CVE-2022-46356

Potential vulnerabilities have been identified in HP Security Manager which may allow escalation of privilege, arbitrary code execution, and information disclosure...

CVE-2022-32952

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2022-40167

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none...

The vulnerability in the `convert_strings` function of the `tinfo/read_entry.c` component in the input/output library for the Ncurses terminal control module allows a hacker to access confidential data and also trigger a service denial.

The vulnerability of the convertstrings function in the tinfo/readentry.c component of the input/output library for the Ncurses terminal control module is related to reading data beyond the allowed buffer limits. Exploiting this vulnerability allows an attacker to access confidential data and als...

CVE-2022-41903

creationtimestamp| type| source ---|---|--- 2023-01-18 16:10:08+00:00| seen| https://t.me/truesecator/3955 2023-01-19 12:11:09+00:00| seen| MISP/81745fb9-5708-474a-970d-c009efdc14a7 2023-01-19 14:59:30+00:00| seen| https://t.me/ctinow/87892 2023-01-19 15:21:31+00:00| published-proof-of-concept|...

GSD-2023-1000121 dpaa2-switch: Fix memory leak in dpaa2_switch_acl_entry_add() and dpaa2_switch_acl_entry_remove()

dpaa2-switch: Fix memory leak in dpaa2switchaclentryadd and dpaa2switchaclentryremove This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.83 b...

PT-2023-33198 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.83 Description: A memory leak issue was discovered in the dpaa2-switch component, specifically in the dpaa2 switch acl entry add and dpaa2 switch acl entry remove functions. The actual impact and attack...

PT-2023-34319 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.163 Description: The issue concerns the execution of long tasks when adding or deleting entries in the netfilter ipset. The actual impact and attack plausibility have not yet been proven. Recommendations:...

CVE-2023-0298

creationtimestamp| type| source ---|---|--- 2023-01-14 12:36:53+00:00| seen| https://t.me/cibsecurity/56505...

PowerHuntShares - Audit Script Designed In Inventory, Analyze, And Report Excessive Privileges Configured On Active Directory Domains

PowerHuntShares is design to automatically inventory, analyze, and report excessive privilege assigned to SMB shares on Active Directory domain joined computers. It is intented to help IAM and other blue teams gain a better understand of their SMB Share attack surface and provides data insights t...

CVE-2023-22958

creationtimestamp| type| source ---|---|--- 2023-01-11 07:29:15+00:00| seen| https://t.me/cibsecurity/56335 2023-11-23 21:02:15+00:00| seen| https://t.me/arpsyndicate/508...

编号撤回

This CVE number has been withdrawn...

CVE-2022-43788

To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...

PT-2025-54168

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to interrupt request IRQ handling on the arm64 architecture. Specifically, the filter irq stacks function, intended to filter IRQ-related entries...

CVE-2022-3692

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none...

CVE-2022-4805

creationtimestamp| type| source ---|---|--- 2022-12-28 16:12:26+00:00| seen| https://t.me/cibsecurity/55485 2025-04-10 17:49:17+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11295...

FlatPress 跨站脚本漏洞

FlatPress is a Php-based blogging system from the FlatPress community that does not require database support. A cross-site scripting vulnerability exists in FlatPress, which stems from a problem with an unknown part of the admin/panels/entry/admin.entry.list.php file in the Admin Area component...

Cross site scripting

A vulnerability classified as problematic has been found in OpenMRS HTML Form Entry UI Framework Integration Module up to 1.x. This affects an unknown part. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 2.0.0 is able to addres...

CVE-2021-4284

OpenMRS HTML Form Entry UI Framework Integration Module (up to 1.x) contains a cross-site scripting vulnerability. The affected component is tied to the Single-Input UI Framework Integration Module, with remote initiation possible and no specific affected version beyond 1.x identified in the prov...

OpenMRS 跨站脚本漏洞

OpenMRS is an open source electronic medical record system from OpenMRS, Inc. A cross-site scripting vulnerability exists in OpenMRS openmrs-module-htmlformentryui versions prior to 2.0.0, which stems from an unknown portion of the Single-Input UI Framework Integration Module, where manipulation...