Lucene search
+L

79 matches found

OSV
OSV
•added 2026/03/20 5:50 p.m.•9 views

CVE-2026-31836 Mass Assignment Privilege Escalation in Checkmate

Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations. In versions from 3.5.1 and prior, a mass assignment vulnerability in Checkmate's user profile update endpoint allows any...

8.1CVSS5.9AI score
SaveExploits0References3
Snyk
Snyk
•added 2026/02/26 3:13 a.m.•6 views

Improper Privilege Management

Overview Affected versions of this package are vulnerable to Improper Privilege Management via the IsAdmin field in the user profile update process. An attacker can gain unauthorized administrative privileges by sending a crafted PUT request to their own user profile endpoint with IsAdmin set to...

8.8CVSS6AI score0.00547EPSS
SaveExploits0References2
NVD
NVD
•added 2026/02/20 5:25 p.m.•16 views

CVE-2026-27506

SVXportal version 2.5 and prior contain a stored cross-site scripting vulnerability in the user profile update workflow usersettings.php submitting to admin/updateuser.php. Authenticated users can store malicious HTML/JavaScript in fields such as Firstname, lastname, email, and imageurl, which ar...

6.1CVSS0.00294EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/20 12:00 a.m.•0 views

CVE-2026-27506: Improper Neutralization of Input During Web Page Generation

SVXportal version 2.5 and prior contain a stored cross-site scripting vulnerability in the user profile update workflow usersettings.php submitting to admin/updateuser.php. Authenticated users can store malicious HTML/JavaScript in fields such as Firstname, lastname, email, and imageurl, which ar...

6.1CVSS5.8AI score0.00294EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/01/09 10:37 a.m.•14 views

CVE-2017-12584

There is no CSRF mitigation in SLiMS 8 Akasia through 8.3.1. Also, an entire user profile including the password can be updated without sending the current password. This allows remote attackers to trick a user into changing to an attacker-controlled password, a complete account takeover, via the...

8.8CVSS7AI score0.0093EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2007-6143

Malware in sbrugna...

8.5CVSS6.4AI score0.01476EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2018-18610

Malware in sbrugna...

5.4CVSS5.5AI score0.00558EPSS
SaveExploits4References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2017-4155

Malware in sbrugna...

8.8CVSS8.6AI score0.0093EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2012-1198

Malware in sbrugna...

8.2CVSS8AI score0.02286EPSS
SaveExploits0References10
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2017-18377

Malware in sbrugna...

8.8CVSS8.8AI score0.00453EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2006-3132

Malware in sbrugna...

7.5CVSS6.4AI score0.01894EPSS
SaveExploits1References12
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•12 views

EUVD-2023-28738

Malicious code in bioql PyPI...

8.8CVSS8.6AI score0.01006EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•11 views

EUVD-2023-28742

Malicious code in bioql PyPI...

8.8CVSS8.6AI score0.01006EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•10 views

EUVD-2024-26828

Malicious code in bioql PyPI...

9.8CVSS6.2AI score0.00583EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2025-10843

Malicious code in bioql PyPI...

4.3CVSS6.2AI score0.00306EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•24 views

EUVD-2023-28740

Malicious code in bioql PyPI...

8.8CVSS8.6AI score0.01049EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•12 views

EUVD-2023-28739

Malicious code in bioql PyPI...

8.8CVSS8.6AI score0.01049EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2025-23199

Malicious code in bioql PyPI...

8.2CVSS6.5AI score0.00407EPSS
SaveExploits2References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2023-55506

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.00672EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•10 views

EUVD-2023-28741

Malicious code in bioql PyPI...

8.8CVSS8.6AI score0.01006EPSS
SaveExploits1References3
Rows per page
Query Builder