Lucene search
+L

28 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 9:34 a.m.•16 views

CVE-2024-41624

Incorrect access control in Himalaya Xiaoya nano smart speaker romversion 1.6.96 allows a remote attacker to have an unspecified impact...

6.3CVSS6.9AI score0.00291EPSS
SaveExploits0References1
NVD
NVD
•added 2024/07/29 4:15 p.m.•26 views

CVE-2024-41624

Incorrect access control in Himalaya Xiaoya nano smart speaker romversion 1.6.96 allows a remote attacker to have an unspecified impact...

6.3CVSS0.00291EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/07/29 12:00 a.m.•10 views

CVE-2024-41624

Incorrect access control in Himalaya Xiaoya nano smart speaker romversion 1.6.96 allows a remote attacker to have an unspecified impact...

7AI score0.00291EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/29 12:00 a.m.•2 views

CVE-2024-41624: Missing Authorization

Incorrect access control in Himalaya Xiaoya nano smart speaker romversion 1.6.96 allows a remote attacker to have an unspecified impact...

6.3CVSS5.8AI score0.00291EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/07/29 12:00 a.m.•11 views

PT-2024-29469 · Himalaya · Himalaya Xiaoya Nano Smart Speaker

Name of the Vulnerable Software and Affected Versions: Himalaya Xiaoya nano smart speaker version 1.6.96 Description: The issue is related to incorrect access control, allowing a remote attacker to have an unspecified impact. Recommendations: For version 1.6.96, at the moment, there is no...

6.3CVSS7AI score0.00291EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/07/29 12:00 a.m.•11 views

Himalaya Xiaoya nano smart speaker 安全漏洞

Himalaya Xiaoya nano smart speaker is a smart speaker from the Chinese company Himalaya Himalaya. A security vulnerability exists in Himalaya Xiaoya nano smart speaker version 1.6.96, which stems from an incorrect privilege modification...

6.3CVSS6.8AI score0.00291EPSS
SaveExploits0References3
CVE
CVE
•added 2024/07/29 12:00 a.m.•53 views

CVE-2024-41624

The Himalaya Xiaoya nano smart speaker (rom_version 1.6.96 ) is vulnerable to an incorrect access control issue, also described as an incorrect privilege modification . This vulnerability allows a remote attacker to have an unspecified impact . At this time, there is no information regarding a ne...

6.3CVSS6.7AI score0.00291EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/07/29 12:00 a.m.•29 views

CVE-2024-41624

Incorrect access control in Himalaya Xiaoya nano smart speaker romversion 1.6.96 allows a remote attacker to have an unspecified impact...

0.00291EPSS
SaveExploits0References1
OSV
OSV
•added 2024/06/12 10:15 a.m.•13 views

CVE-2023-40209

Missing Authorization vulnerability in Himalaya Saxena Highcompress Image Compressor.This issue affects Highcompress Image Compressor: from n/a through 6.0.0...

4.3CVSS5.8AI score0.00317EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/06/12 9:53 a.m.•24 views

CVE-2023-40209 WordPress Highcompress Image Compressor plugin <= 6.1.2 - Broken Access Control + CSRF vulnerability

Missing Authorization vulnerability in himalayasaxena Highcompress Image Compressor high-compress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Highcompress Image Compressor: from n/a through = 6.1.2...

6.5CVSS7.3AI score0.00317EPSS
SaveExploits0References1
CVE
CVE
•added 2024/06/12 9:53 a.m.•77 views

CVE-2023-40209

CVE-2023-40209 is a Missing Authorization (Broken Access Control) vulnerability in the WordPress plugin Highcompress Image Compressor. Public details show affected versions up to 6.0.0 (initial description) with a Red Hat entry mirroring the same issue. Patch/upgrade status is unclear: Wordfence ...

6.5CVSS8.6AI score0.00317EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/06/12 9:53 a.m.•45 views

CVE-2023-40209 WordPress Highcompress Image Compressor plugin <= 6.0.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Himalaya Saxena Highcompress Image Compressor.This issue affects Highcompress Image Compressor: from n/a through 6.0.0...

6.5CVSS0.00317EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/12 12:00 a.m.•2 views

CVE-2023-40209: Missing Authorization

Missing Authorization vulnerability in Himalaya Saxena Highcompress Image Compressor.This issue affects Highcompress Image Compressor: from n/a through 6.0.0...

6.5CVSS8.2AI score0.00317EPSS
SaveExploits0References1
Openbugbounty
Openbugbounty
•added 2023/08/27 6:44 a.m.•21 views

himalaya-trading.com Cross Site Scripting vulnerability OBB-3620116

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2023/07/22 10:12 a.m.•18 views

panhimalayaherbaria.net Cross Site Scripting vulnerability OBB-3537606

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2022/10/03 8:01 p.m.•16 views

himalaya.m.free.fr Cross Site Scripting vulnerability OBB-2975638

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SaveExploits0
Openbugbounty
Openbugbounty
•added 2022/09/27 8:49 p.m.•17 views

himalaya.com.tr Cross Site Scripting vulnerability OBB-2959211

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Akamai Blog
Akamai Blog
•added 2022/03/18 1:00 p.m.•29 views

Himalaya Exchange Creates a New Digital Financial System

The Himalaya Exchange offers a new cryptocurrency that is designed to be resistant to extreme price volatility. A key aim for the company is to provide a revolutionary financial solution for the new digital age. Akamai is delighted that this hugely innovative company has chosen us to deliver a...

2.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2022/03/08 8:02 p.m.•15 views

himalaya.ro Cross Site Scripting vulnerability OBB-2417663

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SaveExploits0
CNVD
CNVD
•added 2021/01/28 12:00 a.m.•6 views

Himalaya (Windows client) suffers from a dll hijacking vulnerability (CNVD-2021-12678)

Himalaya is a professional audio sharing platform. A dll hijacking vulnerability exists in Himalaya Windows client, which can be exploited by an attacker to cause execution of arbitrary malicious code...

7.2AI score
SaveExploits0
Rows per page
Query Builder