Lucene search
+L

105 matches found

CVE
CVE
•added 2023/12/02 2:00 p.m.•64 views

CVE-2023-6467

The CVE-2023-6467 entry concerns Thecosy IceCMS 2.0.1. The vulnerability affects the Comment Like Handler component, specifically the processing of the file /Websquare/likeClickComment/. The root cause is improper enforcement of a single, unique action, which could be triggered remotely. Exploita...

3.7CVSS4AI score0.00618EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/02 12:00 a.m.•8 views

CVE-2023-6467: Improper Enforcement of a Single, Unique Action

A vulnerability was found in Thecosy IceCMS 2.0.1. It has been rated as problematic. This issue affects some unknown processing of the file /Websquare/likeClickComment/ of the component Comment Like Handler. The manipulation leads to improper enforcement of a single, unique action. The attack may...

3.7CVSS4.5AI score0.00618EPSS
SaveExploits1References2
NVD
NVD
•added 2023/11/30 5:15 p.m.•34 views

CVE-2023-6438

A vulnerability classified as problematic has been found in Thecosy IceCMS 2.0.1. Affected is an unknown function of the file /WebArticle/articles/ of the component Like Handler. The manipulation leads to improper enforcement of a single, unique action. It is possible to launch the attack remotel...

5.3CVSS0.00704EPSS
SaveExploits1References3
Prion
Prion
•added 2023/11/30 5:15 p.m.•38 views

Information disclosure

A vulnerability classified as problematic has been found in Thecosy IceCMS 2.0.1. Affected is an unknown function of the file /WebArticle/articles/ of the component Like Handler. The manipulation leads to improper enforcement of a single, unique action. It is possible to launch the attack remotel...

4CVSS7.2AI score0.00704EPSS
SaveExploits1References3Affected Software1
Mend
Mend
•added 2023/11/30 5:00 p.m.•2 views

CVE-2023-6438

A vulnerability classified as problematic has been found in Thecosy IceCMS 2.0.1. Affected is an unknown function of the file /WebArticle/articles/ of the component Like Handler. The manipulation leads to improper enforcement of a single, unique action. It is possible to launch the attack remotel...

5.3CVSS0.00704EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2023/11/30 5:00 p.m.•52 views

CVE-2023-6438 Thecosy IceCMS Like improper enforcement of a single, unique action

A vulnerability classified as problematic has been found in Thecosy IceCMS 2.0.1. Affected is an unknown function of the file /WebArticle/articles/ of the component Like Handler. The manipulation leads to improper enforcement of a single, unique action. It is possible to launch the attack remotel...

4.3CVSS5.7AI score0.00704EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/30 12:00 a.m.•2 views

CVE-2023-6438: Improper Enforcement of a Single, Unique Action

A vulnerability classified as problematic has been found in Thecosy IceCMS 2.0.1. Affected is an unknown function of the file /WebArticle/articles/ of the component Like Handler. The manipulation leads to improper enforcement of a single, unique action. It is possible to launch the attack remotel...

5.3CVSS5.1AI score0.00704EPSS
SaveExploits1References2
Prion
Prion
•added 2023/11/22 9:15 a.m.•23 views

Design/Logic Flaw

Improper Enforcement of Behavioral Workflow vulnerability in DECE Software Geodi allows Functionality Bypass.This issue affects Geodi: before 8.0.0.27396...

3.2CVSS7.2AI score0.00248EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/11/22 9:03 a.m.•65 views

CVE-2023-5921

CVE-2023-5921 affects DECE Software Geodi prior to version 8.0.0.27396. The issue is described as an improper enforcement of behavioral workflow that allows a functionality bypass . The material explicitly ties this to Geodi and a version boundary; no exploit details are provided. The recommended...

7.1CVSS7.1AI score0.00248EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2023/11/22 9:03 a.m.•40 views

CVE-2023-5921 Function Bypass in Geodi

Improper Enforcement of Behavioral Workflow vulnerability in DECE Software Geodi allows Functionality Bypass. This issue affects Geodi: before 8.0.0.27396...

7.1CVSS7.2AI score0.00248EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/11/22 12:00 a.m.•17 views

PT-2023-32420

Name of the Vulnerable Software and Affected Versions DECE Software Geodi versions prior to 8.0.0.27396 Description The issue is related to an Improper Enforcement of Behavioral Workflow vulnerability, which allows for Functionality Bypass in DECE Software Geodi. Recommendations For versions prio...

7.1CVSS7AI score0.00248EPSS
SaveExploits0References7
Prion
Prion
•added 2023/09/30 3:15 p.m.•35 views

Design/Logic Flaw

A vulnerability classified as problematic was found in phpkobo Ajax Poll Script 3.18. Affected by this vulnerability is an unknown functionality of the file ajax-poll.php of the component Poll Handler. The manipulation leads to improper enforcement of a single, unique action. The attack can be...

5CVSS4.5AI score0.00583EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/09/30 3:00 p.m.•53 views

CVE-2023-5313 phpkobo Ajax Poll Script ajax-poll.php improper enforcement of a single, unique action

A vulnerability classified as problematic was found in phpkobo Ajax Poll Script 3.18. Affected by this vulnerability is an unknown functionality of the file ajax-poll.php of the component Poll Handler. The manipulation leads to improper enforcement of a single, unique action. The attack can be...

5.3CVSS5.7AI score0.00583EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2023/09/30 3:00 p.m.•23 views

CVE-2023-5313 phpkobo Ajax Poll Script ajax-poll.php improper enforcement of a single, unique action

A vulnerability classified as problematic was found in phpkobo Ajax Poll Script 3.18. Affected by this vulnerability is an unknown functionality of the file ajax-poll.php of the component Poll Handler. The manipulation leads to improper enforcement of a single, unique action. The attack can be...

5.3CVSS6.9AI score0.00583EPSS
SaveExploits1References3
CVE
CVE
•added 2023/09/30 3:00 p.m.•79 views

CVE-2023-5313

CVE-2023-5313 affects phpkobo Ajax Poll Script 3.18, specifically the file ajax-poll.php in the Poll Handler. The provided documents describe a vulnerability due to improper enforcement of a single, unique action, enabling a remote attack and with the exploit disclosed publicly (VDB-240949). The ...

5.3CVSS4.7AI score0.00583EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/30 12:00 a.m.•7 views

CVE-2023-5313: Improper Enforcement of a Single, Unique Action

A vulnerability classified as problematic was found in phpkobo Ajax Poll Script 3.18. Affected by this vulnerability is an unknown functionality of the file ajax-poll.php of the component Poll Handler. The manipulation leads to improper enforcement of a single, unique action. The attack can be...

5.3CVSS5.2AI score0.00583EPSS
SaveExploits1References3
NVD
NVD
•added 2023/08/14 6:15 p.m.•30 views

CVE-2023-38741

IBM TXSeries for Multiplatforms 8.1, 8.2, and 9.1 is vulnerable to a denial of service, caused by improper enforcement of the timeout on individual read operations. By conducting a slowloris-type attacks, a remote attacker could exploit this vulnerability to cause a denial of service. IBM X-Force...

7.5CVSS7.4AI score0.01033EPSS
SaveExploits0References2
Prion
Prion
•added 2023/08/14 6:15 p.m.•33 views

Design/Logic Flaw

IBM TXSeries for Multiplatforms 8.1, 8.2, and 9.1 is vulnerable to a denial of service, caused by improper enforcement of the timeout on individual read operations. By conducting a slowloris-type attacks, a remote attacker could exploit this vulnerability to cause a denial of service. IBM X-Force...

5CVSS7.3AI score0.01033EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2023/08/11 12:00 a.m.•5 views

PT-2023-9345

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine ISE affected versions not specified Description A vulnerability in the web-based management interface could allow an authenticated, remote attacker to obtain sensitive information from an affected device. This...

6.8CVSS0.00477EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/06 12:00 a.m.•7 views

CVE-2023-4181: Improper Enforcement of Behavioral Workflow

A vulnerability, which was classified as critical, has been found in SourceCodester Free Hospital Management System for Small Practices 1.0. Affected by this issue is some unknown functionality of the file /vm/admin/delete-doctor.php?id=2 of the component Redirect Handler. The manipulation leads ...

9.8CVSS5.9AI score0.01096EPSS
SaveExploits1References2
Rows per page
Query Builder