Lucene search
K

20 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-34622

Malicious code in bioql PyPI...

7.5CVSS7.6AI score0.00697EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 9:46 a.m.7 views

CVE-2024-25839

An issue was discovered in Webbax "Super Newsletter" supernewsletter module for PrestaShop versions 1.4.21 and before, allows local attackers to escalate privileges and obtain sensitive information...

7.5CVSS6.8AI score0.00453EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:23 a.m.7 views

CVE-2024-33275

SQL injection vulnerability in Webbax supernewsletter v.1.4.21 and before allows a remote attacker to escalate privileges via the Super Newsletter module in the productsearch.php components...

9.8CVSS8.3AI score0.00684EPSS
Exploits0References1
NVD
NVD
added 2024/04/30 3:15 p.m.14 views

CVE-2024-33275

SQL injection vulnerability in Webbax supernewsletter v.1.4.21 and before allows a remote attacker to escalate privileges via the Super Newsletter module in the productsearch.php components...

9.8CVSS7.8AI score0.00684EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/04/30 12:0 a.m.11 views

CVE-2024-33275

SQL injection vulnerability in Webbax supernewsletter v.1.4.21 and before allows a remote attacker to escalate privileges via the Super Newsletter module in the productsearch.php components...

8.2AI score0.00684EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/04/30 12:0 a.m.4 views

PT-2024-25186 · Unknown · Webbax Supernewsletter

Name of the Vulnerable Software and Affected Versions: Webbax supernewsletter versions 1.4.21 and earlier Description: The issue allows a remote attacker to escalate privileges via the Super Newsletter module in the product search.php component. Recommendations: For versions 1.4.21 and earlier,...

9.8CVSS7.5AI score0.00684EPSS
Exploits0References4
CVE
CVE
added 2024/04/30 12:0 a.m.50 views

CVE-2024-33275

The CVE describes a SQL injection affecting Webbax supernewsletter v1.4.21 and earlier, via the product_search.php component of the Super Newsletter module. The root cause is an SQL injection that enables a remote attacker to escalate privileges, with impact described as high confidentiality, int...

9.8CVSS8.2AI score0.00684EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/04/30 12:0 a.m.18 views

CVE-2024-33275

SQL injection vulnerability in Webbax supernewsletter v.1.4.21 and before allows a remote attacker to escalate privileges via the Super Newsletter module in the productsearch.php components...

8.1AI score0.00684EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/04/30 12:0 a.m.6 views

PrestaShop SQL注入漏洞

PrestaShop is an open source e-commerce solution from the American company PrestaShop. The solution provides multiple payment methods, SMS alerts and product image scaling. A SQL injection vulnerability exists in PrestaShop Webbax v.1.4.21 and earlier versions, which originates from a vulnerabili...

9.8CVSS8.3AI score0.00684EPSS
Exploits0References3
NVD
NVD
added 2024/03/03 9:15 a.m.14 views

CVE-2024-25839

An issue was discovered in Webbax "Super Newsletter" supernewsletter module for PrestaShop versions 1.4.21 and before, allows local attackers to escalate privileges and obtain sensitive information...

7.5CVSS6.5AI score0.00453EPSS
Exploits0References1
OSV
OSV
added 2024/03/03 9:15 a.m.2 views

CVE-2024-25839

An issue was discovered in Webbax "Super Newsletter" supernewsletter module for PrestaShop versions 1.4.21 and before, allows local attackers to escalate privileges and obtain sensitive information...

7.5CVSS5.8AI score0.00453EPSS
Exploits0References1
CVE
CVE
added 2024/03/03 12:0 a.m.55 views

CVE-2024-25839

The CVE-2024-25839 entry concerns Webbax “Super Newsletter” for PrestaShop (versions

7.5CVSS6.7AI score0.00453EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/03/03 12:0 a.m.22 views

CVE-2024-25839

An issue was discovered in Webbax "Super Newsletter" supernewsletter module for PrestaShop versions 1.4.21 and before, allows local attackers to escalate privileges and obtain sensitive information...

6.7AI score0.00453EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/03/03 12:0 a.m.14 views

CVE-2024-25839

An issue was discovered in Webbax "Super Newsletter" supernewsletter module for PrestaShop versions 1.4.21 and before, allows local attackers to escalate privileges and obtain sensitive information...

6.8AI score0.00453EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/03/03 12:0 a.m.6 views

PT-2024-21150 · Webbax · Super Newsletter

Name of the Vulnerable Software and Affected Versions: PrestaShop versions 1.4.21 and earlier Description: An issue was discovered in the Webbax "Super Newsletter" module, allowing local attackers to escalate privileges and obtain sensitive information. Recommendations: For PrestaShop versions...

7.5CVSS7.2AI score0.00453EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2023/05/31 1:15 a.m.1 views

CVE-2023-30197

Incorrect Access Control in the module "My inventory" myinventory = 1.6.6 from Webbax for PrestaShop, allows a guest to download personal information without restriction by performing a path traversal attack...

7.5CVSS7.1AI score0.00697EPSS
Exploits0References3
OSV
OSV
added 2023/05/31 1:15 a.m.1 views

CVE-2023-30197

Incorrect Access Control in the module "My inventory" myinventory = 1.6.6 from Webbax for PrestaShop, allows a guest to download personal information without restriction by performing a path traversal attack...

7.5CVSS7.1AI score0.00697EPSS
Exploits0References2
NVD
NVD
added 2023/05/31 1:15 a.m.15 views

CVE-2023-30197

Incorrect Access Control in the module "My inventory" myinventory = 1.6.6 from Webbax for PrestaShop, allows a guest to download personal information without restriction by performing a path traversal attack...

7.5CVSS7.4AI score0.00697EPSS
Exploits0References2
Prion
Prion
added 2023/05/31 1:15 a.m.10 views

Path traversal

Incorrect Access Control in the module "My inventory" myinventory = 1.6.6 from Webbax for PrestaShop, allows a guest to download personal information without restriction by performing a path traversal attack...

5CVSS7.4AI score0.00697EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2023/05/31 12:0 a.m.15 views

CVE-2023-30197

Incorrect Access Control in the module "My inventory" myinventory = 1.6.6 from Webbax for PrestaShop, allows a guest to download personal information without restriction by performing a path traversal attack...

7.5CVSS7.6AI score0.00697EPSS
Exploits0References2
Rows per page
Query Builder