Lucene search
+L

8861 matches found

Snyk
Snyk
added 2023/06/15 9:30 p.m.2 views

Access Control Bypass

Overview magento/project-community-edition is an eCommerce Platform for Growth Community Edition Affected versions of this package are vulnerable to Access Control Bypass due to a flaw in the security feature implementation. A low-privileged attacker could exploit this vulnerability to bypass...

5.3CVSS6.8AI score0.0074EPSS
SaveExploits0References2
Snyk
Snyk
added 2023/06/15 9:30 p.m.5 views

Incorrect Authorization

Overview magento/community-edition is a modern cloud eCommerce platform. Affected versions of this package are vulnerable to Incorrect Authorization due to improper authorization checks. A low-privileged attacker can bypass certain security features by exploiting these checks. Remediation Upgrade...

5.3CVSS4.8AI score0.00648EPSS
SaveExploits0References2
NVD
NVD
added 2023/06/15 7:15 p.m.26 views

CVE-2023-29307

Adobe Experience Manager versions 6.5.16.0 and earlier is affected by a URL Redirection to Untrusted Site 'Open Redirect' vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user...

5.4CVSS5.1AI score0.00508EPSS
SaveExploits0References1
OSV
OSV
added 2023/06/15 7:15 p.m.13 views

CVE-2023-29322

Adobe Experience Manager versions 6.5.16.0 and earlier is affected by a reflected Cross-Site Scripting XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

5.4CVSS5.7AI score0.00542EPSS
SaveExploits0References1
Prion
Prion
added 2023/06/15 7:15 p.m.26 views

Open redirect

Adobe Experience Manager versions 6.5.16.0 and earlier is affected by a URL Redirection to Untrusted Site 'Open Redirect' vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user...

4.9CVSS6AI score0.00508EPSS
SaveExploits0References1Affected Software2
Positive Technologies
Positive Technologies
added 2023/06/13 12:00 a.m.16 views

PT-2023-3371 · Siemens · Simatic Pcs 7 +2

Name of the Vulnerable Software and Affected Versions: SIMATIC PCS 7 versions prior to V9.1 SP2 UC04 SIMATIC S7-PM versions prior to V5.7 SP1 HF1 SIMATIC S7-PM versions prior to V5.7 SP2 HF1 SIMATIC STEP 7 V5 versions prior to V5.7 Description: A vulnerability has been identified in the affected...

10CVSS7.3AI score0.01EPSS
SaveExploits0References6
OSV
OSV
added 2023/06/07 3:30 p.m.50 views

GHSA-HH54-53M7-7FFJ alist Incorrect Access Control vulnerability

alist =3.16.3 is vulnerable to Incorrect Access Control. Low privilege accounts can upload any file...

8.8CVSS8.7AI score0.00737EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2023/06/07 3:30 p.m.29 views

alist Incorrect Access Control vulnerability

alist =3.16.3 is vulnerable to Incorrect Access Control. Low privilege accounts can upload any file...

8.8CVSS7.1AI score0.00737EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2023/06/07 2:15 p.m.6 views

CVE-2023-33498

alist =3.16.3 is vulnerable to Incorrect Access Control. Low privilege accounts can upload any file...

8.8CVSS7.4AI score0.00737EPSS
SaveExploits0References2
NVD
NVD
added 2023/06/07 2:15 p.m.28 views

CVE-2023-33498

alist =3.16.3 is vulnerable to Incorrect Access Control. Low privilege accounts can upload any file...

8.8CVSS8.7AI score0.00737EPSS
SaveExploits0References1
Prion
Prion
added 2023/06/07 2:15 p.m.25 views

Design/Logic Flaw

alist =3.16.3 is vulnerable to Incorrect Access Control. Low privilege accounts can upload any file...

6.5CVSS8.7AI score0.00737EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2023/06/07 2:15 a.m.10 views

CVE-2020-36699

The Quick Page/Post Redirect Plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on the qpprsavequickredirectajax and qpprdeletequickredirect functions in versions up to, and including, 5.1.9. This makes it possible for low-privileged attackers to interact...

4.3CVSS5.8AI score0.00771EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2023/06/07 12:00 a.m.13 views

PT-2023-11841 · WordPress · Quick Page/Post Redirect Plugin

Name of the Vulnerable Software and Affected Versions: The Quick Page/Post Redirect Plugin for WordPress versions up to, and including, 5.1.9 Description: The issue is related to authorization bypass due to missing capability checks on the qppr save quick redirect ajax and qppr delete quick...

4.3CVSS4.5AI score0.00771EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2023/06/07 12:00 a.m.11 views

AList 代码问题漏洞

AList is a file listing program with multi-storage support by the individual developer Xhofe in China. A security vulnerability exists in AList 3.16.3 and earlier versions, which stems from an access control error that allows users with low privileges to upload arbitrary files...

8.8CVSS8.1AI score0.00737EPSS
SaveExploits0References2
OSV
OSV
added 2023/06/07 12:00 a.m.21 views

CVE-2023-33498

alist =3.16.3 is vulnerable to Incorrect Access Control. Low privilege accounts can upload any file...

8.8CVSS7.2AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2023/06/07 12:00 a.m.12 views

CVE-2023-33498

alist =3.16.3 is vulnerable to Incorrect Access Control. Low privilege accounts can upload any file...

8.7AI score0.00737EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/06/07 12:00 a.m.11 views

PT-2023-24366 · Alist · Alist

Name of the Vulnerable Software and Affected Versions: alist versions =3.16.3 Description: The issue concerns incorrect access control, allowing accounts with low privilege levels to upload any file. This can potentially lead to unauthorized access and data breaches. There is no information...

8.8CVSS7AI score0.00737EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2023/06/07 12:00 a.m.37 views

CVE-2023-33498

alist =3.16.3 is vulnerable to Incorrect Access Control. Low privilege accounts can upload any file...

9AI score0.00737EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/06/06 12:00 a.m.12 views

MB connect line mbCONNECT24和mymbCONNECT24 信息泄露漏洞

MB connect line mbCONNECT24 and MB connect line mymbCONNECT24 are both products of the German company MB connect line. mb connect line mbCONNECT24 is a set of remote service portals. The product supports remote access, data logging and alarms. MB connect line mymbCONNECT24 is an in-house remote...

4.3CVSS5.2AI score0.00515EPSS
SaveExploits0References2
OSV
OSV
added 2023/06/05 8:15 p.m.7 views

DEBIAN-CVE-2023-33968

Kanboard is open source project management software that focuses on the Kanban methodology. Versions prior to 1.2.30 are subject to a missing access control vulnerability that allows a user with low privileges to create or transfer tasks to any project within the software, even if they have not...

5.4CVSS5.7AI score0.00382EPSS
SaveExploits1References1
Rows per page
Query Builder