143 matches found
EUVD-2025-199860
Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2025-58302
Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2025-58302
Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2025-58302
Huawei HarmonyOS/EMUI exposes a privilege control vulnerability in the Settings module due to improper privilege control, leading to potential confidential data exposure (Impact: HIGH). Affected: HarmonyOS/EMUI settings subsystem; root cause described as privilege control flaw. Exploitation detai...
PT-2025-48305
Name of the Vulnerable Software and Affected Versions Settings module affected versions not specified Description A permission control issue exists within the Settings module that could impact the confidentiality of the service. Successful exploitation of this issue may lead to unauthorized acces...
CVE-2025-60451
A stored Cross-Site Scripting XSS vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exists due to insufficient validation and sanitization of SVG file uploads in the app\system\include\module\uploadify.class.php component, specifically in the website settings module...
EUVD-2023-23922
Malicious code in bioql PyPI...
EUVD-2022-47964
Malicious code in bioql PyPI...
EUVD-2023-41042
Malicious code in bioql PyPI...
EUVD-2025-32294
Malicious code in bioql PyPI...
EUVD-2023-30843
Malicious code in bioql PyPI...
EUVD-2022-47939
Malicious code in bioql PyPI...
CVE-2025-60451
A stored Cross-Site Scripting XSS vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exists due to insufficient validation and sanitization of SVG file uploads in the app\system\include\module\uploadify.class.php component, specifically in the website settings module...
CVE-2025-60451
MetInfo CMS version 8.0 is susceptible to a stored Cross-Site Scripting (XSS) vulnerability due to inadequate validation and sanitization of SVG file uploads. The flaw is located in the app extbackslashsystem extbackslashinclude extbackslashmodule extbackslashuploadify.class.php component, specif...
CVE-2025-60451
A stored Cross-Site Scripting XSS vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exists due to insufficient validation and sanitization of SVG file uploads in the app\system\include\module\uploadify.class.php component, specifically in the website settings module...
CVE-2024-42031
Access permission verification vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2024-36682
In the module "Theme settings" pkthemesettings = 1.8.8 from Promokit.eu for PrestaShop, a guest can download all email collected while SHOP is in maintenance mode. Due to a lack of permissions control, a guest can access the txt file which collect email when maintenance is enable which can lead t...
CVE-2023-27054
A cross-site scripting XSS vulnerability in MiroTalk P2P before commit f535b35 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter under the settings module...