42 matches found
MINI-H9PJ-4QMC-7232
Bulletin has no description...
CVE-2020-7232
Evoko Home devices 1.31 through 1.37 allow remote attackers to obtain sensitive information such as usernames and password hashes via a WebSocket request, as demonstrated by the sockjs/224/uf1psgff/websocket URI at a wss:// URL...
GHSA-7232-97C6-J525
creationtimestamp| type| source ---|---|--- 2025-10-02 12:35:15+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115304596433685168...
MAL-2025-7232 Malicious code in @crabas0npm/delectus-quas-eum (npm)
The package @crabas0npm/delectus-quas-eum was found to contain malicious code...
CVE-2015-7232
Cross-site scripting XSS vulnerability in unspecified administration pages in the OSF module 7.x-3.x before 7.x-3.1 for Drupal, when the OSF Ontology module is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CGA-8GCV-7232-CV9C
Bulletin has no description...
CGA-7232-W9M3-J7G7
Bulletin has no description...
CVE-2023-7232 Backup and Restore WordPress <= 1.45 - Unauthenticated Sensitive Data Exposure
The Backup and Restore WordPress WordPress plugin through 1.45 does not protect some log files containing sensitive information such as site configuration etc, allowing unauthenticated users to access such data...
WordPress Backup and Restore WordPress Plugin <= 1.45 is vulnerable to Sensitive Data Exposure
Software Backup and Restore WordPress Type Plugin Vulnerable versions = 1.45 Fixed in N/A OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-7232 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 3c39929e51e9 Credits Dmitrii Ignatyev...
ABB IDAL HTTP Server Stack Buffer Overflow (CVE-2019-7232)
A stack buffer overflow vulnerability exists in ABB IDAL HTTP Server. A remote unauthenticated attacker could exploit this vulnerability by sending a crafted request to the vulnerable server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on...
CVE-2020-7232
CVE-2020-7232 affects Evoko Home devices version 1.31 through 1.37. The issue enables remote attackers to disclose sensitive information (e.g., usernames and password hashes) by sending a WebSocket request to the sockjs/224/uf1psgff/websocket URI over a secure WebSocket (wss://). The available co...
CVE-2020-7232
Evoko Home devices 1.31 through 1.37 allow remote attackers to obtain sensitive information such as usernames and password hashes via a WebSocket request, as demonstrated by the sockjs/224/uf1psgff/websocket URI at a wss:// URL...
CVE-2019-7232
The CVE-2019-7232 entry concerns the ABB IDAL HTTP Server (part of ABB PB610 Panel Builder 600) and discloses a buffer overflow when a long Host header is processed. The root cause is an overflow of a buffer caused by a Host header value of 2047 bytes or more, which can overwrite a Structured Exc...
CVE-2008-7232
creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/freebsd/tacacs/xtacacsdreport.rb 2025-02-06 03:13:39+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:08:35+00:00| seen|...
CVE-2018-7232
CVE-2018-7232 affects Schneider Electric’s Pelco Sarix Professional, all firmware versions prior to 3.29.67. The root cause is a lack of validation of shell metacharacters in the value of 'network.ieee8021x.delete_certs', which can permit command execution. Impact is high (per CVSS:3.1 base score...
Microsoft Office Multiple Remote Code Execution Vulnerabilities (3199168) - Mac OS X
This host is missing an important security update according to Microsoft Bulletin MS16-133 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE ...
CVE-2016-7232
CVE-2016-7232 is a memory corruption vulnerability in Microsoft Office components (Word 2007; Office 2010 SP2; Word 2010 SP2; Word for Mac 2011; Office Compatibility Pack SP3) that allows remote code execution via a crafted Office document. Affected systems are mitigated by MS16-133 security upda...
Microsoft Office Memory Corruption (MS16-133: CVE-2016-7232)
A remote code execution vulnerability exists in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office handles objects in memory while parsing specially crafted files. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...
KLA10902 Multiple vulnerabilities in Microsoft Office
Multiple serious vulnerabilities have been found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1. Out-of-bounds read can be exploited remotely via a specially designed...
Microsoft Office CVE-2016-7232 Memory Corruption Vulnerability
Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in deni...