Lucene search
K

9 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-23886

Malicious code in bioql PyPI...

6.5CVSS6.5AI score0.00237EPSS
Exploits2References2
CNVD
CNVD
added 2025/08/18 12:0 a.m.3 views

Bottinelli Informatical Vedo Suite Access Control Error Vulnerability

Bottinelli Informatical Vedo Suite is an enterprise software suite for the textile and design industry from Bottinelli Informatica, Italy. An access control error vulnerability exists in Bottinelli Informatical Vedo Suite, which can be exploited by an attacker to obtain an elevated privilege JWT...

6.5CVSS7AI score0.00268EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2025/08/08 12:29 a.m.6 views

CVE-2025-51058

Bottinelli Informatical Vedo Suite 2024.17 is vulnerable to Server-side Request Forgery SSRF in the /apivedo/video/preview endpoint, which allows remote authenticated attackers to trigger HTTP requests towards arbitrary remote paths via the "file" URL parameter...

6.5CVSS6.3AI score0.00237EPSS
Exploits2References1
NVD
NVD
added 2025/08/06 9:15 p.m.3 views

CVE-2025-51058

Bottinelli Informatical Vedo Suite 2024.17 is vulnerable to Server-side Request Forgery SSRF in the /apivedo/video/preview endpoint, which allows remote authenticated attackers to trigger HTTP requests towards arbitrary remote paths via the "file" URL parameter...

6.5CVSS0.00237EPSS
Exploits2References2
OSV
OSV
added 2025/08/06 9:15 p.m.1 views

CVE-2025-51058

Bottinelli Informatical Vedo Suite 2024.17 is vulnerable to Server-side Request Forgery SSRF in the /apivedo/video/preview endpoint, which allows remote authenticated attackers to trigger HTTP requests towards arbitrary remote paths via the "file" URL parameter...

6.5CVSS6AI score
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/08/06 12:0 a.m.4 views

CVE-2025-51058

Bottinelli Informatical Vedo Suite 2024.17 is vulnerable to Server-side Request Forgery SSRF in the /apivedo/video/preview endpoint, which allows remote authenticated attackers to trigger HTTP requests towards arbitrary remote paths via the "file" URL parameter...

6.4AI score0.00237EPSS
Exploits2References2
Positive Technologies
Positive Technologies
added 2025/08/06 12:0 a.m.6 views

PT-2025-32222 · Bottinelli Informatical · Vedo Suite

Name of the Vulnerable Software and Affected Versions: Bottinelli Informatical Vedo Suite version 2024.17 Description: Bottinelli Informatical Vedo Suite 2024.17 is vulnerable to Server-side Request Forgery SSRF in the /api vedo/video/preview endpoint. This allows remote authenticated attackers t...

6.5CVSS6.5AI score0.00237EPSS
Exploits2References6
CVE
CVE
added 2025/08/06 12:0 a.m.15 views

CVE-2025-51058

The CVE-2025-51058 issue affects Bottinelli Informatical Vedo Suite 2024.17. The vulnerability is a Server-Side Request Forgery (SSRF) in the /api_vedo/video/preview endpoint, where an authenticated remote attacker can cause HTTP requests to arbitrary remote paths by supplying a file URL paramete...

6.5CVSS6.5AI score0.00237EPSS
Exploits2References2Affected Software1
CNNVD
CNNVD
added 2025/08/06 12:0 a.m.3 views

Bottinelli Informatical Vedo Suite 安全漏洞

Bottinelli Informatical Vedo Suite is an enterprise software suite for the textile and design industry from Bottinelli Informatica, Italy. An access control error vulnerability exists in Bottinelli Informatical Vedo Suite, which can be exploited by an attacker to obtain an elevated privilege JWT...

6.5CVSS6.8AI score0.00268EPSS
Exploits2References3
Rows per page
Query Builder