Lucene search
+L

1229 matches found

Prion
Prion
•added 2023/03/02 7:15 p.m.•33 views

Information disclosure

Saleor is a headless, GraphQL commerce platform delivering personalized shopping experiences. Some internal Python exceptions are not handled properly and thus are returned in API as error messages. Some messages might contain sensitive information like user email address in staff-authenticated...

4CVSS4.4AI score0.00824EPSS
SaveExploits0References8Affected Software1
Cvelist
Cvelist
•added 2023/03/02 6:54 p.m.•67 views

CVE-2023-26052 Saleor is vulnerable to unauthenticated information disclosure via Python exceptions

Saleor is a headless, GraphQL commerce platform delivering personalized shopping experiences. Some internal Python exceptions are not handled properly and thus are returned in API as error messages. Some messages might contain sensitive information like infrastructure details in unauthenticated...

3.7CVSS5.5AI score0.00757EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2023/03/02 6:54 p.m.•11 views

CVE-2023-26052 Saleor is vulnerable to unauthenticated information disclosure via Python exceptions

Saleor is a headless, GraphQL commerce platform delivering personalized shopping experiences. Some internal Python exceptions are not handled properly and thus are returned in API as error messages. Some messages might contain sensitive information like infrastructure details in unauthenticated...

3.7CVSS6.8AI score0.00757EPSS
SaveExploits0References7
OSV
OSV
•added 2023/03/02 6:54 p.m.•49 views

CVE-2023-26052 Saleor is vulnerable to unauthenticated information disclosure via Python exceptions

Saleor is a headless, GraphQL commerce platform delivering personalized shopping experiences. Some internal Python exceptions are not handled properly and thus are returned in API as error messages. Some messages might contain sensitive information like infrastructure details in unauthenticated...

3.7CVSS5.2AI score
SaveExploits0References9
CVE
CVE
•added 2023/03/02 6:29 p.m.•79 views

CVE-2023-26051

Summary of CVE-2023-26051 (Saleor) : Saleor is vulnerable to information disclosure via unhandled internal Python exceptions that may be returned in API error messages. The leakage can reveal sensitive data such as user email addresses in staff-authenticated requests. This issue has been addresse...

6.5CVSS4.8AI score0.00824EPSS
SaveExploits0References8Affected Software1
Vulnrichment
Vulnrichment
•added 2023/03/02 6:29 p.m.•9 views

CVE-2023-26051 Saleor is vulnerable to staff-authenticated error message information disclosure vulnerability via Python exceptions

Saleor is a headless, GraphQL commerce platform delivering personalized shopping experiences. Some internal Python exceptions are not handled properly and thus are returned in API as error messages. Some messages might contain sensitive information like user email address in staff-authenticated...

6.5CVSS6.8AI score0.00824EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2023/03/02 6:29 p.m.•65 views

CVE-2023-26051 Saleor is vulnerable to staff-authenticated error message information disclosure vulnerability via Python exceptions

Saleor is a headless, GraphQL commerce platform delivering personalized shopping experiences. Some internal Python exceptions are not handled properly and thus are returned in API as error messages. Some messages might contain sensitive information like user email address in staff-authenticated...

6.5CVSS6.5AI score0.00824EPSS
SaveExploits0References8
OSV
OSV
•added 2023/03/02 6:29 p.m.•45 views

CVE-2023-26051 Saleor is vulnerable to staff-authenticated error message information disclosure vulnerability via Python exceptions

Saleor is a headless, GraphQL commerce platform delivering personalized shopping experiences. Some internal Python exceptions are not handled properly and thus are returned in API as error messages. Some messages might contain sensitive information like user email address in staff-authenticated...

6.5CVSS5AI score
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2023/03/02 12:00 a.m.•25 views

PT-2023-20452

Name of the Vulnerable Software and Affected Versions Saleor versions prior to 3.1.48 Saleor versions prior to 3.7.59 Saleor versions prior to 3.8.0 Saleor versions prior to 3.9.27 Saleor versions prior to 3.10.14 Saleor versions prior to 3.11.12 Description Some internal Python exceptions are no...

5.3CVSS6.1AI score0.00757EPSS
SaveExploits0References16
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/02 12:00 a.m.•1 views

CVE-2023-26051: Generation of Error Message Containing Sensitive Information

Saleor is a headless, GraphQL commerce platform delivering personalized shopping experiences. Some internal Python exceptions are not handled properly and thus are returned in API as error messages. Some messages might contain sensitive information like user email address in staff-authenticated...

6.5CVSS5.7AI score0.00824EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/03/02 12:00 a.m.•23 views

Github saleor 安全漏洞

Github saleor is a headless GraphQL commerce platform that delivers a super-fast, dynamic, personalized shopping experience. Beautiful online store, anywhere, on any device. Github saleor suffers from a security vulnerability that stems from some internal exceptions that are not handled correctly...

6.5CVSS5.6AI score0.00824EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/02 12:00 a.m.•3 views

CVE-2023-26052: Generation of Error Message Containing Sensitive Information

Saleor is a headless, GraphQL commerce platform delivering personalized shopping experiences. Some internal Python exceptions are not handled properly and thus are returned in API as error messages. Some messages might contain sensitive information like infrastructure details in unauthenticated...

5.3CVSS5.6AI score0.00757EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/03/02 12:00 a.m.•24 views

Saleor 安全漏洞

Github saleor is a headless GraphQL commerce platform that delivers a super-fast, dynamic, personalized shopping experience. Beautiful online store, anywhere, on any device. Saleor suffers from a security vulnerability that stems from some internal exceptions that are not handled correctly and ar...

5.3CVSS5.7AI score0.00757EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2023/03/02 12:00 a.m.•15 views

PT-2023-20451

Name of the Vulnerable Software and Affected Versions Saleor versions prior to 3.1.48 Saleor versions prior to 3.7.59 Saleor versions prior to 3.8.30 Saleor versions prior to 3.9.27 Saleor versions prior to 3.10.14 Saleor versions prior to 3.11.12 Description The issue arises from internal Python...

6.5CVSS6.3AI score0.00824EPSS
SaveExploits0References17
OSV
OSV
•added 2023/02/27 6:15 p.m.•13 views

CVE-2022-48260

There is a buffer overflow vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation could lead to device service exceptions...

7.5CVSS6.1AI score0.00468EPSS
SaveExploits0References1
NVD
NVD
•added 2023/02/27 6:15 p.m.•21 views

CVE-2022-48260

There is a buffer overflow vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation could lead to device service exceptions...

7.5CVSS7.6AI score0.00468EPSS
SaveExploits0References1
Prion
Prion
•added 2023/02/27 6:15 p.m.•21 views

Buffer overflow

There is a buffer overflow vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation could lead to device service exceptions...

5CVSS7.6AI score0.00468EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/02/27 12:00 a.m.•10 views

CVE-2022-48260

There is a buffer overflow vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation could lead to device service exceptions...

7.6AI score0.00468EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/27 12:00 a.m.•1 views

CVE-2022-48260: Buffer Copy without Checking Size of Input

There is a buffer overflow vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation could lead to device service exceptions...

7.5CVSS6.1AI score0.00468EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2023/02/27 12:00 a.m.•31 views

CVE-2022-48260

There is a buffer overflow vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation could lead to device service exceptions...

7.8AI score0.00468EPSS
SaveExploits0References1
Rows per page
Query Builder