CVE-2017-100036

creationtimestamp| type| source ---|---|--- 2025-02-06 03:13:43+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:09:51+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd...

CVE-2021-35254

SolarWinds received a report of a vulnerability related to an input that was not sanitized in WebHelpDesk. SolarWinds has removed this input field to prevent the misuse of this input in the future...

CVE-2025-23432

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AlTi5 AlT Report alt-report allows Reflected XSS.This issue affects AlT Report: from n/a through = 1.12.0...

CVE-2024-36903

creationtimestamp| type| source ---|---|--- 2025-02-06 02:39:18+00:00| seen| Telegram/R0dKu5nbgENpN2DSlFLKxlLO-94hiFeIWHybDco6PUVULq 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen|...

CVE-2024-57080

creationtimestamp| type| source ---|---|--- 2025-02-05 22:16:59+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhlxykzzj2t 2025-02-06 01:50:58+00:00| seen| https://t.me/cvedetector/17347...

CVE-2024-57076

creationtimestamp| type| source ---|---|--- 2025-02-05 22:16:50+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhlxp6p4u2e 2025-03-18 20:48:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8007...

CVE-2024-57069

creationtimestamp| type| source ---|---|--- 2025-02-05 22:16:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhlxcibe72i 2025-02-06 01:51:07+00:00| seen| https://t.me/cvedetector/17355...

CVE-2022-33273

Information disclosure due to buffer over-read in Trusted Execution Environment while QRKS report generation...

CVE-2024-57085

creationtimestamp| type| source ---|---|--- 2025-02-05 21:31:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113953412401038570 2025-02-05 22:17:10+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhlycsrxt2c 2025-02-06 01:51:00+00:00| seen|...

CVE-2022-48597

A SQL injection vulnerability exists in the “ticket event report” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database...

CVE-2022-48601

A SQL injection vulnerability exists in the “network print report” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database...

CVE-2022-48582

A command injection vulnerability exists in the ticket report generate feature of the ScienceLogic SL1 that takes unsanitized user controlled input and passes it directly to a shell command. This allows for the injection of arbitrary commands to the underlying operating system...

CVE-2022-48591

A SQL injection vulnerability exists in the vendorstate parameter of the “vendor print report” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the...

CVE-2025-24372

creationtimestamp| type| source ---|---|--- 2025-02-05 19:18:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhbz3wxog2b 2025-02-05 21:39:46+00:00| seen| https://t.me/cvedetector/17316 2025-02-05 22:33:54+00:00| seen|...

CVE-2022-0550

Improper Input Validation vulnerability in custom report logo upload in Nozomi Networks Guardian, and CMC allows an authenticated attacker with admin or report manager roles to execute unattended commands on the appliance using web server user privileges. This issue affects: Nozomi Networks...

CVE-2025-23412

creationtimestamp| type| source ---|---|--- 2025-02-05 18:07:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113952610558009604 2025-02-05 18:16:51+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhh6kly63a2r 2025-02-05 21:40:07+00:00| seen|...

CVE-2025-24326

creationtimestamp| type| source ---|---|--- 2025-02-05 17:54:26+00:00| seen| https://t.me/cKure/14288 2025-02-05 18:17:10+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhh6l6f46j2b 2025-02-05 18:37:29+00:00| seen|...

CVE-2020-5302

MH-WikiBot an IRC Bot for interacting with the Miraheze API, had a bug that allowed any unprivileged user to access the steward commands on the IRC interface by impersonating the Nickname used by a privileged user as no check was made to see if they were logged in. The issue has been fixed in...

CVE-2020-6249

The use of an admin backend report within SAP Master Data Governance, versions - S4CORE 101, S4FND 102, 103, 104, SAPBSFND 748; allows an attacker to execute crafted database queries, exposing the backend database, leading to SQL Injection...

CVE-2020-13533

A privilege escalation vulnerability exists in Dream Report 5 R20-2. IIn the default configuration, the following registry keys, which reference binaries with weak permissions, can be abused by attackers to effectively ‘backdoor’ the installation files and escalate privileges when a new user logs...