Lucene search
+L

3347 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 1:30 p.m.•6 views

Malicious code in Reactive.GUI.Winforms (NuGet)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 1:29 p.m.•6 views

Malicious code in Gunа.GUI (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 1:28 p.m.•5 views

Malicious code in Bunifu.GUI (NuGet)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 1:26 p.m.•6 views

Malicious code in Be.Vlaandereո.Basisregіsters.Generаtors.Guiԁ.Deterministic (NuGet)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
•added 2024/06/19 3:28 p.m.•43 views

Security Bulletin: Vulnerabilities in IBM Java affect IBM SAN Volume Controller, IBM Storwize, IBM Storage Virtualize and IBM FlashSystem products

Summary Vulnerabilities in IBM® Runtime Environment Java™ Technology Edition affects the product's management GUI. The Command Line Interface is unaffected. CVE-2024-20952, CVE-2024-20918, CVE-2024-20921, CVE-2024-20919, CVE-2024-20926, CVE-2024-20945, CVE-2023-33850. Vulnerability Details...

7.5CVSS6.9AI score0.0117EPSS
SaveExploits0Affected Software10
CVE
CVE
•added 2024/06/07 4:09 p.m.•110 views

CVE-2024-37163

CVE-2024-37163 concerns SkyScrape, a GUI dashboard for AWS infrastructure. The vulnerability stems from SkyScrape’s API requests using unsecured HTTP, potentially exposing temporary credentials and user data. Affected version: 1.0.0. Public documentation consistently states the issue without deta...

7.5CVSS6.8AI score0.00168EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2024/06/07 4:09 p.m.•14 views

CVE-2024-37163 SkyScrape Secure API Requests

SkyScrape is a GUI Dashboard for AWS Infrastructure and Managing Resources and Usage Costs. SkyScrape's API requests are currently unsecured HTTP requests, leading to potential vulnerabilities for the user's temporary credentials and data. This affects version 1.0.0...

6.4CVSS7AI score0.00168EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/06/07 4:09 p.m.•50 views

CVE-2024-37163 SkyScrape Secure API Requests

SkyScrape is a GUI Dashboard for AWS Infrastructure and Managing Resources and Usage Costs. SkyScrape's API requests are currently unsecured HTTP requests, leading to potential vulnerabilities for the user's temporary credentials and data. This affects version 1.0.0...

6.4CVSS0.00168EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/06/06 12:00 a.m.•19 views

ChuanhuChatGPT Access Control Error Vulnerability

ChuanhuChatGPT is a lightweight and easy-to-use Web GUI for ChatGPT/ChatGLM/LLaMA/StableLM/MOSS and many other LLMs. ChuanhuChatGPT suffers from an access control error vulnerability that stems from an improper access control mechanism...

6.5CVSS6.8AI score0.00503EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2024/06/06 12:00 a.m.•12 views

ChuanhuChatGPT Security Vulnerability

ChuanhuChatGPT is a light and easy-to-use Web GUI for ChatGPT/ChatGLM/LLaMA/StableLM/MOSS and many other LLMs. A security vulnerability exists in ChuanhuChatGPT, which stems from insufficient cleaning and validation of model output data, resulting in a stored cross-site scripting vulnerability...

6.8CVSS6.1AI score0.00462EPSS
SaveExploits1References3
NVD
NVD
•added 2024/05/14 6:36 a.m.•35 views

CVE-2020-18305

Extreme Networks EXOS before v.22.7 and before v.30.2 was discovered to contain an issue in its Web GUI which fails to restrict URL access, allowing attackers to access sensitive information or escalate privileges...

8CVSS6.9AI score0.00703EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/05/13 3:43 p.m.•17 views

CVE-2020-18305

Extreme Networks EXOS before v.22.7 and before v.30.2 was discovered to contain an issue in its Web GUI which fails to restrict URL access, allowing attackers to access sensitive information or escalate privileges...

7.3AI score0.00703EPSS
SaveExploits1References1
CVE
CVE
•added 2024/05/13 3:43 p.m.•63 views

CVE-2020-18305

Extreme Networks EXOS versions prior to v.22.7 and v.30.2 are vulnerable to a security issue in the Web GUI where the system fails to restrict URL access. This flaw could allow an attacker to access sensitive information or escalate privileges . To remediate this, users should update to version 2...

7.2AI score0.00703EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2024/05/13 3:43 p.m.•45 views

CVE-2020-18305

Extreme Networks EXOS before v.22.7 and before v.30.2 was discovered to contain an issue in its Web GUI which fails to restrict URL access, allowing attackers to access sensitive information or escalate privileges...

6.9AI score0.00703EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/05/12 12:00 a.m.•14 views

PT-2024-10482 · Sap · Sap Gui For Windows

Name of the Vulnerable Software and Affected Versions: SAP GUI for Windows affected versions not specified Description: The issue concerns the storage of user input on the client PC to improve usability. Under specific circumstances, an attacker with administrative privileges or access to the...

6CVSS6.1AI score0.00243EPSS
SaveExploits0References12
Exploit DB
Exploit DB
•added 2024/05/04 12:00 a.m.•348 views

Elber Cleber/3 Broadcast Multi-Purpose Platform 1.0.0 - Device Config Disclosure

Elber Cleber/3 Broadcast Multi-Purpose Platform 1.0.0 Device Config Vendor: Elber S.r.l. Product web page: https://www.elber.it Affected version: 1.0.0 Revision 7304 1.0.0 Revision 7284 1.0.0 Revision 6505 1.0.0 Revision 6332 1.0.0 Revision 6258 XS2DAB v1.50 rev 6267 Summary: Cleber offers a...

5.3AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
•added 2024/05/01 10:52 a.m.•82 views

Security Bulletin: A vulnerability in the GUI affects IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products

Summary The certificate for a remote system in a policy-based replication partnership is not correctly validated in the GUI on IBM Storage Virtualize products. Vulnerability Details CVEID:CVE-2023-47700 DESCRIPTION: IBM SAN Volume Controller, IBM Storwize, IBM FlashSystem and IBM Storage Virtuali...

7.5CVSS6.7AI score0.00546EPSS
SaveExploits0Affected Software10
Tenable Nessus
Tenable Nessus
•added 2024/04/30 12:00 a.m.•38 views

RHEL 9 : qt5-qtbase (RHSA-2024:2276)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:2276 advisory. Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt...

9.8CVSS8AI score0.00978EPSS
SaveExploits0References8
IBM Security Bulletins
IBM Security Bulletins
•added 2024/04/29 8:26 a.m.•24 views

Security Bulletin: IBM Storage Scale GUI may allow user to steal an active session (CVE-2023-38002)

Summary IBM Storage Scale GUI may allow an authenticated user to steal or manipulate an active session, fix for this vulnerability is available. Vulnerability Details CVEID:CVE-2023-38002 DESCRIPTION: IBM Storage Scale could allow an authenticated user to steal or manipulate an active session to...

8.8CVSS5.1AI score0.0037EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2024/04/18 11:15 a.m.•33 views

CVE-2023-3675

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Secomea GateManager Web GUI allows Reading Data from System Resources.This issue affects GateManager: from 11.0.623074018 before 11.0.623373051...

6.5CVSS6.4AI score0.00541EPSS
SaveExploits0References1
Rows per page
Query Builder