Lucene search
+L

56 matches found

osv_mini
osv_mini
•added 2026/06/23 11:17 p.m.•13 views

MINI-77P4-H8CX-6534

Bulletin has no description...

8.2CVSS7.3AI score0.00174EPSS
SaveExploits0
osv_cga
osv_cga
•added 2026/06/04 11:52 a.m.•2 views

CGA-6534-52RF-GP2J

Bulletin has no description...

3.1CVSS6.3AI score0.02717EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
•added 2026/05/01 2:11 a.m.•19 views

SUSE CVE-2026-6534

USB HID protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS5.8AI score0.0018EPSS
SaveExploits1References6
AlpineLinux
AlpineLinux
•added 2026/04/30 5:36 a.m.•84 views

CVE-2026-6534

USB HID protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS5.8AI score0.0018EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2026/04/30 12:00 a.m.•15 views

CVE-2026-6534

USB HID protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...

5.5CVSS5.8AI score0.0018EPSS
SaveExploits1References3
osv_mini
osv_mini
•added 2026/04/11 8:47 p.m.•16 views

MINI-6534-2965-W22J

Bulletin has no description...

9CVSS7.5AI score0.00658EPSS
SaveExploits0
osv_cga
osv_cga
•added 2025/10/30 7:59 p.m.•3 views

CGA-7JC9-6Q92-6534

Bulletin has no description...

6.5CVSS6.5AI score0.00604EPSS
SaveExploits0References6
NVD
NVD
•added 2025/06/24 1:15 a.m.•20 views

CVE-2025-6534

A vulnerability, which was classified as problematic, was found in xxyopen/201206030 novel-plus up to 5.1.3. This affects the function remove of the file novel-admin/src/main/java/com/java2nb/common/controller/FileController.java of the component File Handler. The manipulation leads to improper...

6.8CVSS0.0048EPSS
SaveExploits1References5
CVE
CVE
•added 2025/06/24 12:31 a.m.•62 views

CVE-2025-6534

Summary: CVE-2025-6534 affects xxyopen/201206030 novel-plus up to version 5.1.3. The vulnerability resides in the File Handler’s remove function (novel-admin/src/main/java/com/java2nb/common/controller/FileController.java) and stems from improper control of resource identifiers. The issue can be ...

6.8CVSS4.2AI score0.0048EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/06/24 12:31 a.m.•34 views

CVE-2025-6534 xxyopen/201206030 novel-plus File FileController.java remove resource injection

A vulnerability, which was classified as problematic, was found in xxyopen/201206030 novel-plus up to 5.1.3. This affects the function remove of the file novel-admin/src/main/java/com/java2nb/common/controller/FileController.java of the component File Handler. The manipulation leads to improper...

4.2CVSS0.0048EPSS
SaveExploits1References5
osv_mini
osv_mini
•added 2025/06/16 4:09 p.m.•10 views

MINI-66GR-6534-9H5F

Bulletin has no description...

7CVSS7.1AI score0.01013EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/05/23 10:26 a.m.•17 views

CVE-2024-6534

Directus v10.13.0 allows an authenticated external attacker to modify presets created by the same user to assign them to another user. This is possible because the application only validates the user parameter in the 'POST /presets' request but not in the PATCH request. When chained with...

5.4CVSS5.5AI score0.00383EPSS
SaveExploits1References1
vulnersOsv
vulnersOsv
•added 2024/08/27 7:54 p.m.•9 views

@directus/api (>=15.0.0, <=20.1.0), directus-extension-baetorra-booking (>=1.2.0, <=2.0.0) potentially affected by CVE-2024-6534 via directus (>=10.8.3, <=10.13.1)

directus NPM version =10.8.3, =15.0.0, =1.2.0, =2.0.0 Source cves: CVE-2024-6534 Source advisory: OSV:GHSA-3FFF-GQW3-VJ86...

4.3CVSS5.4AI score0.00329EPSS
SaveExploits0
Circl
Circl
•added 2024/08/15 5:56 a.m.•29 views

CVE-2024-6534

creationtimestamp| type| source ---|---|--- 2024-08-15 05:56:35+00:00| seen| https://t.me/cvedetector/3224 2024-08-15 06:46:45+00:00| seen| https://t.me/cvedetector/3228...

4.3CVSS5.3AI score0.00329EPSS
SaveExploits0References2
NVD
NVD
•added 2024/08/15 4:15 a.m.•46 views

CVE-2024-6534

Directus v10.13.0 allows an authenticated external attacker to modify presets created by the same user to assign them to another user. This is possible because the application only validates the user parameter in the 'POST /presets' request but not in the PATCH request. When chained with...

4.3CVSS0.00329EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/08/15 3:10 a.m.•57 views

CVE-2024-6534 Directus 10.13.0 - Insecure object reference via PATH presets

Directus v10.13.0 allows an authenticated external attacker to modify presets created by the same user to assign them to another user. This is possible because the application only validates the user parameter in the 'POST /presets' request but not in the PATCH request. When chained with...

4.3CVSS0.00329EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2024/08/15 3:10 a.m.•26 views

CVE-2024-6534 Directus 10.13.0 - Insecure object reference via PATH presets

Directus v10.13.0 allows an authenticated external attacker to modify presets created by the same user to assign them to another user. This is possible because the application only validates the user parameter in the 'POST /presets' request but not in the PATCH request. When chained with...

4.3CVSS5.9AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2024/08/15 3:10 a.m.•25 views

CVE-2024-6534 Directus 10.13.0 - Insecure object reference via PATH presets

Directus v10.13.0 allows an authenticated external attacker to modify presets created by the same user to assign them to another user. This is possible because the application only validates the user parameter in the 'POST /presets' request but not in the PATCH request. When chained with...

4.3CVSS5.4AI score0.00329EPSS
SaveExploits0References2
CVE
CVE
•added 2024/08/15 3:10 a.m.•117 views

CVE-2024-6534

CVE-2024-6534 affects Directus v10.13.0. An authenticated external attacker can modify presets created by the same user to assign them to another user due to insufficient validation of the user parameter in PATCH /presets (only POST /presets is validated). This vulnerability, when chained with CV...

4.3CVSS5.4AI score0.00329EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2024/08/15 3:04 a.m.•116 views

CVE-2024-6533

Directus 10.13.0 is affected by a DOM-based XSS flaw where an authenticated attacker can inject and store an attacker-controlled value that is rendered into an unsanitized DOM element on the client. The issue stems from how a parameter is stored on the server and later used by the client, enablin...

5.4CVSS6.6AI score0.00383EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder