Lucene search
+L

29 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/22 12:00 a.m.•1 views

CVE-2025-53236: Missing Authorization

Missing Authorization vulnerability in AndonDesign UDesign Core u-design-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UDesign Core: from n/a through = 4.14.0...

6.3CVSS5.9AI score0.00241EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/22 12:00 a.m.•16 views

PT-2025-43253

Name of the Vulnerable Software and Affected Versions AndonDesign UDesign Core versions through 4.14.0 Description An issue exists in AndonDesign UDesign Core u-design-core related to incorrectly configured access control security levels, allowing for missing authorization. The issue allows...

6.3CVSS6.6AI score0.00241EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2024-32640

Malicious code in bioql PyPI...

7.1CVSS6.4AI score0.00354EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/04 12:00 a.m.•5 views

CVE-2025-24757: Missing Authorization

Missing Authorization vulnerability in AndonDesign uDesign udesign.This issue affects uDesign: from n/a through = 4.11.2...

5.3CVSS5.8AI score0.00245EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 12:05 a.m.•20 views

CVE-2024-4077

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AndonDesign UDesign allows Reflected XSS.This issue affects UDesign: from n/a through 4.7.3...

7.1CVSS5.2AI score0.00354EPSS
SaveExploits0References1
NVD
NVD
•added 2024/04/25 10:15 a.m.•27 views

CVE-2024-4077

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AndonDesign UDesign allows Reflected XSS.This issue affects UDesign: from n/a through 4.7.3...

7.1CVSS6.9AI score0.00354EPSS
SaveExploits0References1
CVE
CVE
•added 2024/04/25 9:15 a.m.•86 views

CVE-2024-4077

CVE-2024-4077 targets AndonDesign UDesign (WordPress theme). The vulnerability is an improper neutralization of input during web page generation, enabling a Reflected XSS. Affected version range is UDesign: n/a through 4.7.3. CVSS v3.1 base score 7.1 (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L); attack ...

7.1CVSS5.2AI score0.00354EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/25 12:00 a.m.•5 views

CVE-2024-4077: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in AndonDesign UDesign allows Reflected XSS.This issue affects UDesign: from n/a through 4.7.3...

7.1CVSS5.8AI score0.00354EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/04/25 12:00 a.m.•19 views

PT-2024-29031 · Andondesign · Udesign

Name of the Vulnerable Software and Affected Versions: AndonDesign UDesign versions n/a through 4.7.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to...

7.1CVSS6.5AI score0.00354EPSS
SaveExploits0References3
Rows per page
Query Builder