CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

147 matches found

OSV•added 2019/10/14 9:23 p.m.•44 views

GHSA-974J-WJXX-WGGJ Incorrect Access Control vulnerability in api-platform/core

API Platform version from 2.2.0 to 2.3.5 contains an Incorrect Access Control vulnerability in GraphQL delete mutations that can result in a user authorized to delete a resource can delete any resource. This attack appears to be exploitable via the user must be authorized. This vulnerability...

6.5CVSS6.4AI score0.01024EPSS

SaveExploits0References4

NVD•added 2019/02/04 9:29 p.m.•44 views

CVE-2019-1000011

6.5CVSS6.5AI score0.01024EPSS

SaveExploits0References2

OSV•added 2019/02/04 9:29 p.m.•23 views

CVE-2019-1000011

6.5CVSS6.8AI score

SaveExploits0References2

Prion•added 2019/02/04 9:29 p.m.•32 views

Improper access control

5.5CVSS6.5AI score0.01024EPSS

SaveExploits0References2Affected Software1

Cvelist•added 2019/02/04 9:00 p.m.•46 views

CVE-2019-1000011

6.5AI score0.01024EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2019/02/04 12:00 a.m.•5 views

CVE-2019-1000011: Undefined Security Weakness

6.5CVSS5.7AI score0.01024EPSS

SaveExploits0References1

GitLab Advisory Database•added 2019/02/04 12:00 a.m.•49 views

Improper Access Control

API Platform contains an Incorrect Access Control vulnerability in GraphQL delete mutations that can result in a user authorized to delete a resource can delete any resource. This attack appears to be exploitable via the user must be authorized...

6.5CVSS5.3AI score0.01024EPSS

SaveExploits0References1Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by