Lucene search
+L

16 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2020-17886

Malware in sbrugna...

7.8CVSS7.3AI score0.01472EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2022-5508

Malicious code in bioql PyPI...

4CVSS6.3AI score0.01128EPSS
SaveExploits0References9
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2024-47367

Malicious code in bioql PyPI...

4.4CVSS6.6AI score0.00158EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 3:22 p.m.•16 views

CVE-2020-25195

The length of the input fields of Host Engineering H0-ECOM100, H2-ECOM100, and H4-ECOM100 modules are verified only on the client side when receiving input from the configuration web server, which may allow an attacker to bypass the check and send input to crash the device...

7.8CVSS6.9AI score0.01472EPSS
SaveExploits0
NVD
NVD
•added 2024/11/26 8:15 a.m.•23 views

CVE-2024-6831

Seth Fogie, member of AXIS Camera Station Pro Bug Bounty Program has found that it is possible to edit and/or remove views without the necessary permission due to a client-side-only check. Axis has released patched versions for the highlighted flaw. Please refer to the Axis security advisory for...

4.4CVSS0.00158EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/26 7:14 a.m.•71 views

CVE-2024-6831

CVE-2024-6831 affects AXIS Camera Station Pro; the issue arises from a client-side-only permission check that allows editing and/or removing views without proper authorization. Impact is limited to features that manage views, with a local-privilege attack surface as described. Axis has released p...

4.4CVSS4.8AI score0.00158EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/26 7:14 a.m.•28 views

CVE-2024-6831

Seth Fogie, member of AXIS Camera Station Pro Bug Bounty Program has found that it is possible to edit and/or remove views without the necessary permission due to a client-side-only check. Axis has released patched versions for the highlighted flaw. Please refer to the Axis security advisory for...

4.4CVSS0.00158EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/26 12:00 a.m.•5 views

CVE-2024-6831: Client-Side Enforcement of Server-Side Security

Seth Fogie, member of AXIS Camera Station Pro Bug Bounty Program has found that it is possible to edit and/or remove views without the necessary permission due to a client-side-only check. Axis has released patched versions for the highlighted flaw. Please refer to the Axis security advisory for...

4.4CVSS5.7AI score0.00158EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/11/26 12:00 a.m.•16 views

PT-2024-37891 · Axis · Axis Camera Station Pro

Name of the Vulnerable Software and Affected Versions: AXIS Camera Station Pro affected versions not specified Description: The issue allows editing and/or removal of views without necessary permission due to a client-side-only check. Axis has released patched versions for the flaw...

4.4CVSS6.9AI score0.00158EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/11/26 12:00 a.m.•18 views

AXIS Camera Station Pro 安全漏洞

AXIS Camera Station Pro is a powerful and flexible video management and access control from Axis Sweden. A security vulnerability exists in AXIS Camera Station Pro versions prior to 6.4, which stems from a client-side-only check and therefore allows editing and deletion of views without the...

4.4CVSS6.6AI score0.00158EPSS
SaveExploits0References1
OSV
OSV
•added 2022/05/24 5:09 p.m.•122 views

GHSA-VJCM-J85R-7P68 DNN File Upload Vulnerability

DNN formerly DotNetNuke through 9.4.4 has a File upload vulnerability via bypassing client-side file extension check...

6.5CVSS6.4AI score0.01851EPSS
SaveExploits3References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/16 12:00 a.m.•3 views

CVE-2022-24984: Unrestricted Upload of File with Dangerous Type

Forms generated by JQueryForm.com before 2022-02-05 if file-upload capability is enabled allow remote unauthenticated attackers to upload executable files and achieve remote code execution. This occurs because file-extension checks occur on the client side, and because not all executable content...

9.8CVSS7.9AI score0.02596EPSS
SaveExploits0References2
Prion
Prion
•added 2021/06/21 8:15 p.m.•27 views

Design/Logic Flaw

The Comments Like Dislike WordPress plugin before 1.1.4 allows users to like/dislike posted comments, however does not prevent them from replaying the AJAX request to add a like. This allows any user even unauthenticated to add unlimited like/dislike to any comment. The plugin appears to have som...

5CVSS5.2AI score0.00981EPSS
SaveExploits2References1Affected Software1
Positive Technologies
Positive Technologies
•added 2021/01/01 12:00 a.m.•15 views

PT-2021-11877

Name of the Vulnerable Software and Affected Versions: Divi Builder plugin versions prior to 4.5.3 Divi theme versions prior to 4.5.3 Divi Extra theme versions prior to 4.5.3 Description: An issue allows authenticated attackers with contributor-level or above capabilities to upload arbitrary file...

9.9CVSS8AI score0.02451EPSS
SaveExploits2References5
Prion
Prion
•added 2012/07/23 9:55 p.m.•21 views

Design/Logic Flaw

Moodle 2.3.x before 2.3.1 uses only a client-side check for whether references are permitted in a file upload, which allows remote authenticated users to bypass intended alias aka shortcut restrictions via a client that omits this check...

4CVSS6.5AI score0.01128EPSS
SaveExploits0References5Affected Software1
UbuntuCve
UbuntuCve
•added 2012/07/23 9:55 p.m.•29 views

CVE-2012-3387

Moodle 2.3.x before 2.3.1 uses only a client-side check for whether references are permitted in a file upload, which allows remote authenticated users to bypass intended alias aka shortcut restrictions via a client that omits this check...

4CVSS5.9AI score0.01128EPSS
SaveExploits0References3
Rows per page
Query Builder