26335 matches found
CVE-2022-28959
Multiple cross-site scripting XSS vulnerabilities in the component /spip.php of Spip Web Framework v3.1.13 and below allows attackers to execute arbitrary web scripts or HTML...
CVE-2022-37878
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to comple...
CVE-2022-37887
There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI Aruba Networks AP management protocol UDP port 8211. Successful exploitation of these vulnerabilities result...
CVE-2022-37879
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to comple...
CVE-2022-40487
ProcessWire v3.0.200 was discovered to contain multiple cross-site scripting XSS vulnerabilities via the Search Users and Search Pages function. These vulnerabilities allow attackers to execute arbitrary web scripts or HTML via injection of a crafted payload...
CVE-2022-4888
The Checkout Fields Manager WordPress plugin before 1.0.2, Abandoned Cart Recovery WordPress plugin before 1.2.5, Custom Fields for WooCommerce WordPress plugin before 1.0.4, Custom Order Number WordPress plugin through 1.0.1, Custom Registration Forms Builder WordPress plugin before 1.0.2,...
Oracle Linux 9 : nodejs:22 (ELSA-2025-7433)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-7433 advisory. - Patch fix for sqlite CVE-2025-31498 Resolves: RHEL-87319 - Update c-ares to newest version with fix for CVE-2025-31498 Resolves: RHEL-86586 - Update ...
grafana-11.6.1-1.1 on GA media (moderate)
grafana-11.6.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:15145-1 Rating: moderate Cross-References: CVE-2023-45288 CVE-2025-22870 CVSS scores: CVE-2023-45288 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2023-45288 SUSE : 6.9...
SUSE SLES15 Security Update : kernel RT (Live Patch 5 for SLE 15 SP6) (SUSE-SU-2025:01652-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01652-1 advisory. This update for the Linux Kernel 6.4.0-1506001017 fixes several issues. The following security issues were fixed: - CVE-2024-53042: ipv4:...
Intel System Security Report and System Resources Defense
Intel has informed HP of potential security vulnerabilities in some Intel® System Security Report and System Resource Defense PPAM firmware which might allow escalation of privilege or information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Intel h...
PT-2025-22808 · Unknown · Phpgurukul Student Management System
Name of the Vulnerable Software and Affected Versions: PHPGURUKUL Student Management System using PHP and MySQL version 1 Description: The issue concerns multiple SQL injection vulnerabilities. These vulnerabilities are located at the "/studentrecordms/password-recovery.php" endpoint, specificall...
DSA-5924-1 intel-microcode - security update
Bulletin has no description...
CVE-2022-23454
Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege escalation, compromise of integrity, allowed communication with untrusted clients, and unauthorized modification of files...
CVE-2022-45710
IP-COM M50 V15.11.0.3310768 was discovered to contain multiple buffer overflows via the pEnable, pLevel, and pModule parameters in the formSetDebugCfg function...
CVE-2025-47181
creationtimestamp| type| source ---|---|--- 2025-05-22 22:50:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17363 2025-05-22 23:28:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpsbf2rfmv2s 2025-05-23 06:11:33+00:00| seen|...
CVE-2022-28932
D-Link DSL-G2452DG HW:T1\\tFW:ME2.00 was discovered to contain insecure permissions...
CVE-2022-28623
Security vulnerabilities in HPE IceWall SSO 10.0 certd could be exploited remotely to allow SQL injection or unauthorized data injection. HPE has provided the following updated modules to resolve these vulnerabilities. HPE IceWall SSO version 10.0 certd library Patch 9 for RHEL and HPE IceWall SS...
CVE-2022-25012
Argus Surveillance DVR v4.0 employs weak password encryption...
CVE-2022-23695
Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information...