16 matches found
MongoDB 7.0.x < 7.0.39 / 8.0.x < 8.0.28 / 8.3.x < 8.3.7 Improper Access Control (SERVER-127689)
The version of MongoDB installed on the remote host is 7.0.x prior to 7.0.39, 8.0.x prior to 8.0.28, or 8.3.x prior to 8.3.7. It is, therefore, affected by a vulnerability: - An authenticated user may be able to view session metadata belonging to other users on the system through the $listSession...
CVE-2025-13061
A vulnerability was detected in itsourcecode Online Voting System 1.0. This impacts an unknown function of the file /index.php?page=managevoting. Performing manipulation results in unrestricted upload. The attack is possible to be carried out remotely. The exploit is now public and may be used...
CVE-2025-13061
creationtimestamp| type| source ---|---|--- 2025-11-12 22:22:10+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5horrwpy4g2...
CVE-2025-13061
A vulnerability was detected in itsourcecode Online Voting System 1.0. This impacts an unknown function of the file /index.php?page=managevoting. Performing manipulation results in unrestricted upload. The attack is possible to be carried out remotely. The exploit is now public and may be used...
Linux Distros Unpatched Vulnerability : CVE-2017-13061
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ImageMagick 7.0.6-5, a length-validation vulnerability was found in the function ReadPSDLayersInternal in coders/psd.c, which allows attackers to cause a...
CVE-2024-13061
creationtimestamp| type| source ---|---|--- 2024-12-31 11:18:08+00:00| seen| https://infosec.exchange/users/cve/statuses/113747157856589140 2024-12-31 13:42:40+00:00| seen| https://t.me/cvedetector/14005...
CVE-2024-13061 2100 Technology Electronic Official Document Management System - Authentication Bypass
The Electronic Official Document Management System from 2100 Technology has an Authentication Bypass vulnerability. Although the product enforces an IP whitelist for the API used to query user tokens, unauthenticated remote attackers can still deceive the server to obtain tokens of arbitrary user...
CVE-2024-13061
The CVE-2024-13061 entry concerns the Electronic Official Document Management System from 2100 Technology with an authentication bypass. The root cause, as documented, is that unauthenticated remote attackers can obtain tokens for arbitrary users despite an IP whitelist protecting the API used to...
CVE-2020-13061
CVE-2020-13061 is rejected/not used and does not represent an active vulnerability entry.
SUSE: Security Advisory (SUSE-SU-2018:0043-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2018:0017-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE-SU-2018:0043-1 Security update for ImageMagick
This update for ImageMagick fixes several issues. These security issues were fixed: - CVE-2017-14343: Fixed a memory leak vulnerability in ReadXCFImage in coders/xcf.c via a crafted xcf image file bsc1058422. - CVE-2017-12691: The ReadOneLayer function in coders/xcf.c allowed remote attackers to...
openSUSE: Security Advisory for ImageMagick (openSUSE-SU-2018:0025-1)
The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2017-13061
CVE-2017-13061 : ImageMagick 7.0.6-5 contains a length-validation vulnerability in ReadPSDLayersInternal (coders/psd.c) that allows a crafted PSD file to trigger a denial of service via memory exhaustion in ReadPSDImage. Root cause is insufficient validation of PSD layer data, leading to memory e...
CVE-2017-13061
In ImageMagick 7.0.6-5, a length-validation vulnerability was found in the function ReadPSDLayersInternal in coders/psd.c, which allows attackers to cause a denial of service ReadPSDImage memory exhaustion via a crafted file...