Lucene search
+L

28 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•26 views

EUVD-2014-2769

Malware in sbrugna...

7.8CVSS5.8AI score0.01799EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2012-4594

Malware in sbrugna...

5.8CVSS5.8AI score0.00875EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•35 views

EUVD-2022-50393

Malicious code in bioql PyPI...

8.1CVSS7.7AI score0.00505EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 12:26 a.m.•23 views

CVE-2022-47634

M-Link Archive Server in Isode M-Link R16.2v1 through R17.0 before R17.0v24 allows non-administrative users to access and manipulate archive data via certain HTTP endpoints, aka LINK-2867...

8.1CVSS7.6AI score0.00505EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/22 2:48 a.m.•29 views

CVE-2012-4669

M-Link R14.6 before R14.6v14 and R15.1 before R15.1v10 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted...

5.8CVSS5.8AI score0.00875EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/01/01 8:15 a.m.•26 views

CVE-2022-47634

M-Link Archive Server in Isode M-Link R16.2v1 through R17.0 before R17.0v24 allows non-administrative users to access and manipulate archive data via certain HTTP endpoints, aka LINK-2867...

8.1CVSS5.8AI score0.00505EPSS
SaveExploits0References1
NVD
NVD
•added 2023/01/01 8:15 a.m.•29 views

CVE-2022-47634

M-Link Archive Server in Isode M-Link R16.2v1 through R17.0 before R17.0v24 allows non-administrative users to access and manipulate archive data via certain HTTP endpoints, aka LINK-2867...

8.1CVSS8AI score0.00505EPSS
SaveExploits0References1
Prion
Prion
•added 2023/01/01 8:15 a.m.•33 views

Code injection

M-Link Archive Server in Isode M-Link R16.2v1 through R17.0 before R17.0v24 allows non-administrative users to access and manipulate archive data via certain HTTP endpoints, aka LINK-2867...

5.5CVSS7.9AI score0.00505EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/01 12:00 a.m.•10 views

CVE-2022-47634: Improper Access Control

M-Link Archive Server in Isode M-Link R16.2v1 through R17.0 before R17.0v24 allows non-administrative users to access and manipulate archive data via certain HTTP endpoints, aka LINK-2867...

8.1CVSS5.8AI score0.00505EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/01/01 12:00 a.m.•21 views

Isode M-Link security vulnerabilities

Isode M-Link is an Isode core instant messaging and status server based on the XMPP Extensible Messaging and Status Protocol standard from Isode UK. A security vulnerability exists in Isode M-Link versions R16.2v1 through R17.0v23, which stems from a vulnerability that allows unmanaged users to...

8.1CVSS7.7AI score0.00505EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/01/01 12:00 a.m.•35 views

PT-2023-15445 · Isode · M-Link

Name of the Vulnerable Software and Affected Versions: Isode M-Link versions R16.2v1 through R17.0 before R17.0v24 Description: The issue allows non-administrative users to access and manipulate archive data via certain HTTP endpoints. Recommendations: For versions R16.2v1 through R17.0 before...

8.1CVSS7.2AI score0.00505EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2023/01/01 12:00 a.m.•15 views

CVE-2022-47634

M-Link Archive Server in Isode M-Link R16.2v1 through R17.0 before R17.0v24 allows non-administrative users to access and manipulate archive data via certain HTTP endpoints, aka LINK-2867...

6.8AI score0.00505EPSS
SaveExploits0References1
CVE
CVE
•added 2023/01/01 12:00 a.m.•104 views

CVE-2022-47634

Isode M‑Link vulnerability CVE-2022-47634 affects Isode M-Link versions R16.2v1 through R17.0 prior to R17.0v24. The issue allows non‑administrative users to access and manipulate archive data via certain HTTP endpoints (LINK-2867). Remediation per PT-2023-15445 is to upgrade to version R17.0v24 ...

8.1CVSS7.9AI score0.00505EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/01/01 12:00 a.m.•38 views

CVE-2022-47634

M-Link Archive Server in Isode M-Link R16.2v1 through R17.0 before R17.0v24 allows non-administrative users to access and manipulate archive data via certain HTTP endpoints, aka LINK-2867...

8.2AI score0.00505EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2018/09/02 12:00 a.m.•11 views

PT-2018-13509

Name of the Vulnerable Software and Affected Versions WUZHI CMS version 4.1.0 Description The issue is related to a form parameter in a specific page. The remark parameter in the form on the page index.php?m=link&f=index&v=add is vulnerable to XSS attacks. Recommendations For WUZHI CMS version...

6.1CVSS0.00865EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/05/26 12:00 a.m.•11 views

CVE-2018-11493: Cross-Site Request Forgery (CSRF)

An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can add a friendship link via index.php?m=link&f=index&v=add...

8.8CVSS7.8AI score0.00628EPSS
SaveExploits1References2
NVD
NVD
•added 2014/04/11 1:55 a.m.•29 views

CVE-2014-2742

Isode M-Link before 16.0v7 does not properly restrict the processing of compressed XML elements, which allows remote attackers to cause a denial of service resource consumption via a crafted XMPP stream, aka an "xmppbomb" attack...

7.8CVSS6.6AI score0.01799EPSS
SaveExploits0References3
Prion
Prion
•added 2014/04/11 1:55 a.m.•30 views

Code injection

Isode M-Link before 16.0v7 does not properly restrict the processing of compressed XML elements, which allows remote attackers to cause a denial of service resource consumption via a crafted XMPP stream, aka an "xmppbomb" attack...

7.8CVSS7.1AI score0.01799EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2014/04/11 1:00 a.m.•66 views

CVE-2014-2742

Summary: CVE-2014-2742 affects Isode M-Link prior to version 16.0v7. The issue is a failure to properly restrict the processing of compressed XML elements, enabling a remote attacker to trigger a denial of service through a crafted XMPP stream (an “xmppbomb”). Affected software: Isode M-Link (bef...

7.8CVSS6.8AI score0.01799EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2014/04/11 1:00 a.m.•35 views

CVE-2014-2742

Isode M-Link before 16.0v7 does not properly restrict the processing of compressed XML elements, which allows remote attackers to cause a denial of service resource consumption via a crafted XMPP stream, aka an "xmppbomb" attack...

6.6AI score0.01799EPSS
SaveExploits0References3
Rows per page
Query Builder