Lucene search
K

29 matches found

OSV
OSV
added 2026/01/29 3:16 p.m.0 views

CVE-2020-37007

Liman 0.7 contains a cross-site request forgery vulnerability that allows attackers to manipulate user account settings without proper request validation. Attackers can craft malicious HTML forms to change user passwords or modify account information by tricking logged-in users into submitting...

4.3CVSS5.7AI score
Exploits0References3
NVD
NVD
added 2026/01/29 3:16 p.m.5 views

CVE-2020-37007

Liman 0.7 contains a cross-site request forgery vulnerability that allows attackers to manipulate user account settings without proper request validation. Attackers can craft malicious HTML forms to change user passwords or modify account information by tricking logged-in users into submitting...

5.3CVSS0.00032EPSS
Exploits1References3
Cvelist
Cvelist
added 2026/01/29 2:28 p.m.29 views

CVE-2020-37007 Liman 0.7 - Cross-Site Request Forgery (Change Password)

Liman 0.7 contains a cross-site request forgery vulnerability that allows attackers to manipulate user account settings without proper request validation. Attackers can craft malicious HTML forms to change user passwords or modify account information by tricking logged-in users into submitting...

5.3CVSS0.00032EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2026/01/29 2:28 p.m.1 views

CVE-2020-37007 Liman 0.7 - Cross-Site Request Forgery (Change Password)

Liman 0.7 contains a cross-site request forgery vulnerability that allows attackers to manipulate user account settings without proper request validation. Attackers can craft malicious HTML forms to change user passwords or modify account information by tricking logged-in users into submitting...

5.3CVSS5.8AI score0.00032EPSS
Exploits1References3
EUVD
EUVD
added 2026/01/29 2:28 p.m.1 views

EUVD-2020-30902

Liman 0.7 contains a cross-site request forgery vulnerability that allows attackers to manipulate user account settings without proper request validation. Attackers can craft malicious HTML forms to change user passwords or modify account information by tricking logged-in users into submitting...

5.3CVSS5.8AI score0.00032EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2026/01/29 2:28 p.m.4 views

CVE-2020-37007

Liman 0.7 contains a cross-site request forgery vulnerability that allows attackers to manipulate user account settings without proper request validation. Attackers can craft malicious HTML forms to change user passwords or modify account information by tricking logged-in users into submitting...

5.3CVSS5.8AI score0.00032EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2026/01/29 2:28 p.m.5 views

CVE-2020-37007

CVE-2020-37007 concerns Liman 0.7 and describes a cross-site request forgery (CSRF) vulnerability that lets an attacker manipulate user account settings by tricking an authenticated user into submitting unauthorized requests. The underlying issue is improper request validation in the change-passw...

5.3CVSS5.8AI score0.00032EPSS
Exploits1References3Affected Software1
CNNVD
CNNVD
added 2026/01/29 12:0 a.m.2 views

Liman security vulnerabilities

Liman is an open-source application developed by Liman MYS. It allows for the remote and secure management of all servers, clients, and network devices within an organization. Version 0.7 of Liman contains a security vulnerability caused by insufficient request validation, which may lead to...

5.3CVSS5.7AI score0.00032EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2026/01/29 12:0 a.m.3 views

PT-2026-5282

Name of the Vulnerable Software and Affected Versions Liman version 0.7 Description The software contains a cross-site request forgery issue that allows attackers to manipulate user account settings without proper request validation. Attackers can create malicious HTML forms to change user...

5.3CVSS5.2AI score0.00032EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2026/01/07 9:18 a.m.5 views

CVE-2025-1269

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in HAVELSAN Liman MYS allows Cross-Site Flashing.This issue affects Liman MYS: before 2.1.1 - 1010...

4.8CVSS6.8AI score0.0004EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2021-27095

Malware in sbrugna...

8.8CVSS8.6AI score0.0545EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-4799

Malicious code in bioql PyPI...

4.8CVSS6.5AI score0.0004EPSS
Exploits0References3
NVD
NVD
added 2025/02/18 2:15 p.m.9 views

CVE-2025-1269

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in HAVELSAN Liman MYS allows Cross-Site Flashing.This issue affects Liman MYS: before 2.1.1 - 1010...

4.8CVSS0.0004EPSS
Exploits0References2
OSV
OSV
added 2025/02/18 2:15 p.m.3 views

CVE-2025-1269

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in HAVELSAN Liman MYS allows Cross-Site Flashing.This issue affects Liman MYS: before 2.1.1 - 1010...

4.8CVSS7AI score
Exploits0References2
CVE
CVE
added 2025/02/18 1:48 p.m.59 views

CVE-2025-1269

CVE-2025-1269 describes a URL Redirection to Untrusted Site vulnerability (Open Redirect) in HAVELSAN Liman MYS. According to connected sources, the issue affects Liman MYS versions prior to 2.1.1 - 1010 and enables Cross‑Site Flashing through improper URL redirection. The root cause is a URL inp...

4.8CVSS6.9AI score0.0004EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/02/18 1:48 p.m.9 views

CVE-2025-1269 Open Redirect in HAVELSAN's Open Source Project Liman MYS

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in HAVELSAN Liman MYS allows Cross-Site Flashing.This issue affects Liman MYS: before 2.1.1 - 1010...

4.8CVSS0.0004EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/02/18 1:48 p.m.16 views

CVE-2025-1269 Open Redirect in HAVELSAN's Open Source Project Liman MYS

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in HAVELSAN Liman MYS allows Cross-Site Flashing.This issue affects Liman MYS: before 2.1.1 - 1010...

4.8CVSS5.1AI score0.0004EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/02/18 12:0 a.m.2 views

PT-2025-6870 · Havelsan · Havelsan Liman Mys

Name of the Vulnerable Software and Affected Versions: HAVELSAN Liman MYS versions prior to 2.1.1 - 1010 Description: The issue affects HAVELSAN Liman MYS, allowing Cross-Site Flashing due to a URL Redirection to Untrusted Site 'Open Redirect' vulnerability. Recommendations: For versions prior to...

4.8CVSS7.2AI score0.0004EPSS
Exploits0References7
CNNVD
CNNVD
added 2025/02/18 12:0 a.m.1 views

Liman MYS 输入验证错误漏洞

Liman MYS is a port center management system from Liman MYS open source. An input validation error vulnerability exists in versions of Liman MYS prior to 2.1.1-1010 that stems from not properly validating URL input. An attacker could exploit the vulnerability to redirect users to a malicious site...

4.8CVSS6.4AI score0.0004EPSS
Exploits0References3
NVD
NVD
added 2023/03/01 8:15 a.m.5 views

CVE-2021-3855

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Liman Central Management System Liman MYS HTTP/Controllers, CronMail, Jobs modules allows Command Injection. This issue affects Liman Central Management System: from 1.7.0 before 1.8.3-462...

8.8CVSS8.8AI score0.0545EPSS
Exploits0References3
Rows per page
Query Builder