Lucene search
K

11 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-2168

Malicious code in bioql PyPI...

5.3CVSS6.4AI score0.00278EPSS
Exploits0References8
RedhatCVE
RedhatCVE
added 2025/05/23 7:43 a.m.5 views

CVE-2024-37296

The Aimeos HTML client provides Aimeos HTML components for e-commerce projects. Starting in version 2020.04.1 and prior to versions 2020.10.27, 2021.10.21, 2022.10.12, 2023.10.14, and 2024.04.5, digital downloads sold in online shops can be downloaded without valid payment, e.g. if the payment...

5.3CVSS6.6AI score0.00278EPSS
Exploits0
OSV
OSV
added 2024/06/25 5:26 p.m.15 views

GHSA-PPM5-JV84-2XG2 Aimeos HTML client may potentially reveal sensitive information in error log

Impact Debug information can reveal sensitive information from environment variables in error log Affected platform Laravel environments with multi-vendor setups and admin access for the vendors...

8.8CVSS8.5AI score0.00293EPSS
Exploits0References4
GitLab Advisory Database
GitLab Advisory Database
added 2024/06/25 12:0 a.m.17 views

Aimeos HTML client may potentially reveal sensitive information in error log

Debug information can reveal sensitive information from environment variables in error log...

8.8CVSS6.5AI score0.00293EPSS
Exploits0References5Affected Software1
NVD
NVD
added 2024/06/11 3:16 p.m.19 views

CVE-2024-37296

The Aimeos HTML client provides Aimeos HTML components for e-commerce projects. Starting in version 2020.04.1 and prior to versions 2020.10.27, 2021.10.21, 2022.10.12, 2023.10.14, and 2024.04.5, digital downloads sold in online shops can be downloaded without valid payment, e.g. if the payment...

5.3CVSS0.00278EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 2024/06/11 2:43 p.m.19 views

CVE-2024-37296 Aimeos HTML client vulnerable to digital products download without proper payment status check

The Aimeos HTML client provides Aimeos HTML components for e-commerce projects. Starting in version 2020.04.1 and prior to versions 2020.10.27, 2021.10.21, 2022.10.12, 2023.10.14, and 2024.04.5, digital downloads sold in online shops can be downloaded without valid payment, e.g. if the payment...

5.3CVSS6.6AI score0.00278EPSS
Exploits0References6
OSV
OSV
added 2024/06/11 2:43 p.m.32 views

CVE-2024-37296 Aimeos HTML client vulnerable to digital products download without proper payment status check

The Aimeos HTML client provides Aimeos HTML components for e-commerce projects. Starting in version 2020.04.1 and prior to versions 2020.10.27, 2021.10.21, 2022.10.12, 2023.10.14, and 2024.04.5, digital downloads sold in online shops can be downloaded without valid payment, e.g. if the payment...

5.3CVSS6.6AI score0.00278EPSS
Exploits0References8
Cvelist
Cvelist
added 2024/06/11 2:43 p.m.22 views

CVE-2024-37296 Aimeos HTML client vulnerable to digital products download without proper payment status check

The Aimeos HTML client provides Aimeos HTML components for e-commerce projects. Starting in version 2020.04.1 and prior to versions 2020.10.27, 2021.10.21, 2022.10.12, 2023.10.14, and 2024.04.5, digital downloads sold in online shops can be downloaded without valid payment, e.g. if the payment...

5.3CVSS0.00278EPSS
Exploits0References6
CVE
CVE
added 2024/06/11 2:43 p.m.57 views

CVE-2024-37296

CVE-2024-37296 concerns the Aimeos HTML client. Reported vulnerability: digital downloads sold in online shops could be downloaded without a valid payment status check in affected versions prior to fixed releases. Affected: Aimeos HTML client versions before 2020.10.27, 2021.10.21, 2022.10.12, 20...

5.3CVSS5.1AI score0.00278EPSS
Exploits0References6
Github Security Blog
Github Security Blog
added 2024/06/05 1:30 p.m.31 views

Digital products download without proper payment status check

Impact Digital downloads sold in online shops can be downloaded without valid payment, e.g. if the payment didn't succeed. Patches New versions for the Aimeos HTML client 2020-2024 are available...

5.3CVSS7AI score0.00278EPSS
Exploits0References8Affected Software1
OSV
OSV
added 2024/06/05 1:30 p.m.15 views

GHSA-V4G2-CM5V-CXV7 Digital products download without proper payment status check

Impact Digital downloads sold in online shops can be downloaded without valid payment, e.g. if the payment didn't succeed. Patches New versions for the Aimeos HTML client 2020-2024 are available...

5.3CVSS5.1AI score0.00278EPSS
Exploits0References8
Rows per page
Query Builder