creationtimestamp| type| source ---|---|--- 2022-12-31 00:20:26+00:00| seen| https://t.me/cibsecurity/55598...
CVE-2022-47115
This CVE concerns a stack overflow in the Tenda A15’s wepauth parameter via the /goform/WifiBasicSet API. Affected product: Tenda A15 (firmware version in sources shows V15.13.07.13). Root cause: input length checking deficiency in the wepauth parameter leading to stack overflow. Impact: the issu...