Lucene search
+L

11069 matches found

Cvelist
Cvelist
added 2024/12/18 12:00 a.m.35 views

CVE-2024-55086

In the GetSimple CMS CE 3.3.19 management page, Server-Side Request Forgery SSRF can be achieved in the plug-in download address in the backend management system...

0.00404EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/12/18 12:00 a.m.16 views

PT-2024-36475 · Unknown · Getsimple Cms

Name of the Vulnerable Software and Affected Versions: GetSimple CMS CE version 3.3.19 Description: The issue is related to Server-Side Request Forgery SSRF in the backend plugin module. This allows an attacker to forge requests from the server, potentially leading to unauthorized access or...

8.8CVSS7AI score0.00246EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
added 2024/12/18 12:00 a.m.15 views

CVE-2024-55088

GetSimple CMS CE 3.3.19 is vulnerable to Server-Side Request Forgery SSRF in the backend plugin module...

7.1AI score0.00246EPSS
SaveExploits0References2
CVE
CVE
added 2024/12/18 12:00 a.m.82 views

CVE-2024-55088

CVE-2024-55088 affects GetSimple CMS CE 3.3.19 with a Server-Side Request Forgery (SSRF) in the backend plugin module . The CVSS 3.1 base score is 8.8 (HIGH) with network attack vector, low attack complexity, and privileges required, and impact to confidentiality, integrity, and availability (all...

8.8CVSS7AI score0.00246EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2024/12/18 12:00 a.m.13 views

Rhymix 安全漏洞

Rhymix is an open source CMS and framework from Rhymix Inc. A security vulnerability exists in Rhymix version 2.1.19, which stems from a server-side request forgery vulnerability in the backend import data function...

9.1CVSS6.7AI score0.00212EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/18 12:00 a.m.34 views

CVE-2024-55088

GetSimple CMS CE 3.3.19 is vulnerable to Server-Side Request Forgery SSRF in the backend plugin module...

0.00246EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/12/18 12:00 a.m.14 views

GetSimple CMS 安全漏洞

GetSimple CMS is a content management system from GetSimple CMS open source. A security vulnerability exists in GetSimple CMS version 3.3.19, which originates from the download address of a plugin in the backend management system, and can enable server-side request forgery attacks...

7.2CVSS6.7AI score0.00404EPSS
SaveExploits0References2
Xen Project
Xen Project
added 2024/12/17 12:00 p.m.39 views

Backend can crash Linux netfront

ISSUE DESCRIPTION After a suspend/resume cycle of a Linux guest e.g. via "virsh dompmsuspend"/ "virsh dompmwakeup" a malicious network backend can crash the guest via a NULL-pointer dereference in the guest's xen-netfront driver. During the resume operation the xen-netfront driver will release so...

5.7CVSS6.5AI score0.00624EPSS
SaveExploits0
CVE
CVE
added 2024/12/13 5:00 a.m.105 views

CVE-2024-21543

CVE-2024-21543 affects the Python package djoser up to version 2.3.0. The vulnerability arises when authenticate() fails and the system falls back to a direct database query, potentially granting access to users with valid credentials and bypassing authentication checks (e.g., 2FA, LDAP, or AUTHE...

7.1CVSS7.2AI score0.00558EPSS
SaveExploits0References6
NVD
NVD
added 2024/12/12 7:15 p.m.45 views

CVE-2024-55663

XWiki Platform is a generic wiki platform. Starting in version 6.3-milestone-2 and prior to versions 13.10.5 and 14.3-rc-1, in getdocument.vm; the ordering of the returned documents is defined from an unsanitized request parameter request.sort and can allow any user to inject HQL. Depending on th...

9.8CVSS0.00722EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/12/12 6:53 p.m.56 views

CVE-2024-55663 XWiki Platform has an SQL injection in getdocuments.vm with sort parameter

XWiki Platform is a generic wiki platform. Starting in version 6.3-milestone-2 and prior to versions 13.10.5 and 14.3-rc-1, in getdocument.vm; the ordering of the returned documents is defined from an unsanitized request parameter request.sort and can allow any user to inject HQL. Depending on th...

8.6CVSS0.00722EPSS
SaveExploits0References3
CVE
CVE
added 2024/12/12 6:53 p.m.102 views

CVE-2024-55663

CVE-2024-55663 is an SQL injection in XWiki Platform occurring in getdocument.vm, tied to an unsanitized sort parameter that can enable HQL injection. Affected versions include 6.3-milestone-2 up to 13.10.4/14.3-rc-1, with patches implemented in 13.10.5 and 14.3-rc-1. Depending on the database ba...

9.8CVSS6.3AI score0.00722EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2024/12/12 12:00 a.m.20 views

SUSE SLES15: cobbler / grafana-formula / inter-server-sync / mgr-daemon / etc (SUSE-SU-2024:4006-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:4006-1 advisory. cobbler: - Security issues fixed: CVE-2024-47533: Prevent privilege escalation from none to admin bsc1231332 - Other bugs fixed: Increase start...

9.8CVSS7.3AI score0.04003EPSS
SaveExploits6References60
NVD
NVD
added 2024/12/10 11:15 p.m.22 views

CVE-2024-55653

PwnDoc is a penetration test report generator. In versions up to and including 0.5.3, an authenticated user is able to crash the backend by raising a UnhandledPromiseRejection on audits which exits the backend. The user doesn't need to know the audit id, since a bad audit id will also raise the...

6.5CVSS0.00594EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2024/12/10 10:56 p.m.29 views

CVE-2024-55653 pwndoc's UnhandledPromiseRejection on audits causes Denial of Service (DoS)

PwnDoc is a penetration test report generator. In versions up to and including 0.5.3, an authenticated user is able to crash the backend by raising a UnhandledPromiseRejection on audits which exits the backend. The user doesn't need to know the audit id, since a bad audit id will also raise the...

6.5CVSS0.00594EPSS
SaveExploits1References1
CVE
CVE
added 2024/12/10 10:56 p.m.92 views

CVE-2024-55653

CVE-2024-55653 affects the PwnDoc open-source tool, with versions up to and including 0.5.3. The root issue is an authentication-bypassable path that can raise an UnhandledPromiseRejection on audits, causing the backend to crash. This makes the entire application unresponsive and unusable for all...

6.5CVSS6.8AI score0.00594EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/12/10 10:56 p.m.12 views

CVE-2024-55653 pwndoc's UnhandledPromiseRejection on audits causes Denial of Service (DoS)

PwnDoc is a penetration test report generator. In versions up to and including 0.5.3, an authenticated user is able to crash the backend by raising a UnhandledPromiseRejection on audits which exits the backend. The user doesn't need to know the audit id, since a bad audit id will also raise the...

6.5CVSS6.7AI score0.00594EPSS
SaveExploits1References1
OSV
OSV
added 2024/12/10 10:56 p.m.17 views

CVE-2024-55653 pwndoc's UnhandledPromiseRejection on audits causes Denial of Service (DoS)

PwnDoc is a penetration test report generator. In versions up to and including 0.5.3, an authenticated user is able to crash the backend by raising a UnhandledPromiseRejection on audits which exits the backend. The user doesn't need to know the audit id, since a bad audit id will also raise the...

6.5CVSS6.5AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/12/10 12:00 a.m.10 views

PT-2024-9874 · Pwndoc · Pwndoc

Name of the Vulnerable Software and Affected Versions: PwnDoc versions up to and including 0.5.3 Description: The issue is related to insufficient input validation in the audits interface of the PwnDoc tool, which can be exploited by an authenticated user to crash the backend by raising an...

6.8CVSS6.7AI score0.00594EPSS
SaveExploits1References8
CNNVD
CNNVD
added 2024/12/10 12:00 a.m.11 views

PwnDoc 输入验证错误漏洞

PwnDoc is a penetration test report generator from the PwnDoc open source. An input validation error vulnerability exists in PwnDoc 0.5.3 and earlier versions, which stems from the fact that an authenticated user can crash the backend by raising an UnhandledPromiseRejection on an audit on the exi...

6.5CVSS6.5AI score0.00594EPSS
SaveExploits1References1
Rows per page
Query Builder