Lucene search
K

61 matches found

OSV
OSV
added 2026/04/03 1:27 p.m.1 views

JLSEC-2026-36

Odyssey passes to client unencrypted bytes from man-in-the-middle When Odyssey storage is configured to use the PostgreSQL server using 'trust' authentication with a 'clientcert' requirement or to use 'cert' authentication, a man-in-the-middle attacker can inject false responses to the client's...

5.9CVSS5.9AI score0.00281EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2021-30673

Malicious code in bioql PyPI...

8.1CVSS7.1AI score0.00193EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-7554

Malicious code in bioql PyPI...

7.8CVSS4.4AI score0.00044EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-31215

Malicious code in bioql PyPI...

7.5CVSS7.6AI score0.00487EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2021-30674

Malicious code in bioql PyPI...

5.9CVSS7.1AI score0.00281EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/22 10:35 p.m.2 views

CVE-2022-26665

An Insecure Direct Object Reference issue exists in the Tyler Odyssey Portal platform before 17.1.20. This may allow an external party to access sensitive case records...

7.5CVSS6.8AI score0.00487EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 6:51 p.m.4 views

CVE-2021-43767

Odyssey passes to client unencrypted bytes from man-in-the-middle When Odyssey storage is configured to use the PostgreSQL server using 'trust' authentication with a 'clientcert' requirement or to use 'cert' authentication, a man-in-the-middle attacker can inject false responses to the client's...

5.9CVSS7.1AI score0.00281EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/03/14 7:1 p.m.7 views

CVE-2025-2220

A vulnerability was found in Odyssey CMS up to 10.34. It has been classified as problematic. Affected is an unknown function of the file /modules/odysseycontactform/odysseycontactform.php of the component reCAPTCHA Handler. The manipulation of the argument g-recaptcha-response leads to key...

7.8CVSS6.7AI score0.00044EPSS
Exploits1References1
NVD
NVD
added 2025/03/12 2:15 a.m.9 views

CVE-2025-2220

A vulnerability was found in Odyssey CMS up to 10.34. It has been classified as problematic. Affected is an unknown function of the file /modules/odysseycontactform/odysseycontactform.php of the component reCAPTCHA Handler. The manipulation of the argument g-recaptcha-response leads to key...

7.8CVSS0.00044EPSS
Exploits1References4
OSV
OSV
added 2025/03/12 2:15 a.m.1 views

CVE-2025-2220

A vulnerability was found in Odyssey CMS up to 10.34. It has been classified as problematic. Affected is an unknown function of the file /modules/odysseycontactform/odysseycontactform.php of the component reCAPTCHA Handler. The manipulation of the argument g-recaptcha-response leads to key...

7.8CVSS4.7AI score
Exploits0References4
Cvelist
Cvelist
added 2025/03/12 1:0 a.m.10 views

CVE-2025-2220 Odyssey CMS reCAPTCHA odyssey_contact_form.php key management

A vulnerability was found in Odyssey CMS up to 10.34. It has been classified as problematic. Affected is an unknown function of the file /modules/odysseycontactform/odysseycontactform.php of the component reCAPTCHA Handler. The manipulation of the argument g-recaptcha-response leads to key...

4.8CVSS0.00044EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2025/03/12 1:0 a.m.7 views

CVE-2025-2220 Odyssey CMS reCAPTCHA odyssey_contact_form.php key management

A vulnerability was found in Odyssey CMS up to 10.34. It has been classified as problematic. Affected is an unknown function of the file /modules/odysseycontactform/odysseycontactform.php of the component reCAPTCHA Handler. The manipulation of the argument g-recaptcha-response leads to key...

4.8CVSS4AI score0.00044EPSS
Exploits1References4
CVE
CVE
added 2025/03/12 1:0 a.m.52 views

CVE-2025-2220

Odyssey CMS up to version 10.34 is affected by a vulnerability in the reCAPTCHA Handler, specifically in /modules/odyssey_contact_form/odyssey_contact_form.php. The issue arises from manipulating the g-recaptcha-response argument, leading to a key management error. Local access is required to exp...

7.8CVSS4AI score0.00044EPSS
Exploits1References4Affected Software1
CNNVD
CNNVD
added 2025/03/12 12:0 a.m.1 views

Odyssey CMS 加密问题漏洞

Odyssey CMS is a content management system from Odyssey, Inc. An encryption issue vulnerability exists in Odyssey CMS version 10.34 and earlier, which stems from the fact that incorrect operation of the parameter g-recaptcha-response can lead to a key management error, which could lead to a local...

7.8CVSS4.3AI score0.00044EPSS
Exploits1References4
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/11/16 9:32 a.m.3 views

Malicious code in odyssey-storybook (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21ce9d73f12a7c3aaf67cec3e8f097a12ee60fd024262c709adc6a096289c9c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
OSV
OSV
added 2024/11/16 9:32 a.m.2 views

MAL-2024-10742 Malicious code in odyssey-storybook (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21ce9d73f12a7c3aaf67cec3e8f097a12ee60fd024262c709adc6a096289c9c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7.2AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/07/06 5:16 p.m.4 views

Malicious code in whoisbuild (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b8f206b101a7dd5ada26eac1215351711e553298254e775f02bf41b15b6b55b7 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: duvet-love-odyssey Reasons based on the campaign: - infosteal...

7AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/07/06 5:16 p.m.4 views

Malicious code in discord-embedbuilder (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 45cebe5c70c375a3a60730db78e39aeee85af996b3982a69d6889300224d7137 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: duvet-love-odyssey Reasons based on the campaign: - infosteal...

7AI score
Exploits0References2
OSV
OSV
added 2024/07/06 5:16 p.m.3 views

MAL-2024-12256 Malicious code in discord-embedbuilder (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 45cebe5c70c375a3a60730db78e39aeee85af996b3982a69d6889300224d7137 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: duvet-love-odyssey Reasons based on the campaign: - infosteal...

6.9AI score
Exploits0References2
OSV
OSV
added 2024/07/06 5:16 p.m.3 views

MAL-2024-12370 Malicious code in whoisbuild (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b8f206b101a7dd5ada26eac1215351711e553298254e775f02bf41b15b6b55b7 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: duvet-love-odyssey Reasons based on the campaign: - infosteal...

6.9AI score
Exploits0References1
Rows per page
Query Builder