Lucene search
+L

27 matches found

RedhatCVE
RedhatCVE
•added 2026/01/28 9:17 a.m.•49 views

CVE-2026-1464

Integer Overflow or Wraparound vulnerability in MuntashirAkon AppManager app/src/main/java/org/apache/commons/compress/archivers/tar modules. This vulnerability is associated with program files TarUtils.Java. This issue affects AppManager: before 4.0.4...

4.6CVSS5.9AI score0.00147EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/01/27 8:18 a.m.•24 views

EUVD-2026-4716

Integer Overflow or Wraparound vulnerability in MuntashirAkon AppManager app/src/main/java/org/apache/commons/compress/archivers/tar modules. This vulnerability is associated with program files TarUtils.Java. This issue affects AppManager: before 4.0.4...

4.6CVSS5.9AI score0.00147EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/01/27 8:18 a.m.•5 views

CVE-2026-1464

Integer Overflow or Wraparound vulnerability in MuntashirAkon AppManager app/src/main/java/org/apache/commons/compress/archivers/tar modules. This vulnerability is associated with program files TarUtils.Java. This issue affects AppManager: before 4.0.4...

4.6CVSS5.9AI score0.00147EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/01/27 8:18 a.m.•5 views

CVE-2026-1464 A possible integer overflow vulnerability in RawTherapee/RawTherapee

Integer Overflow or Wraparound vulnerability in MuntashirAkon AppManager app/src/main/java/org/apache/commons/compress/archivers/tar modules. This vulnerability is associated with program files TarUtils.Java. This issue affects AppManager: before 4.0.4...

4.6CVSS5.9AI score0.00147EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/27 8:18 a.m.•35 views

CVE-2026-1464

CVE-2026-1464 describes an Integer Overflow or Wraparound vulnerability in MuntashirAkon AppManager, specifically in the tar utilities (app/src/main/java/org/apache/commons/compress/archivers/tar modules, TarUtils.Java). The issue affects AppManager versions before 4.0.4. Connected records reiter...

4.6CVSS5.9AI score0.00147EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/01/27 8:18 a.m.•45 views

CVE-2026-1464 A possible integer overflow vulnerability in RawTherapee/RawTherapee

Integer Overflow or Wraparound vulnerability in MuntashirAkon AppManager app/src/main/java/org/apache/commons/compress/archivers/tar modules. This vulnerability is associated with program files TarUtils.Java. This issue affects AppManager: before 4.0.4...

4.6CVSS0.00147EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/27 12:00 a.m.•2 views

CVE-2026-1464: Integer Overflow or Wraparound

Integer Overflow or Wraparound vulnerability in MuntashirAkon AppManager app/src/main/java/org/apache/commons/compress/archivers/tar modules. This vulnerability is associated with program files TarUtils.Java. This issue affects AppManager: before 4.0.4...

4.6CVSS5.8AI score0.00147EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/27 12:00 a.m.•29 views

PT-2026-4860

Integer Overflow or Wraparound vulnerability in MuntashirAkon AppManager app/src/main/java/org/apache/commons/compress/archivers/tar modules. This vulnerability is associated with program files TarUtils.Java. This issue affects AppManager: before 4.0.4...

4.6CVSS5.9AI score0.00147EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2024-33533

Malicious code in bioql PyPI...

8.2CVSS6.6AI score0.00502EPSS
SaveExploits0References6
NVD
NVD
•added 2025/05/22 7:15 p.m.•15 views

CVE-2024-40459

An issue in Ocuco Innovation APPMANAGER.EXE v.2.10.24.51 allows a local attacker to escalate privileges via the application manager function...

7.8CVSS0.00204EPSS
SaveExploits1References2
OSV
OSV
•added 2025/05/22 7:15 p.m.•12 views

CVE-2024-40459

An issue in Ocuco Innovation APPMANAGER.EXE v.2.10.24.51 allows a local attacker to escalate privileges via the application manager function...

7.8CVSS5.8AI score0.00204EPSS
SaveExploits1References2
NVD
NVD
•added 2024/12/06 1:15 p.m.•30 views

CVE-2024-10776

Lua apps can be deployed, removed, started, reloaded or stopped without authorization via AppManager. This allows an attacker to remove legitimate apps creating a DoS attack, read and write files or load apps that use all features of the product available to a customer...

8.2CVSS0.00502EPSS
SaveExploits0References6
CVE
CVE
•added 2024/12/06 12:38 p.m.•66 views

CVE-2024-10776

CVE-2024-10776 concerns SICK InspectorP61x/InspectorP62x (and related TiM3xx in SICK PSIRT context) where Lua apps can be deployed, removed, started, reloaded or stopped without authorization through AppManager. This leads to DoS by removing legitimate apps, plus reading/writing files or loading ...

8.2CVSS8.1AI score0.00502EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2024/12/06 12:00 a.m.•20 views

PT-2024-16535 · Unknown · Appmanager

Name of the Vulnerable Software and Affected Versions: AppManager affected versions not specified Description: The issue allows Lua apps to be deployed, removed, started, reloaded, or stopped without authorization via AppManager. This enables an attacker to remove legitimate apps, creating a...

8.2CVSS6.8AI score0.00502EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/06 12:00 a.m.•1 views

CVE-2024-10776: Missing Authentication for Critical Function

Lua apps can be deployed, removed, started, reloaded or stopped without authorization via AppManager. This allows an attacker to remove legitimate apps creating a DoS attack, read and write files or load apps that use all features of the product available to a customer...

8.2CVSS5.8AI score0.00502EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/08/19 1:30 a.m.•9 views

WordPress Admission AppManager plugin <= 1.0.0 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by zulu caPWN in WordPress Plugin Admission AppManager versions = 1.0.0...

6.1CVSS6.3AI score0.00307EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2024/08/19 12:00 a.m.•15 views

WordPress Admission AppManager Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Admission AppManager Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-4507 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 138041d75b79 Credits zulu caPWN...

6.1CVSS5.7AI score0.00307EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2024/08/17 8:15 a.m.•19 views

CVE-2023-4507

The Admission AppManager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'q' parameter in versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

6.1CVSS0.00307EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/08/17 7:34 a.m.•9 views

CVE-2023-4507 Admission AppManager <= 1.0.0 - Reflected Cross-Site Scripting

The Admission AppManager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'q' parameter in versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

6.1CVSS6.5AI score0.00307EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/08/17 7:34 a.m.•23 views

CVE-2023-4507 Admission AppManager <= 1.0.0 - Reflected Cross-Site Scripting

The Admission AppManager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'q' parameter in versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

6.1CVSS0.00307EPSS
SaveExploits0References2
Rows per page
Query Builder