Lucene search
+L

2707 matches found

Positive Technologies
Positive Technologies
•added 2024/10/04 12:00 a.m.•19 views

PT-2024-32716 · Unknown · Shilpi Net Back Office

Name of the Vulnerable Software and Affected Versions: Shilpi Net Back Office affected versions not specified Description: This issue exists due to improper access controls on certain API endpoints. An authenticated remote attacker could exploit this by manipulating the dfclientid parameter throu...

7.1CVSS6.7AI score0.00387EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/04 12:00 a.m.•3 views

CVE-2024-47657: Authorization Bypass Through User-Controlled Key

This vulnerability exists in the Shilpi Net Back Office due to improper access controls on certain API endpoints. An authenticated remote attacker could exploit this vulnerability by manipulating a parameter dfclientid through API request URLs which could lead to unauthorized access to sensitive...

7.1CVSS5.9AI score0.00387EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/10/04 12:00 a.m.•17 views

Shilpi Net Back Office 安全漏洞

Shilpi Net Back Office is a back office system for the Shilpi system. A security vulnerability exists in Shilpi Net Back Office versions prior to 5.5.002, which stems from improper access control of API endpoints and could lead to unauthorized access to sensitive information belonging to other...

7.1CVSS6.4AI score0.00387EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2024/10/02 6:21 p.m.•29 views

Important: Red Hat Security Advisory: cups-filters security update

An update for cups-filters is now available for Red Hat Enterprise Linux 7.7 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

9.8CVSS7.2AI score0.77644EPSS
SaveExploits17References4
RedHat Linux
RedHat Linux
•added 2024/10/02 12:00 p.m.•31 views

Important: Red Hat Security Advisory: cups-filters security update

An update for cups-filters is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

9.8CVSS7.2AI score0.77644EPSS
SaveExploits17References4
RedHat Linux
RedHat Linux
•added 2024/10/02 11:38 a.m.•26 views

Important: Red Hat Security Advisory: cups-filters security update

An update for cups-filters is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, and Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update...

9.8CVSS7.2AI score0.77644EPSS
SaveExploits17References4
RedHat Linux
RedHat Linux
•added 2024/10/02 11:35 a.m.•40 views

Important: Red Hat Security Advisory: cups-filters security update

An update for cups-filters is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...

9.8CVSS7.2AI score0.77644EPSS
SaveExploits17References4
RedHat Linux
RedHat Linux
•added 2024/10/01 6:38 p.m.•39 views

Important: Red Hat Security Advisory: cups-filters security update

An update for cups-filters is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

9.8CVSS7.2AI score0.77644EPSS
SaveExploits17References4
RedHat Linux
RedHat Linux
•added 2024/10/01 6:35 p.m.•36 views

Important: Red Hat Security Advisory: cups-filters security update

An update for cups-filters is now available for Red Hat Enterprise Linux 8.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

9.8CVSS7.2AI score0.77644EPSS
SaveExploits17References4
RedHat Linux
RedHat Linux
•added 2024/10/01 6:26 p.m.•49 views

Important: Red Hat Security Advisory: cups-filters security update

An update for cups-filters is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

9.8CVSS7.2AI score0.77644EPSS
SaveExploits17References4
OSV
OSV
•added 2024/10/01 12:00 a.m.•23 views

ALSA-2024:7463 Important: cups-filters security update

The cups-filters package contains back ends, filters, and other software that was once part of the core Common UNIX Printing System CUPS distribution but is now maintained independently. Security Fixes: cups-browsed: cups-browsed binds on UDP INADDRANY:631 trusting any packet from any source...

8.6CVSS7.4AI score0.77644EPSS
SaveExploits5References8
OSV
OSV
•added 2024/09/27 12:00 a.m.•42 views

ALSA-2024:7346 Important: cups-filters security update

The cups-filters package contains back ends, filters, and other software that was once part of the core Common UNIX Printing System CUPS distribution but is now maintained independently. Security Fixes: cups-browsed: cups-browsed binds on UDP INADDRANY:631 trusting any packet from any source...

8.6CVSS7.4AI score0.77644EPSS
SaveExploits5References8
AlmaLinux
AlmaLinux
•added 2024/09/27 12:00 a.m.•38 views

Important: cups-filters security update

The cups-filters package contains back ends, filters, and other software that was once part of the core Common UNIX Printing System CUPS distribution but is now maintained independently. Security Fixes: cups-browsed: cups-browsed binds on UDP INADDRANY:631 trusting any packet from any source...

8.6CVSS7.5AI score0.77644EPSS
SaveExploits16References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/25 12:00 a.m.•5 views

CVE-2024-8741: Improper Neutralization of Input During Web Page Generation

The Beam me up Scotty – Back to Top Button plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.0.21. This makes it possible for unauthenticated attackers to inject...

6.1CVSS6AI score0.00386EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/09/24 12:00 a.m.•14 views

PT-2024-39218 · WordPress · Beam Me Up Scotty – Back To Top Button

Name of the Vulnerable Software and Affected Versions: Beam me up Scotty – Back to Top Button plugin for WordPress versions up to, and including, 1.0.21 Description: The issue is related to Reflected Cross-Site Scripting due to the use of add query arg without proper escaping on the URL. This...

6.1CVSS6.8AI score0.00386EPSS
SaveExploits0References7
Gentoo Linux
Gentoo Linux
•added 2024/09/22 12:00 a.m.•32 views

liblouis: Multiple Vulnerabilities

Background liblouis is an open-source braille translator and back-translator. Description Multiple vulnerabilities have been discovered in liblouis. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is...

7.5CVSS7.7AI score0.01356EPSS
SaveExploits2
NVD
NVD
•added 2024/09/19 6:15 a.m.•43 views

CVE-2024-47086

This vulnerability exists in Apex Softcell LD DP Back Office due to improper implementation of OTP validation mechanism in certain API endpoints. An authenticated remote attacker could exploit this vulnerability by providing arbitrary OTP value for authentication and subsequently changing its API...

8.7CVSS0.00474EPSS
SaveExploits0References1
OSV
OSV
•added 2024/09/19 6:15 a.m.•16 views

CVE-2024-47086

This vulnerability exists in Apex Softcell LD DP Back Office due to improper implementation of OTP validation mechanism in certain API endpoints. An authenticated remote attacker could exploit this vulnerability by providing arbitrary OTP value for authentication and subsequently changing its API...

6.5CVSS5.9AI score0.00474EPSS
SaveExploits0References1
NVD
NVD
•added 2024/09/19 6:15 a.m.•46 views

CVE-2024-47085

This vulnerability exists in Apex Softcell LD DP Back Office due to improper validation of certain parameters cCdslClicentcode and cLdClientCode in the API endpoint. An authenticated remote attacker could exploit this vulnerability by manipulating parameters in the API request body leading to...

8.7CVSS0.00436EPSS
SaveExploits0References1
OSV
OSV
•added 2024/09/19 6:15 a.m.•16 views

CVE-2024-47085

This vulnerability exists in Apex Softcell LD DP Back Office due to improper validation of certain parameters cCdslClicentcode and cLdClientCode in the API endpoint. An authenticated remote attacker could exploit this vulnerability by manipulating parameters in the API request body leading to...

6.5CVSS5.8AI score0.00436EPSS
SaveExploits0References1
Rows per page
Query Builder