Lucene search
K

CVE-2024-53357

🗓️ 31 Jan 2025 00:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 77 Views🌐 WEB

AES encryption keys in EasyVirt DCScope and CO2Scope are not stored securely, risking password safety.

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
Circl
CVE-2024-53357
31 Jan 202522:15
circl
CNNVD
EasyVirt DC Scope和EasyVirt CO2 Scope 安全漏洞
31 Jan 202500:00
cnnvd
Cvelist
CVE-2024-53357
31 Jan 202500:00
cvelist
EUVD
EUVD-2024-51956
3 Oct 202520:07
euvd
NVD
CVE-2024-53357
31 Jan 202522:15
nvd
OSV
CVE-2024-53357
31 Jan 202522:15
osv
Positive Technologies
PT-2025-2961 · Easyvirt · Easyvirt Dcscope +1
31 Jan 202500:00
ptsecurity
RedhatCVE
CVE-2024-53357
10 Feb 202523:23
redhatcve
Vulnrichment
CVE-2024-53357
31 Jan 202500:00
vulnrichment
NVD
Node
easyvirtco2scopeRange1.3.0
OR
easyvirtdcscopeRange8.6.0
ParameterPositionPathDescriptionCWE
aliasrequest body/api/user/addaliasSQL injection vulnerability enabling adding an admin alias via /api/user/addaliasCWE-798
usernamerequest body/api/user/addaliasSQL injection vulnerability enabling adding an admin alias via /api/user/addaliasCWE-798
passwordrequest body/api/user/addaliasSQL injection vulnerability enabling adding an admin alias via /api/user/addaliasCWE-798
alias_idrequest body/api/user/updatealiasrouteSQL injection vulnerability enabling modifying a user via /api/user/updatealiasrouteCWE-798
usernamerequest body/api/user/updatealiasrouteSQL injection vulnerability enabling modifying a user via /api/user/updatealiasrouteCWE-798
updatesrequest body/api/user/updatealiasrouteSQL injection vulnerability enabling modifying a user via /api/user/updatealiasrouteCWE-798
alias_idrequest body/api/user/delaliasSQL injection vulnerability enabling deleting users via /api/user/delaliasCWE-798
filterquery param/api/user/aliasesSQL injection vulnerability enabling retrieving users via /api/user/aliasesCWE-798
limitquery param/api/user/aliasesSQL injection vulnerability enabling retrieving users via /api/user/aliasesCWE-798
grouprequest body/api/user/adduserrouteSQL injection vulnerability enabling adding a root group via /api/user/adduserrouteCWE-798
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 08:08Current
7.8High risk
Vulners AI Score7.8
CVSS 3.17.5
EPSS0.00472
SSVC
77