Lucene search
+L

6067 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/03 12:00 a.m.•7 views

CVE-2024-13068: Origin Validation Error

Origin Validation Error vulnerability in Akinsoft LimonDesk allows Forceful Browsing. This issue affects LimonDesk: from s1.02.14 before v1.02.17...

7.3CVSS5.8AI score0.00154EPSS
SaveExploits0References2
NVD
NVD
•added 2025/09/02 12:15 p.m.•20 views

CVE-2024-12973

Origin Validation Error vulnerability in Akinsoft OctoCloud allows HTTP Response Splitting, CAPEC - 87 - Forceful Browsing. This issue affects OctoCloud: from s1.09.01 before v1.11.01...

4.7CVSS0.00149EPSS
SaveExploits0References2
CVE
CVE
•added 2025/09/02 11:43 a.m.•31 views

CVE-2024-12973

CVE-2024-12973 describes an Origin Validation Error in Akinsoft OctoCloud that allows HTTP response splitting. Affected versions are s1.09.01 through before v1.11.01; the issue is mitigated by upgrading to v1.11.01 or later. The root cause is improper origin validation that permits crafted HTTP r...

4.7CVSS5.8AI score0.00149EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2025/09/02 11:43 a.m.•12 views

CVE-2024-12973

Origin Validation Error vulnerability in Akinsoft OctoCloud allows HTTP Response Splitting, CAPEC - 87 - Forceful Browsing. This issue affects OctoCloud: from s1.09.01 before v1.11.01...

4.7CVSS5.8AI score0.00149EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/09/02 11:43 a.m.•10 views

CVE-2024-12973 Host Header Injection in Akinsoft's OctoCloud

Origin Validation Error vulnerability in Akinsoft OctoCloud allows HTTP Response Splitting, CAPEC - 87 - Forceful Browsing. This issue affects OctoCloud: from s1.09.01 before v1.11.01...

4.7CVSS5.8AI score0.00149EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/09/02 11:43 a.m.•26 views

CVE-2024-12973 Host Header Injection in Akinsoft's OctoCloud

Origin Validation Error vulnerability in Akinsoft OctoCloud allows HTTP Response Splitting, CAPEC - 87 - Forceful Browsing. This issue affects OctoCloud: from s1.09.01 before v1.11.01...

4.7CVSS0.00149EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/09/02 12:00 a.m.•22 views

PT-2025-35549

Name of the Vulnerable Software and Affected Versions: Akinsoft OctoCloud versions s1.09.01 through v1.11.00 Description: An origin validation error exists in Akinsoft OctoCloud, enabling HTTP response splitting. This issue is categorized as CAPEC - 87 - Forceful Browsing. Recommendations: Update...

4.7CVSS6.4AI score0.00149EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/02 12:00 a.m.•6 views

CVE-2024-12973: Origin Validation Error

Origin Validation Error vulnerability in Akinsoft OctoCloud allows HTTP Response Splitting, CAPEC - 87 - Forceful Browsing. This issue affects OctoCloud: from s1.09.01 before v1.11.01...

4.7CVSS5.8AI score0.00149EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/09/02 12:00 a.m.•18 views

Akinsoft OctoCloud Access Control Vulnerability

Akinsoft OctoCloud is an online platform from Akinsoft Turkey with the ability to manage financial transactions, record receipts and inventory, issue invoices, and generate reports. A source validation error vulnerability exists in versions prior to Akinsoft OctoCloud s1.09.01 through v1.11.01,...

4.7CVSS6.7AI score0.00149EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
•added 2025/09/01 11:04 a.m.•12 views

Security Bulletin: A vulnerability in axios may affect IBM Decision Optimization for IBM Cloud Pak for Data (CVE-2024-57965)

Summary There is a vulnerability in axios used by IBM Decision Optimization for IBM Cloud Pak for Data. IBM Decision Optimization for IBM Cloud Pak for Data has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2024-57965 DESCRIPTION: In axios before 1.7.8,...

9.8CVSS7.3AI score0.00383EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
•added 2025/08/29 12:00 a.m.•10 views

Next.js input validation error vulnerability

Next.js is a React framework open-sourced by Vercel. An input validation error vulnerability exists in Next.js versions prior to 14.2.31 and 15.0.0 through 15.4.5, which stems from content injection of the image optimization feature and could lead to a phishing attack...

4.3CVSS6.7AI score0.006EPSS
SaveExploits0References5
CNVD
CNVD
•added 2025/08/28 12:00 a.m.•30 views

libbiosig input validation error vulnerability (CNVD-2025-20232)

libbiosig is BioSig Project open source an open source software library for biomedical signal processing . With biological signal analysis functions. libbiosig has an input validation error vulnerability , the vulnerability stems from the ABF parsing function fails to correctly validate the user...

9.8CVSS8AI score0.00857EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/08/27 12:00 a.m.•14 views

WordPress plugin Podlove Podcast Publisher has a vulnerability in input validation.

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. An input validation error...

4.7CVSS6.5AI score0.0021EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/08/27 12:00 a.m.•27 views

Basecamp input validation vulnerability

Basecamp is a project management software from Basecamp, Inc. An input validation error vulnerability exists in Basecamp versions prior to 1.3.0 that stems from improper URL validation and could lead to redirection attacks...

4.2CVSS6.3AI score0.0024EPSS
SaveExploits0References5
CNVD
CNVD
•added 2025/08/26 12:00 a.m.•27 views

D-Link DIR-619L formSysCmd Function Buffer Overflow Vulnerability

D-Link DIR-619L is a home wireless router from AUO D-Link, designed for home and small office environments, utilizing the IEEE 802.11n wireless standard with a maximum transmission rate of 300Mbps. The D-Link DIR-619L suffers from a buffer overflow vulnerability that originates from the submit-ur...

9.8CVSS7.3AI score0.00511EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/08/25 12:00 a.m.•26 views

libbiosig: Input validation vulnerability

libbiosig is BioSig Project open source an open source software library for biomedical signal processing . With biological signal analysis functions. libbiosig there is an input validation error vulnerability , the vulnerability stems from the GDF parsing function fails to correctly validate the...

9.8CVSS7.8AI score0.0068EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2025/08/25 12:00 a.m.•9 views

The Scratch Channel input validation error vulnerability

The Scratch Channel is a project site of The Scratch Channel open source. An input validation error vulnerability exists in version 1 of The Scratch Channel, which stems from the fact that local storage can be edited, potentially leading to account information tampering...

6.7CVSS6.1AI score0.0017EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/08/25 12:00 a.m.•20 views

The Scratch Channel input validation error vulnerability

The Scratch Channel is a project site of The Scratch Channel open source. An input validation error vulnerability exists in The Scratch Channel versions 1 and 1.1, which stems from insufficient validation of article publishing endpoint permissions, and could lead to unauthorized publishing of...

8.7CVSS6.5AI score0.00322EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/08/25 12:00 a.m.•21 views

libbiosig: Input validation vulnerability

libbiosig is BioSig Project open source an open source software library for biomedical signal processing . With biological signal analysis functions. libbiosig has an input validation error vulnerability , the vulnerability stems from the ABF parsing function fails to correctly validate the user...

9.8CVSS7.9AI score0.00857EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
•added 2025/08/20 3:31 p.m.•23 views

elysia-cors Origin Validation Error

An Origin Validation Error in the elysia-cors library thru 1.3.0 allows attackers to bypass Cross-Origin Resource Sharing CORS restrictions. The library incorrectly validates the supplied origin by checking if it is a substring of any domain in the site's CORS policy, rather than performing an...

6.5CVSS7.1AI score0.00493EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder