Lucene search
+L

35 matches found

Github Security Blog
Github Security Blog
added 2025/02/13 12:33 a.m.16 views

Missing rate limit in MaysWind ezBookkeeping

An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the lack of rate limiting...

6.3CVSS7.1AI score0.00446EPSS
SaveExploits1References4Affected Software1
NVD
NVD
added 2025/02/12 10:15 p.m.33 views

CVE-2024-57604

An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the token component...

9.8CVSS0.00736EPSS
SaveExploits1References2
NVD
NVD
added 2025/02/12 10:15 p.m.20 views

CVE-2024-57603

An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the lack of rate limiting...

6.3CVSS0.00446EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/02/12 12:00 a.m.9 views

ezBookkeeping 安全漏洞

ezBookkeeping is a lightweight personal bookkeeping application by mayswind individual developers. A security vulnerability exists in ezBookkeeping version 0.7.0, which stems from a lack of rate limiting, resulting in an elevation of privilege vulnerability...

6.3CVSS6.8AI score0.00446EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2025/02/12 12:00 a.m.5 views

CVE-2024-57603

An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the lack of rate limiting...

6.5AI score0.00446EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2025/02/12 12:00 a.m.26 views

CVE-2024-57603

An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the lack of rate limiting...

0.00446EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/02/12 12:00 a.m.7 views

ezBookkeeping 安全漏洞

ezBookkeeping is a lightweight personal bookkeeping application by mayswind individual developers. A security vulnerability exists in ezBookkeeping version 0.7.0, which stems from a vulnerability contained in the token component that results in an elevation of privilege vulnerability...

9.8CVSS6.8AI score0.00736EPSS
SaveExploits1References2
CVE
CVE
added 2025/02/12 12:00 a.m.93 views

CVE-2024-57604

CVE-2024-57604 affects MaysWind ezBookkeeping 0.7.0. A remote attacker can escalate privileges via the token component. CVSS v3.1 shows: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H with base score 9.8 (CRITICAL). Connected sources also corroborate the same product and issue. The available documents do no...

9.8CVSS7.2AI score0.00736EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/02/12 12:00 a.m.8 views

CVE-2024-57604

An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the token component...

7.2AI score0.00736EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2025/02/12 12:00 a.m.9 views

PT-2025-6753 · Mayswind · Mayswind Ezbookkeeping

Name of the Vulnerable Software and Affected Versions: MaysWind ezBookkeeping version 0.7.0 Description: An issue in MaysWind ezBookkeeping allows a remote attacker to escalate privileges via the token component. Recommendations: For MaysWind ezBookkeeping version 0.7.0, consider disabling the...

9.9CVSS7.5AI score0.9384EPSS
SaveExploits20References44
OSV
OSV
added 2025/02/12 12:00 a.m.9 views

CVE-2024-57603

An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the lack of rate limiting...

6.3CVSS7.4AI score
SaveExploits0References4
Cvelist
Cvelist
added 2025/02/12 12:00 a.m.35 views

CVE-2024-57604

An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the token component...

0.00736EPSS
SaveExploits1References2
CVE
CVE
added 2025/02/12 12:00 a.m.89 views

CVE-2024-57603

CVE-2024-57603 affects MaysWind ezBookkeeping 0.7.0 and describes privilege escalation via lack of rate limiting. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) yields a base score of 6.3 (MEDIUM) with network attack vector, low confidentiality/integrity/availability impact, and low pr...

6.3CVSS7.2AI score0.00446EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2025/02/12 12:00 a.m.9 views

PT-2025-6752 · Mayswind · Mayswind Ezbookkeeping

Name of the Vulnerable Software and Affected Versions: MaysWind ezBookkeeping version 0.7.0 Description: An issue in the software allows a remote attacker to escalate privileges via the lack of rate limiting. Recommendations: For MaysWind ezBookkeeping version 0.7.0, consider implementing rate...

9.9CVSS7.5AI score0.9384EPSS
SaveExploits20References44
OSV
OSV
added 2025/02/12 12:00 a.m.8 views

CVE-2024-57604

An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the token component...

9.8CVSS7.4AI score
SaveExploits0References4
Rows per page
Query Builder