Lucene search
K

31 matches found

NVD
NVD
added 2024/03/31 5:15 a.m.10 views

CVE-2024-3118

A vulnerability, which was classified as critical, has been found in Dreamer CMS up to 4.1.3. This issue affects some unknown processing of the component Attachment Handler. The manipulation leads to permission issues. The attack may be initiated remotely. The exploit has been disclosed to the...

8.8CVSS6.4AI score0.00802EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2024/03/31 4:31 a.m.6 views

CVE-2024-3118 Dreamer CMS Attachment permission

A vulnerability, which was classified as critical, has been found in Dreamer CMS up to 4.1.3. This issue affects some unknown processing of the component Attachment Handler. The manipulation leads to permission issues. The attack may be initiated remotely. The exploit has been disclosed to the...

6.5CVSS6.7AI score0.00802EPSS
Exploits0References4
Cvelist
Cvelist
added 2024/03/31 4:31 a.m.12 views

CVE-2024-3118 Dreamer CMS Attachment permission

A vulnerability, which was classified as critical, has been found in Dreamer CMS up to 4.1.3. This issue affects some unknown processing of the component Attachment Handler. The manipulation leads to permission issues. The attack may be initiated remotely. The exploit has been disclosed to the...

6.5CVSS6.6AI score0.00802EPSS
Exploits0References4
CVE
CVE
added 2024/03/31 4:31 a.m.59 views

CVE-2024-3118

Dreamer CMS (up to version 4.1.3) contains a vulnerability in the Attachment Handler component that allows permission issues via remotely initiated abuse. The public disclosure (exploit) is noted in multiple sources (NVD, Red Hat, CVE listing, etc.). The description consistently cites “unknown pr...

8.8CVSS6.4AI score0.00802EPSS
Exploits0References4Affected Software1
CNNVD
CNNVD
added 2024/03/31 12:0 a.m.3 views

Dreamer CMS 授权问题漏洞

Dreamer CMS is a Dreamer Content Management System by Junnan Wang, an individual developer in China. An authorization issue vulnerability exists in Dreamer CMS 4.1.3 and earlier versions, which stems from an authorization issue vulnerability in the component Attachment Handler...

8.8CVSS6.5AI score0.00802EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2024/03/31 12:0 a.m.3 views

PT-2024-23821 · Unknown · Dreamer Cms

Name of the Vulnerable Software and Affected Versions: Dreamer CMS versions up to 4.1.3 Description: A critical issue has been found in the Attachment Handler component, leading to permission issues. The attack may be initiated remotely. The exploit has been disclosed to the public. The vendor wa...

8.8CVSS6.7AI score0.00802EPSS
Exploits0References7
OSV
OSV
added 2023/12/30 6:15 p.m.2 views

CVE-2023-7181

A vulnerability was found in Muyun DedeBIZ up to 6.2.12 and classified as critical. Affected by this issue is some unknown functionality of the component Add Attachment Handler. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to t...

7.2CVSS5.3AI score
Exploits0References3
Cvelist
Cvelist
added 2023/12/30 6:0 p.m.19 views

CVE-2023-7181 Muyun DedeBIZ Add Attachment unrestricted upload

A vulnerability was found in Muyun DedeBIZ up to 6.2.12 and classified as critical. Affected by this issue is some unknown functionality of the component Add Attachment Handler. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to t...

5.8CVSS7.2AI score0.00839EPSS
Exploits1References3
CNNVD
CNNVD
added 2023/12/30 12:0 a.m.2 views

DedeBIZ Code Issue Vulnerability

DedeBIZ is a content management system from the Chinese company Muyun Intelligent Technology DedeBIZ. A code issue vulnerability exists in Muyun DedeBIZ versions prior to 6.2.12, which stems from the component Add Attachment Handler that causes unrestricted uploads...

7.2CVSS7AI score0.00839EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2023/12/30 12:0 a.m.3 views

PT-2023-32927 · Unknown · Muyun Dedebiz

Name of the Vulnerable Software and Affected Versions: Muyun DedeBIZ versions up to 6.2.12 Description: A critical issue was found in the component Add Attachment Handler, allowing for unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public. The vend...

7.2CVSS6.8AI score0.00839EPSS
Exploits1References7
Ubuntu
Ubuntu
added 2006/01/16 7:45 p.m.41 views

USN-242-1: mailman vulnerabilities

Aliet Santiesteban Sifontes discovered a remote Denial of Service vulnerability in the attachment handler. An email with an attachment whose filename contained invalid UTF-8 characters caused mailman to crash. CVE-2005-3573 Mailman did not sufficiently verify the validity of email dates. Very lar...

7.8CVSS5.4AI score0.03072EPSS
Exploits0
Rows per page
Query Builder