Lucene search
+L

3806 matches found

Circl
Circl
•added 2024/03/06 6:26 p.m.•18 views

CVE-2024-28149

creationtimestamp| type| source ---|---|--- 2024-03-06 18:26:46+00:00| seen| https://t.me/ctinow/201620 2024-03-06 19:56:35+00:00| seen| https://t.me/ctinow/201723...

6.5CVSS7AI score0.00704EPSS
SaveExploits0References2
osv-bit
osv-bit
•added 2024/03/06 11:23 a.m.•37 views

BIT-GITLAB-2020-10956

GitLab 8.10 and later through 12.9 is vulnerable to an SSRF in a project import note feature...

9.8CVSS9.2AI score0.01448EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/03/04 12:00 a.m.•12 views

PT-2024-40960 · Gtk-Rs · Gtk-Rs

Name of the Vulnerable Software and Affected Versions: gtk-rs affected versions not specified Description: The gtk-rs GTK3 bindings are no longer maintained. The maintainers have archived the repository and added a note to the crate description and its README.md that the crates are no longer...

6.9AI score
SaveExploits0References4
OSV
OSV
•added 2024/03/01 4:15 p.m.•18 views

CVE-2024-27139

UNSUPPORTED WHEN ASSIGNED Incorrect Authorization vulnerability in Apache Archiva: a vulnerability in Apache Archiva allows an unauthenticated attacker to modify account data, potentially leading to account takeover. This issue affects Apache Archiva: from 2.0.0. As this project is retired, we do...

7.5CVSS7.1AI score0.0133EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/02/26 12:00 a.m.•12 views

PT-2024-21636 · Undefined · Undefined

CVE-2024-27084 Rejected reason: This CVE is a duplicate of CVE-2024-1631. https://t.co/234axZtati...

9.1CVSS9.1AI score0.00882EPSS
SaveExploits1References3
Prion
Prion
•added 2024/02/22 8:15 p.m.•26 views

Deserialization of untrusted data

A vulnerability classified as critical was found in vanderSchaar LAB AutoPrognosis 0.1.21. This vulnerability affects the function loadmodelfromfile of the component Release Note Handler. The manipulation leads to deserialization. The attack can be initiated remotely. The complexity of an attack ...

5.1CVSS7AI score0.00684EPSS
SaveExploits0References3
Mend
Mend
•added 2024/02/22 7:31 p.m.•5 views

CVE-2024-1748

A vulnerability classified as critical was found in vanderSchaar LAB AutoPrognosis 0.1.21. This vulnerability affects the function loadmodelfromfile of the component Release Note Handler. The manipulation leads to deserialization. The attack can be initiated remotely. The complexity of an attack ...

7.5CVSS0.00684EPSS
SaveExploits0References5
CVE
CVE
•added 2024/02/22 7:31 p.m.•110 views

CVE-2024-1748

CVE-2024-1748 affects van_der_Schaar LAB AutoPrognosis 0.1.21, specifically the Release Note Handler's function load_model_from_file , where input deserialization leads to a vulnerability. Descriptions across sources indicate remote initiation with high impact on confidentiality, integrity, and a...

7.5CVSS5.1AI score0.00684EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2024/02/22 7:31 p.m.•35 views

CVE-2024-1748 van_der_Schaar LAB AutoPrognosis Release Note load_model_from_file deserialization

A vulnerability classified as critical was found in vanderSchaar LAB AutoPrognosis 0.1.21. This vulnerability affects the function loadmodelfromfile of the component Release Note Handler. The manipulation leads to deserialization. The attack can be initiated remotely. The complexity of an attack ...

5.1CVSS5.4AI score0.00684EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/02/22 12:00 a.m.•19 views

PT-2024-18273 · Van Der Schaar · Van Der Schaar Lab Autoprognosis

Name of the Vulnerable Software and Affected Versions: van der Schaar LAB AutoPrognosis version 0.1.21 Description: A critical vulnerability was found in the function load model from file of the component Release Note Handler. The manipulation leads to deserialization. The attack can be initiated...

7.5CVSS6.9AI score0.00684EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2024/02/22 12:00 a.m.•19 views

van_der_Schaar LAB AutoPrognosis Code Issue Vulnerability

AutoPrognosis is a vanderSchaar LAB open source predictive modeling pipeline for clinical prognosis. A code issue vulnerability exists in vanderSchaar LAB AutoPrognosis version 0.1.21, which stems from a security vulnerability in the loadmodelfromfile function in the component Release Note Handle...

7.5CVSS6.9AI score0.00684EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/22 12:00 a.m.•10 views

CVE-2024-1748: Deserialization of Untrusted Data

A vulnerability classified as critical was found in vanderSchaar LAB AutoPrognosis 0.1.21. This vulnerability affects the function loadmodelfromfile of the component Release Note Handler. The manipulation leads to deserialization. The attack can be initiated remotely. The complexity of an attack ...

7.5CVSS4.9AI score0.00684EPSS
SaveExploits0References2
OSV
OSV
•added 2024/02/14 3:15 p.m.•21 views

CVE-2024-25221

A cross-site scripting XSS vulnerability in Task Manager App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Note Section parameter at /TaskManager/Tasks.php...

6.1CVSS5.9AI score0.00413EPSS
SaveExploits1References1
NVD
NVD
•added 2024/02/14 3:15 p.m.•27 views

CVE-2024-25221

A cross-site scripting XSS vulnerability in Task Manager App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Note Section parameter at /TaskManager/Tasks.php...

6.1CVSS5.9AI score0.00413EPSS
SaveExploits1References1
Prion
Prion
•added 2024/02/14 3:15 p.m.•78 views

Cross site scripting

A cross-site scripting XSS vulnerability in Task Manager App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Note Section parameter at /TaskManager/Tasks.php...

5.8CVSS5.9AI score0.00413EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2024/02/14 12:00 a.m.•5 views

PT-2024-20832

Name of the Vulnerable Software and Affected Versions Task Manager App version 1.0 Description A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Note Section parameter at "/TaskManager/Tasks.php". This enables...

6.1CVSS6.2AI score0.00413EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2024/02/14 12:00 a.m.•39 views

CVE-2024-25221

A cross-site scripting XSS vulnerability in Task Manager App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Note Section parameter at /TaskManager/Tasks.php...

6AI score0.00413EPSS
SaveExploits1References1
CVE
CVE
•added 2024/02/14 12:00 a.m.•77 views

CVE-2024-25221

CVE-2024-25221 affects Task Manager App v1.0, where a reflected XSS can be triggered via the Note Section parameter in /TaskManager/Tasks.php. The CVE entry lists a CVSS v3.1 base score of 6.1 (Medium) with network attack vector, low attack complexity, no privileges, user interaction required, an...

6.1CVSS5.8AI score0.00413EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/14 12:00 a.m.•7 views

CVE-2024-25221: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in Task Manager App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Note Section parameter at /TaskManager/Tasks.php...

6.1CVSS6.1AI score0.00413EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2024/02/08 12:00 a.m.•16 views

Number withdrawn

SourceCodester Employee Management System is a php-based website builder for employee performance management from SourceCodester, USA. The CVE number has been withdrawn...

6.9AI score
SaveExploits0References2
Rows per page
Query Builder