CVE-2025-6322

creationtimestamp| type| source ---|---|--- 2025-06-20 09:41:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18922 2025-06-20 10:01:43+00:00| published-proof-of-concept| Telegram/p4cwm2yjSN4ovrDbIKK0UGlBzlMUWXB5O0q8DxAqqucQZuA 2025-06-20 10:36:31+00:00| seen|...

CVE-2025-6322 PHPGurukul Pre-School Enrollment System visit.php sql injection

A vulnerability was found in PHPGurukul Pre-School Enrollment System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /visit.php. The manipulation of the argument gname leads to sql injection. The attack may be launched remotely. The exploit has bee...

CVE-2020-6322

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated 3DM file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

Linux Distros Unpatched Vulnerability : CVE-2016-6322

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Red Hat QuickStart Cloud Installer QCI uses world-readable permissions for /etc/qci/answers, which allows local users to obtain the root password for the deploy...

CVE-2024-6322

creationtimestamp| type| source ---|---|--- 2024-08-20 21:19:13+00:00| seen| https://t.me/cvedetector/3674...

CVE-2024-6322 vulnerabilities

Vulnerabilities for packages: grafana...

CVE-2024-6322

Access control for plugin data sources protected by the ReqActions json field of the plugin.json is bypassed if the user or service account is granted associated access to any other data source, as the ReqActions check was not scoped to each specific datasource. The account must have prior query...

CVE-2024-6322 vulnerabilities

Vulnerabilities for packages: grafana-fips...

CVE-2024-6322

Access control for plugin data sources protected by the ReqActions json field of the plugin.json is bypassed if the user or service account is granted associated access to any other data source, as the ReqActions check was not scoped to each specific datasource. The account must have prior query...

CVE-2024-6322

CVE-2024-6322 is documented as a Grafana-related issue where access control for plugin data sources protected by the ReqActions field in plugin.json can be bypassed if a user or service account has query access to any other data source. The root cause is that the ReqActions check is not scoped to...

CVE-2023-6322 Stack-based buffer overflow in message parser functionality

A stack-based buffer overflow vulnerability exists in the message parsing functionality of the Roku Indoor Camera SE version 3.0.2.4679 and Wyze Cam v3 version 4.36.11.5859. A specially crafted message can lead to stack-based buffer overflow. An attacker can make authenticated requests to trigger...

CVE-2023-6322

CVE-2023-6322 affects the Roku Indoor Camera SE (v3.0.2.4679) and Wyze Cam v3 (v4.36.11.5859). The root cause is a stack-based buffer overflow in the message parsing functionality . An attacker who can make authenticated requests can trigger the overflow, potentially leading to impact on confiden...

CVE-2023-6322 Stack-based buffer overflow in message parser functionality

A stack-based buffer overflow vulnerability exists in the message parsing functionality of the Roku Indoor Camera SE version 3.0.2.4679 and Wyze Cam v3 version 4.36.11.5859. A specially crafted message can lead to stack-based buffer overflow. An attacker can make authenticated requests to trigger...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS : elfutils vulnerabilities (USN-6322-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6322-1 advisory. It was discovered that elfutils incorrectly handled certain malformed files. If a user or automated system were tricked into...

Security Bulletin: Cross-site scripting vulnerability found in Sterling Order Management (CVE-2013-6322)

Abstract Sterling Order Management is vulnerable to a reflected cross-site scripting attack which could lead to unauthorized access through the injected scripts. Content VULNERABILITY DETAILS: CVEID: CVE-2013-6322 DESCRIPTION: Sterling Order Management allows the injection of a script which will ...

CVE-2020-6322

SAP 3D Visual Enterprise Viewer (version 9) contains a vulnerability in the 3DM/U3D file parsing within the Rhino plugin that allows remote attackers to cause a crash or execute arbitrary code via a crafted 3DM/U3D file. The irreducible root cause is improper input validation leading to an out-of...

CVE-2019-6322

Summary: CVE-2019-6322 affects HP Workstation BIOS (UEFI firmware). The runtime BIOS code can be tampered if TPM is disabled, with impact on systems where TPM is enabled by default. Root cause (per HP): vulnerability in firmware allowing tampering of BIOS code under certain TPM configurations. Im...

Panda Global Protection <= 17.0.1 Multiple Vulnerabilities

Panda Global Protection is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

CVE-2018-6322

Affected product : Panda Global Protection 17.0.1. Vulnerability : Local privilege escalation via impersonation of the insecurely created named pipe \dot-\pipe\PSANMSrvcPpal, granting full access to the Everyone group and enabling privilege gain or DoS. Root cause : Insecurely created named pipe ...

Panda Global Security 17.0.1 NULL DACL Grants Full Access

===== Tempest Security Intelligence - ADV-17/2018 === Panda Global Security 17.0.1 - NULL DACL grants full access ------------------------------------------------------- Author: - Filipe Xavier Oliveira: ===== Table of Contents ===================================================== Overview Detail...