Lucene search
+L

26 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 9:34 a.m.4 views

CVE-2024-41624

Incorrect access control in Himalaya Xiaoya nano smart speaker romversion 1.6.96 allows a remote attacker to have an unspecified impact...

6.3CVSS6.9AI score0.00288EPSS
Exploits0References1
NVD
NVD
added 2024/07/29 4:15 p.m.12 views

CVE-2024-41624

Incorrect access control in Himalaya Xiaoya nano smart speaker romversion 1.6.96 allows a remote attacker to have an unspecified impact...

6.3CVSS0.00288EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/07/29 12:0 a.m.8 views

CVE-2024-41624

Incorrect access control in Himalaya Xiaoya nano smart speaker romversion 1.6.96 allows a remote attacker to have an unspecified impact...

7AI score0.00288EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/07/29 12:0 a.m.3 views

Himalaya Xiaoya nano smart speaker 安全漏洞

Himalaya Xiaoya nano smart speaker is a smart speaker from the Chinese company Himalaya Himalaya. A security vulnerability exists in Himalaya Xiaoya nano smart speaker version 1.6.96, which stems from an incorrect privilege modification...

6.3CVSS6.8AI score0.00288EPSS
Exploits0References3
Cvelist
Cvelist
added 2024/07/29 12:0 a.m.19 views

CVE-2024-41624

Incorrect access control in Himalaya Xiaoya nano smart speaker romversion 1.6.96 allows a remote attacker to have an unspecified impact...

0.00288EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/07/29 12:0 a.m.4 views

PT-2024-29469 · Himalaya · Himalaya Xiaoya Nano Smart Speaker

Name of the Vulnerable Software and Affected Versions: Himalaya Xiaoya nano smart speaker version 1.6.96 Description: The issue is related to incorrect access control, allowing a remote attacker to have an unspecified impact. Recommendations: For version 1.6.96, at the moment, there is no...

6.3CVSS7AI score0.00288EPSS
Exploits0References3
CVE
CVE
added 2024/07/29 12:0 a.m.39 views

CVE-2024-41624

The CVE-2024-41624 entry concerns Himalaya Xiaoya nano smart speaker ROM version 1.6.96 with an issue described as incorrect access control. Across connected sources, the affected component is the device firmware/ROM and the vulnerability is an access-control weakness that could allow a remote at...

6.3CVSS6.7AI score0.00288EPSS
Exploits0References1
OSV
OSV
added 2024/06/12 10:15 a.m.5 views

CVE-2023-40209

Missing Authorization vulnerability in Himalaya Saxena Highcompress Image Compressor.This issue affects Highcompress Image Compressor: from n/a through 6.0.0...

4.3CVSS5.8AI score0.00264EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/06/12 9:53 a.m.22 views

CVE-2023-40209 WordPress Highcompress Image Compressor plugin <= 6.1.2 - Broken Access Control + CSRF vulnerability

Missing Authorization vulnerability in himalayasaxena Highcompress Image Compressor high-compress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Highcompress Image Compressor: from n/a through = 6.1.2...

6.5CVSS7.3AI score0.00264EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/06/12 9:53 a.m.35 views

CVE-2023-40209 WordPress Highcompress Image Compressor plugin <= 6.0.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Himalaya Saxena Highcompress Image Compressor.This issue affects Highcompress Image Compressor: from n/a through 6.0.0...

6.5CVSS0.00264EPSS
Exploits0References1
CVE
CVE
added 2024/06/12 9:53 a.m.62 views

CVE-2023-40209

CVE-2023-40209 is a Missing Authorization (Broken Access Control) vulnerability in the WordPress plugin Highcompress Image Compressor. Public details show affected versions up to 6.0.0 (initial description) with a Red Hat entry mirroring the same issue. Patch/upgrade status is unclear: Wordfence ...

6.5CVSS8.6AI score0.00264EPSS
Exploits0References1Affected Software1
Openbugbounty
Openbugbounty
added 2023/08/27 6:44 a.m.18 views

himalaya-trading.com Cross Site Scripting vulnerability OBB-3620116

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
Exploits0
Openbugbounty
Openbugbounty
added 2023/07/22 10:12 a.m.15 views

panhimalayaherbaria.net Cross Site Scripting vulnerability OBB-3537606

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
Exploits0
Openbugbounty
Openbugbounty
added 2022/10/03 8:1 p.m.13 views

himalaya.m.free.fr Cross Site Scripting vulnerability OBB-2975638

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Exploits0
Openbugbounty
Openbugbounty
added 2022/09/27 8:49 p.m.13 views

himalaya.com.tr Cross Site Scripting vulnerability OBB-2959211

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
Exploits0
Akamai Blog
Akamai Blog
added 2022/03/18 1:0 p.m.27 views

Himalaya Exchange Creates a New Digital Financial System

The Himalaya Exchange offers a new cryptocurrency that is designed to be resistant to extreme price volatility. A key aim for the company is to provide a revolutionary financial solution for the new digital age. Akamai is delighted that this hugely innovative company has chosen us to deliver a...

2.2AI score
Exploits0
Openbugbounty
Openbugbounty
added 2022/03/08 8:2 p.m.12 views

himalaya.ro Cross Site Scripting vulnerability OBB-2417663

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Exploits0
CNVD
CNVD
added 2021/01/28 12:0 a.m.3 views

Himalaya (Windows client) suffers from a dll hijacking vulnerability (CNVD-2021-12678)

Himalaya is a professional audio sharing platform. A dll hijacking vulnerability exists in Himalaya Windows client, which can be exploited by an attacker to cause execution of arbitrary malicious code...

7.2AI score
Exploits0
CNVD
CNVD
added 2021/01/22 12:0 a.m.2 views

Himalaya (Windows client) suffers from dll hijacking vulnerability

Himalaya is a professional audio sharing platform. A dll hijacking vulnerability exists in Himalaya Windows client, which can be exploited by attackers to execute arbitrary malicious code via the client...

7.8AI score
Exploits0
CNVD
CNVD
added 2021/01/22 12:0 a.m.2 views

Himalaya (Windows client) suffers from a dll hijacking vulnerability (CNVD-2021-10376)

Himalaya is a professional audio sharing platform. A dll hijacking vulnerability exists in Himalaya Windows client, which can be exploited by attackers to execute arbitrary malicious code via the client...

7.8AI score
Exploits0
Rows per page
Query Builder