4 matches found
EUVD-2026-67821
Chainlit through 2.12.0 fails to validate ownership of feedback records in PUT and DELETE endpoints. Authenticated attackers can delete or modify other users' feedback by supplying arbitrary feedback identifiers, corrupting human-rating data used for model evaluation...
CVE-2021-43442
A Logic Flaw vulnerability exists in i3 International Inc Annexxus Camera V5.2.0 build 150317 Ax46, V5.0.9 build 151106 Ax68, and V5.0.9 build 150615 Ax78 due to a failure to allow the creation of more than one administrator account; however, this can be bypassed by parameter maniulation using PU...
CVE-2003-5001
A vulnerability was found in ISS BlackICE PC Protection and classified as critical. Affected by this issue is the component Cross Site Scripting Detection. The manipulation as part of POST/PUT/DELETE/OPTIONS Request leads to privilege escalation. The attack may be launched remotely. The exploit h...
PT-2022-7714 · Ibm · Blackice Pc Protection
Name of the Vulnerable Software and Affected Versions: ISS BlackICE PC Protection affected versions not specified Description: A critical vulnerability was found in the Cross Site Scripting Detection component of ISS BlackICE PC Protection. The issue allows for privilege escalation through...