Lucene search
+L

2878 matches found

OSV
OSV
•added 2024/09/27 12:00 a.m.•42 views

ALSA-2024:7346 Important: cups-filters security update

The cups-filters package contains back ends, filters, and other software that was once part of the core Common UNIX Printing System CUPS distribution but is now maintained independently. Security Fixes: cups-browsed: cups-browsed binds on UDP INADDRANY:631 trusting any packet from any source...

8.6CVSS7.4AI score0.77644EPSS
SaveExploits5References8
AlmaLinux
AlmaLinux
•added 2024/09/27 12:00 a.m.•39 views

Important: cups-filters security update

The cups-filters package contains back ends, filters, and other software that was once part of the core Common UNIX Printing System CUPS distribution but is now maintained independently. Security Fixes: cups-browsed: cups-browsed binds on UDP INADDRANY:631 trusting any packet from any source...

8.6CVSS7.5AI score0.77644EPSS
SaveExploits16References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/25 12:00 a.m.•8 views

CVE-2024-8741: Improper Neutralization of Input During Web Page Generation

The Beam me up Scotty – Back to Top Button plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.0.21. This makes it possible for unauthenticated attackers to inject...

6.1CVSS6AI score0.00386EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/09/24 12:00 a.m.•18 views

PT-2024-39218 · WordPress · Beam Me Up Scotty – Back To Top Button

Name of the Vulnerable Software and Affected Versions: Beam me up Scotty – Back to Top Button plugin for WordPress versions up to, and including, 1.0.21 Description: The issue is related to Reflected Cross-Site Scripting due to the use of add query arg without proper escaping on the URL. This...

6.1CVSS6.8AI score0.00386EPSS
SaveExploits0References7
Gentoo Linux
Gentoo Linux
•added 2024/09/22 12:00 a.m.•32 views

liblouis: Multiple Vulnerabilities

Background liblouis is an open-source braille translator and back-translator. Description Multiple vulnerabilities have been discovered in liblouis. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is...

7.5CVSS7.7AI score0.01356EPSS
SaveExploits2
NVD
NVD
•added 2024/09/19 6:15 a.m.•43 views

CVE-2024-47086

This vulnerability exists in Apex Softcell LD DP Back Office due to improper implementation of OTP validation mechanism in certain API endpoints. An authenticated remote attacker could exploit this vulnerability by providing arbitrary OTP value for authentication and subsequently changing its API...

8.7CVSS0.00474EPSS
SaveExploits0References1
OSV
OSV
•added 2024/09/19 6:15 a.m.•16 views

CVE-2024-47086

This vulnerability exists in Apex Softcell LD DP Back Office due to improper implementation of OTP validation mechanism in certain API endpoints. An authenticated remote attacker could exploit this vulnerability by providing arbitrary OTP value for authentication and subsequently changing its API...

6.5CVSS5.9AI score0.00474EPSS
SaveExploits0References1
NVD
NVD
•added 2024/09/19 6:15 a.m.•46 views

CVE-2024-47085

This vulnerability exists in Apex Softcell LD DP Back Office due to improper validation of certain parameters cCdslClicentcode and cLdClientCode in the API endpoint. An authenticated remote attacker could exploit this vulnerability by manipulating parameters in the API request body leading to...

8.7CVSS0.00436EPSS
SaveExploits0References1
OSV
OSV
•added 2024/09/19 6:15 a.m.•16 views

CVE-2024-47085

This vulnerability exists in Apex Softcell LD DP Back Office due to improper validation of certain parameters cCdslClicentcode and cLdClientCode in the API endpoint. An authenticated remote attacker could exploit this vulnerability by manipulating parameters in the API request body leading to...

6.5CVSS5.8AI score0.00436EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/09/19 6:03 a.m.•49 views

CVE-2024-47086 OTP Bypass Vulnerability

This vulnerability exists in Apex Softcell LD DP Back Office due to improper implementation of OTP validation mechanism in certain API endpoints. An authenticated remote attacker could exploit this vulnerability by providing arbitrary OTP value for authentication and subsequently changing its API...

8.7CVSS0.00474EPSS
SaveExploits0References1
CVE
CVE
•added 2024/09/19 6:03 a.m.•110 views

CVE-2024-47086

Apex Softcell LD DP Back Office is affected by CVE-2024-47086 due to improper OTP validation in certain API endpoints. The vulnerability allows an authenticated remote attacker to supply arbitrary OTP values, potentially bypassing OTP verification for other user accounts and altering API response...

8.7CVSS6.6AI score0.00474EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2024/09/19 5:56 a.m.•97 views

CVE-2024-47085

The CVE-2024-47085 vulnerability affects Apex Softcell LD DP Back Office, arising from improper validation of API parameters cCdslClicentcode and cLdClientCode in the API endpoint. An authenticated remote attacker could manipulate request body parameters to expose sensitive information from other...

8.7CVSS6.3AI score0.00436EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/09/19 5:56 a.m.•24 views

CVE-2024-47085 Parameter Manipulation Vulnerability

This vulnerability exists in Apex Softcell LD DP Back Office due to improper validation of certain parameters cCdslClicentcode and cLdClientCode in the API endpoint. An authenticated remote attacker could exploit this vulnerability by manipulating parameters in the API request body leading to...

8.7CVSS6AI score0.00436EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/09/19 12:00 a.m.•21 views

Apex Softcell LD DP Back Office 安全漏洞

Apex Softcell LD DP Back Office is an application from Apex Softcell. Apex Softcell LD DP Back Office has a security vulnerability that stems from improper implementation of the OTP authentication mechanism in certain API endpoints...

8.7CVSS7AI score0.00474EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/09/19 12:00 a.m.•13 views

Performance Co-Pilot 后置链接漏洞

Performance Co-Pilot is an open source software infrastructure for monitoring, visualizing, logging, responding to, and controlling the state, activity, and performance of networks, computers, applications, and servers. Performance Co-Pilot suffers from a back-link vulnerability that originates...

4.4CVSS6.6AI score0.00285EPSS
SaveExploits0References12
CNNVD
CNNVD
•added 2024/09/19 12:00 a.m.•16 views

Apex Softcell LD DP Back Office 安全漏洞

Apex Softcell LD DP Back Office is an application from Apex Softcell. Apex Softcell LD DP Back Office has a security vulnerability that originates from improper validation of certain parameters "cCdslClicentcode" and "cLdClientCode The vulnerability stems from improper validation of certain...

8.7CVSS6.6AI score0.00436EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/19 12:00 a.m.•4 views

CVE-2024-47085: Exposure of Private Personal Information to an Unauthorized Actor

This vulnerability exists in Apex Softcell LD DP Back Office due to improper validation of certain parameters cCdslClicentcode and cLdClientCode in the API endpoint. An authenticated remote attacker could exploit this vulnerability by manipulating parameters in the API request body leading to...

8.7CVSS5.9AI score0.00436EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/19 12:00 a.m.•5 views

CVE-2024-47086: Authentication Bypass by Assumed-Immutable Data

This vulnerability exists in Apex Softcell LD DP Back Office due to improper implementation of OTP validation mechanism in certain API endpoints. An authenticated remote attacker could exploit this vulnerability by providing arbitrary OTP value for authentication and subsequently changing its API...

8.7CVSS6.1AI score0.00474EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/09/18 12:00 a.m.•18 views

PT-2024-32400 · Apex Softcell · Apex Softcell Ld Dp Back Office

Name of the Vulnerable Software and Affected Versions: Apex Softcell LD DP Back Office affected versions not specified Description: This issue is related to the improper implementation of the OTP validation mechanism in certain API endpoints, allowing an authenticated remote attacker to exploit t...

8.7CVSS6.9AI score0.00474EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2024/09/18 12:00 a.m.•5 views

PT-2024-32399

Name of the Vulnerable Software and Affected Versions Apex Softcell LD DP Back Office affected versions not specified Description The issue exists due to improper validation of certain parameters, cCdslClicentcode and cLdClientCode, in an API endpoint. An authenticated remote attacker could explo...

8.7CVSS0.00436EPSS
SaveExploits0References12
Rows per page
Query Builder