Lucene search
K

24 matches found

OSV
OSV
added 12 hours ago4 views

ROOT-OS-DEBIAN-11-CVE-2024-46720 CVE-2024-46720 in rootio-linux - Patched by Root

Root has patched CVE-2024-46720 in the rootio-linux package for Root:Debian:11. Multiple fixed versions available...

5.5CVSS6.9AI score0.00073EPSS
Exploits0
OSV
OSV
added yesterday1 views

ROOT-OS-UBUNTU-2204-CVE-2024-46720 CVE-2024-46720 in rootio-linux - Patched by Root

Root has patched CVE-2024-46720 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

5.5CVSS5.4AI score0.00073EPSS
Exploits0
EUVD
EUVD
added 2026/05/26 10:48 p.m.8 views

EUVD-2026-32021

Mojolicious::Plugin::Statsd versions through 0.04 for Perl allowed metric injections. The metric names and set values were not checked for newlines, colons or pipes. Metrics generated from untrusted sources could inject additional statsd metrics. Version 0.06 changes the module from being a stats...

8.2CVSS5.8AI score0.00016EPSS
Exploits0References3
Circl
Circl
added 2026/05/17 7:7 p.m.6 views

CVE-2026-46720

creationtimestamp| type| source ---|---|--- 2026-05-17 19:07:41+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mm32ojjpes2b 2026-05-17 22:37:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm3gfpgtxa2i...

8.2CVSS5.8AI score0.00016EPSS
Exploits0References2
vulnersOsv
vulnersOsv
added 2026/03/19 6:37 p.m.4 views

@kids-reporter/cms-core (>=1.0.17 <=1.0.32), @kids-reporter/draft-editor (>=1.0.19 <=1.0.32) potentially affected by CVE-2025-46720 +1 more via @keystone-6/core (=6.5.1)

@keystone-6/core NPM version =6.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on @keystone-6/core and may be impacted: - @kids-reporter/cms-core =1.0.17, =1.0.19, =1.0.32 Source cves: CVE-2025-46720, CVE-2026-33326 Source advisory:...

4.3CVSS5.8AI score0.00062EPSS
Exploits0
OSV
OSV
added 2026/03/19 6:37 p.m.0 views

GHSA-CGCG-Q9JH-5PR2 @keystone-6/core: `isFilterable` bypass via `cursor` parameter in findMany (CVE-2025-46720 incomplete fix)

Summary field.isFilterable access control can be bypassed in findMany queries by passing a cursor. This can be used to confirm the existence of records by protected field values. The fix for CVE-2025-46720 field-level isFilterable bypass for update and delete mutations added checks to the where...

4.3CVSS5.8AI score0.00013EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2026/01/22 12:0 a.m.2 views

Azure Linux 3.0 Security Update: kernel (CVE-2024-46720)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46720 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix dereference after null...

5.5CVSS6.3AI score0.00073EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/07 7:14 p.m.11 views

CVE-2025-46720

Keystone is a content management system for Node.js. Prior to version 6.5.0, field.isFilterable access control can be bypassed in update and delete mutations by adding additional unique filters. These filters can be used as an oracle to probe the existence or value of otherwise unreadable fields...

4.3CVSS6.7AI score0.00062EPSS
Exploits0References1
Circl
Circl
added 2025/05/05 9:44 p.m.1 views

CVE-2025-46720

creationtimestamp| type| source ---|---|--- 2025-05-05 21:44:13+00:00| seen| https://t.me/cvedetector/24478...

4.3CVSS4.8AI score0.00062EPSS
Exploits0References1
NVD
NVD
added 2025/05/05 7:15 p.m.15 views

CVE-2025-46720

Keystone is a content management system for Node.js. Prior to version 6.5.0, field.isFilterable access control can be bypassed in update and delete mutations by adding additional unique filters. These filters can be used as an oracle to probe the existence or value of otherwise unreadable fields...

4.3CVSS0.00062EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/05/05 6:53 p.m.11 views

CVE-2025-46720 Keystone has an unintended `isFilterable` bypass that can be used as an oracle to match hidden fields

Keystone is a content management system for Node.js. Prior to version 6.5.0, field.isFilterable access control can be bypassed in update and delete mutations by adding additional unique filters. These filters can be used as an oracle to probe the existence or value of otherwise unreadable fields...

3.1CVSS3.8AI score0.00062EPSS
Exploits0References1
CVE
CVE
added 2025/05/05 6:53 p.m.62 views

CVE-2025-46720

Keystone (Node.js CMS) prior to 6.5.0 has an Access Control Bypass in update/delete mutations: when a where clause uses multiple unique filters, the isFilterable check can be bypassed, enabling inference of hidden field values. The issue is patched in @keystone-6/core v6.5.0. Mitigations from the...

4.3CVSS3.8AI score0.00062EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2025/05/05 6:53 p.m.14 views

CVE-2025-46720 Keystone has an unintended `isFilterable` bypass that can be used as an oracle to match hidden fields

Keystone is a content management system for Node.js. Prior to version 6.5.0, field.isFilterable access control can be bypassed in update and delete mutations by adding additional unique filters. These filters can be used as an oracle to probe the existence or value of otherwise unreadable fields...

3.1CVSS0.00062EPSS
Exploits0References1
Circl
Circl
added 2025/05/01 4:14 a.m.1 views

CVE-2023-46720

creationtimestamp| type| source ---|---|--- 2025-05-01 04:14:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14227...

7.8CVSS7.1AI score0.00066EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2024-46720

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: fix dereference after null check check the pointer hive before use. CVE-2024-46720 Note that Nessus relies on the presence of the package as reporte...

5.5CVSS6.8AI score0.00073EPSS
Exploits0References4
CBLMariner
CBLMariner
added 2024/10/15 6:24 p.m.12 views

CVE-2024-46720 affecting package kernel for versions less than 6.6.51.1-5

CVE-2024-46720 affecting package kernel for versions less than 6.6.51.1-5. An upgraded version of the package is available that resolves this issue...

5.5CVSS6.8AI score0.00073EPSS
Exploits0
SUSE CVE
SUSE CVE
added 2024/09/19 3:11 a.m.1 views

SUSE CVE-2024-46720

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix dereference after null check check the pointer hive before use...

5.5CVSS6.4AI score0.00073EPSS
Exploits0References15
Circl
Circl
added 2024/09/18 10:1 a.m.2 views

CVE-2024-46720

creationtimestamp| type| source ---|---|--- 2024-09-18 10:01:25+00:00| seen| https://t.me/cvedetector/5910 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen|...

5.5CVSS6.7AI score0.00073EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2024/09/18 8:44 a.m.12 views

CVE-2024-46720

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix dereference after null check check the pointer hive before use...

5.5CVSS7AI score0.00073EPSS
Exploits0References4
Debian CVE
Debian CVE
added 2024/09/18 6:32 a.m.11 views

CVE-2024-46720

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix dereference after null check check the pointer hive before use...

5.5CVSS5.7AI score0.00073EPSS
Exploits0
Rows per page
Query Builder