CVE-2024-22643

A Cross-Site Request Forgery CSRF vulnerability in SEO Panel version 4.10.0 allows remote attackers to perform unauthorized user password resets...

Design/Logic Flaw

An email address enumeration vulnerability exists in the password reset function of SEO Panel version 4.10.0. This allows an attacker to guess which emails exist on the system...

Design/Logic Flaw

An user enumeration vulnerability was found in SEO Panel 4.10.0. This issue occurs during user authentication, where a difference in error messages could allow an attacker to determine if a username is valid or not, enabling a brute-force attack with valid usernames...

Cross site request forgery (csrf)

A Cross-Site Request Forgery CSRF vulnerability in SEO Panel version 4.10.0 allows remote attackers to perform unauthorized user password resets...

Server side request forgery (ssrf)

A Blind SSRF vulnerability exists in the "Crawl Meta Data" functionality of SEO Panel version 4.10.0. This makes it possible for remote attackers to scan ports in the local environment...

Rockwell Automation LP30/40/50 and BM40 Operator Interface

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION : Exploitable remotely/low attack complexity Vendor : Rockwell Automation Equipment : LP30, LP40, LP50, and BM40 Operator Panels Vulnerability : Improper Validation of Consistency within Input, Out-of-bounds Write, Stack-based Buffer Overflow,...

PYSEC-2024-27

CrateDB 5.5.1 is contains an authentication bypass vulnerability in the Admin UI component. After configuring password authentication and Local In the case of an address, identity authentication can be bypassed by setting the X-Real IP request header to a specific value and accessing the Admin UI...

CVE-2024-22643

A Cross-Site Request Forgery CSRF vulnerability in SEO Panel version 4.10.0 allows remote attackers to perform unauthorized user password resets...

CVE-2024-22648

The CVE-2024-22648 entry concerns SEO Panel version 4.10.0 and identifies a Blind SSRF vulnerability in the Crawl Meta Data feature. The root cause is that the Crawl Meta Data function allows remote attackers to trigger requests from the vulnerable server to internal ports, enabling potential loc...

CVE-2024-22643

A Cross-Site Request Forgery CSRF vulnerability in SEO Panel version 4.10.0 allows remote attackers to perform unauthorized user password resets...

PT-2024-19518 · Seo Panel · Seo Panel

Name of the Vulnerable Software and Affected Versions: SEO Panel version 4.10.0 Description: A Cross-Site Request Forgery CSRF issue allows remote attackers to perform unauthorized user password resets. Recommendations: For SEO Panel version 4.10.0, update to a version that fixes this issue to...

SEO Panel Cross-Site Request Forgery Vulnerability

SEO Panel is an open source panel for managing website SEO Search Engine Optimization. A cross-site request forgery vulnerability exists in SEO Panel version 4.10.0, which originates from a vulnerability that allows a remote attacker to perform an unauthorized user password reset...

CVE-2024-22647

An user enumeration vulnerability was found in SEO Panel 4.10.0. This issue occurs during user authentication, where a difference in error messages could allow an attacker to determine if a username is valid or not, enabling a brute-force attack with valid usernames...

CVE-2024-22646

An email address enumeration vulnerability exists in the password reset function of SEO Panel version 4.10.0. This allows an attacker to guess which emails exist on the system...

PT-2024-19521 · Seo Panel · Seo Panel

Name of the Vulnerable Software and Affected Versions: SEO Panel version 4.10.0 Description: A Blind SSRF vulnerability exists in the "Crawl Meta Data" functionality. This makes it possible for remote attackers to scan ports in the local environment. Recommendations: For SEO Panel version 4.10.0,...

CVE-2024-22648

A Blind SSRF vulnerability exists in the "Crawl Meta Data" functionality of SEO Panel version 4.10.0. This makes it possible for remote attackers to scan ports in the local environment...

CVE-2024-22646

An email address enumeration vulnerability exists in the password reset function of SEO Panel version 4.10.0. This allows an attacker to guess which emails exist on the system...

PT-2024-19520 · Seo Panel · Seo Panel

Name of the Vulnerable Software and Affected Versions: SEO Panel version 4.10.0 Description: A user enumeration issue was found, occurring during user authentication. This issue allows an attacker to determine if a username is valid or not through differences in error messages, enabling a...

CVE-2024-22647

CVE-2024-22647 : SEO Panel 4.10.0 is vulnerable to user enumeration during authentication. The issue arises from differences in error messages that reveal whether a username exists, enabling brute-force attempts with valid usernames. Affected product: SEO Panel (version 4.10.0). Root cause: authe...

CVE-2024-22646

The provided sources corroborate CVE-2024-22646 affecting SEO Panel version 4.10.0, describing an email address enumeration vulnerability in the password reset function that lets an attacker determine which emails exist on the system. The CVSS data in the NVD entry indicates a Network attack vect...