2 matches found
Improper Verification of Cryptographic Signature
Overview @jhb.software/payload-cloudinary-plugin is a Payload CMS storage adapter for Cloudinary Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature via the cloudinary-generate-signature endpoint, which forwards attacker-controlled parameters to th...
7.1CVSS6AI score
SaveExploits0References2
CVE-2015-5014
IBM Cognos Disclosure Management CDM 10.1.x and 10.2.x before 10.2.4 IF10 allows man-in-the-middle attackers to obtain access by spoofing an executable file during a client upload operation...
9.3CVSS5.5AI score0.01455EPSS
SaveExploits0References2
20