SUSE CVE-2020-11013

Their is an information disclosure vulnerability in Helm from version 3.1.0 and before version 3.2.0. lookup is a Helm template function introduced in Helm v3. It is able to lookup resources in the cluster to check for the existence of specific resources and get details about them. This can be us...

SUSE CVE-2021-44569

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-3200 Reason: This candidate is a duplicate of CVE-2021-3200. Notes: All CVE users should reference CVE-2021-3200 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage...

SUSE CVE-2022-0890

NULL Pointer Dereference in GitHub repository mruby/mruby prior to 3.2...

SUSE CVE-2022-1071

User after free in mrbvmexec in GitHub repository mruby/mruby prior to 3.2...

CVE-2021-36545

Cross Site Scripting XSS vulnerability in tpcms 3.2 allows remote attackers to run arbitrary code via the cfgcopyright or cfgtel field in Site Configuration page...

TPCMS 跨站脚本漏洞

TPCMS is a source of happiness Source of Happiness individual developers of an open source content management system. A cross-site scripting vulnerability exists in TPCMS version 3.2. A remote attacker can exploit this vulnerability to run arbitrary code via the cfgcopyright or cfgtel fields in t...

CVE-2022-44026

An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting XSS, issue 3 of 6...

NetScout nGeniusONE 跨站脚本漏洞

NetScout nGeniusONE is a centralized application management and network performance solution from NetScout, Inc. A security vulnerability exists in nGeniusONE version 6.3.2 that stems from a cross-site scripting issue...

CVE-2022-32657

creationtimestamp| type| source ---|---|--- 2023-01-04 00:17:35+00:00| seen| https://t.me/cibsecurity/55829 2023-07-10 13:19:09+00:00| published-proof-of-concept| https://t.me/ETHICALHACKERSCOMMUNITY2/2706 2026-09-01 20:00:54+00:00| seen| https://t.me/hackingAttack/109427 2026-09-02 01:01:15+00:0...

CVE-2022-32641

In meta wifi, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07453594; Issue ID: ALPS07453594...

CVE-2022-32625

creationtimestamp| type| source ---|---|--- 2022-12-05 18:40:04+00:00| seen| https://t.me/cibsecurity/53983 2025-04-24 15:06:41+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13250...

Rukovoditel 跨站脚本漏洞

Rukovoditel is a set of Web-based open source project management software from the Rukovoditel team. The software has project management, customer relationship management and other functions. Rukovoditel v3.2.1 version has a security vulnerability , the vulnerability stems from the Entities Group...

CVE-2022-3328

creationtimestamp| type| source ---|---|--- 2022-12-01 00:36:51+00:00| seen| https://t.me/ctinow/78566 2022-12-01 08:23:49+00:00| seen| https://t.me/crackcodes/1578 2022-12-01 23:28:44+00:00| published-proof-of-concept| Telegram/e7mpXn8-zCwJ1LtoziMjcjRzRmSH8ETqIOnXcFKQsQUk0R4 2022-12-02...

PT-2022-35888 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.332 Description: The issue is related to the hugetlb lock not being taken before decrementing h-resv huge pages. This could potentially lead to security vulnerabilities, although the actual impact and attac...

PT-2022-26784 · Unknown · Rukovoditel

Name of the Vulnerable Software and Affected Versions: Rukovoditel version 3.2.1 Description: A stored cross-site scripting XSS issue in the Users Alerts feature /index.php?module=users alerts/users alerts allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted paylo...

AZL-11350 CVE-2022-3474 affecting package bazel for versions less than 5.3.2-1

A bad credential handling in the remote assets API for Bazel versions prior to 5.3.2 and 4.2.3 sends all user-provided credentials instead of only the required ones for the requests. We recommend upgrading to versions later than or equal to 5.3.2 or 4.2.3...

CVE-2022-3244

creationtimestamp| type| source ---|---|--- 2022-10-17 16:13:10+00:00| seen| https://t.me/cibsecurity/51565 2025-05-13 16:30:47+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16165...

CVE-2022-3242 HTML code Injection in template search keyword in microweber/microweber

Code Injection in GitHub repository microweber/microweber prior to 1.3.2...

CVE-2022-2840

The Zephyr Project Manager WordPress plugin before 3.2.5 does not sanitise and escape various parameters before using them in SQL statements via various AJAX actions available to both unauthenticated and authenticated users, leading to SQL injections...

GHSA-3PGJ-PG6C-R5P7 OAuthLib vulnerable to DoS when attacker provides malicious IPV6 URI

Impact - Attacker providing malicious redirect uri can cause DoS to oauthlib's web application. - Attacker can also leverage usage of urivalidate functions depending where it is used. What kind of vulnerability is it? Who is impacted? Oauthlib applications using OAuth2.0 provider support or use...