13 matches found
CVE-2025-41720
A low privileged remote attacker can upload arbitrary data masked as a png file to the affected device using the webserver API because only the file extension is verified...
EUVD-2022-44611
Malicious code in bioql PyPI...
CVE-2024-27499
Bagisto v1.5.1 is vulnerable for Cross site scriptingXSS via png file upload vulnerability in product review option...
CVE-2024-39717
The Versa Director GUI provides an option to customize the look and feel of the user interface. This option is only available for a user logged with Provider-Data-Center-Admin or Provider-Data-Center-System-Admin. Tenant level users do not have this privilege. The “Change Favicon” Favorite Icon...
Bagist Cross-site Scripting vulnerability
Bagisto is vulnerable to cross-site scripting XSS via png file upload vulnerability in product review option...
CVE-2024-27499
Bagisto v1.5.1 is vulnerable for Cross site scriptingXSS via png file upload vulnerability in product review option...
Cross site scripting
Bagisto v1.5.1 is vulnerable for Cross site scriptingXSS via png file upload vulnerability in product review option...
CVE-2024-27499
CVE-2024-27499 (Bagisto v1.5.1) describes a Cross-Site Scripting (XSS) vulnerability arising from insufficient validation of user-uploaded PNG files in the product review option. Multiple sources (including Red Hat, Veracode, and OSV/GHSA entries) align on the issue being an XSS in Bagisto’s revi...
CVE-2024-27499
Bagisto v1.5.1 is vulnerable for Cross site scriptingXSS via png file upload vulnerability in product review option...
CVE-2024-27499
Bagisto v1.5.1 is vulnerable for Cross site scriptingXSS via png file upload vulnerability in product review option...
CVE-2024-27499
Bagisto v1.5.1 is vulnerable for Cross site scriptingXSS via png file upload vulnerability in product review option...
Design/Logic Flaw
AMI AptioV contains a vulnerability in BIOS where a User may cause an unrestricted upload of a PNG Logo file with dangerous type by Local access. A successful exploit of this vulnerability may lead to a loss of Confidentiality, Integrity, and/or Availability...