Lucene search
+L

952 matches found

NVD
NVD
added 2024/11/04 6:15 p.m.43 views

CVE-2024-51329

A Host header injection vulnerability in Agile-Board 1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link...

8.8CVSS0.00552EPSS
SaveExploits1References2
OSV
OSV
added 2024/11/04 6:15 p.m.6 views

CVE-2024-51329

A Host header injection vulnerability in Agile-Board 1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link...

8.8CVSS5.8AI score0.00552EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2024/11/04 12:0 a.m.32 views

CVE-2024-51329

A Host header injection vulnerability in Agile-Board 1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link...

0.00552EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/11/04 12:0 a.m.8 views

agile-board 安全漏洞

agile-board is a progressive Node.js framework by the individual developer Malik Idrees. It is used to build efficient and scalable server-side applications. A security vulnerability exists in agile-board version 1.0, which stems from a password reset token that can be obtained via Host header...

8.8CVSS7AI score0.00552EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2024/11/04 12:0 a.m.10 views

CVE-2024-51329

A Host header injection vulnerability in Agile-Board 1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link...

7.4AI score0.00552EPSS
SaveExploits1References2
CVE
CVE
added 2024/11/04 12:0 a.m.63 views

CVE-2024-51329

CVE-2024-51329 – Normal details available Agile-Board 1.0 is affected by a Host header injection vulnerability that can lead to leakage of a password reset token when a user interacts with a crafted password reset link. The core issue is a Host header injection flaw, enabling an attacker to manip...

8.8CVSS7.4AI score0.00552EPSS
SaveExploits1References2Affected Software1
NVD
NVD
added 2024/09/26 5:15 p.m.16 views

CVE-2024-45982

A host header injection vulnerability in scheduleR v0.0.18 allows attackers to obtain the password reset token via user interaction with a crafted password reset link. This allows attackers to arbitrarily reset other users' passwords and compromise their accounts...

8.8CVSS0.00347EPSS
SaveExploits0References1
NVD
NVD
added 2024/09/26 5:15 p.m.14 views

CVE-2024-45981

A host header injection vulnerability in BookReviewLibrary 1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link...

8.8CVSS0.00347EPSS
SaveExploits0References1
NVD
NVD
added 2024/09/26 5:15 p.m.12 views

CVE-2024-45979

A host header injection vulnerability in Lines Police CAD 1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link. This allows attackers to arbitrarily reset other users' passwords and compromise their accounts...

8.8CVSS0.00385EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/09/26 12:0 a.m.8 views

PT-2024-31868 · Scheduler · Scheduler

Name of the Vulnerable Software and Affected Versions: scheduleR version 0.0.18 Description: A host header injection vulnerability allows attackers to obtain the password reset token via user interaction with a crafted password reset link. This enables attackers to arbitrarily reset other users'...

8.8CVSS7.5AI score0.00347EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2024/09/26 12:0 a.m.19 views

CVE-2024-45979

A host header injection vulnerability in Lines Police CAD 1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link. This allows attackers to arbitrarily reset other users' passwords and compromise their accounts...

0.00385EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/09/26 12:0 a.m.4 views

PT-2024-31867 · Unknown · Bookreviewlibrary

Name of the Vulnerable Software and Affected Versions: BookReviewLibrary version 1.0 Description: A host header injection issue allows attackers to obtain the password reset token via user interaction with a crafted password reset link. This is achieved through manipulating the host header, which...

8.8CVSS7.1AI score0.00347EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2024/09/26 12:0 a.m.5 views

PT-2024-31866 · Meanstore · Meanstore

Name of the Vulnerable Software and Affected Versions: MEANStore version 1.0 Description: A host header injection issue allows attackers to obtain the password reset token via user interaction with a crafted password reset link, enabling them to reset other users' passwords and compromise their...

8.8CVSS7.3AI score0.00385EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
added 2024/09/26 12:0 a.m.16 views

CVE-2024-45980

A host header injection vulnerability in MEANStore 1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link. This allows attackers to arbitrarily reset other users' passwords and compromise their accounts...

7.4AI score0.00385EPSS
SaveExploits0References1
CVE
CVE
added 2024/09/26 12:0 a.m.46 views

CVE-2024-45979

Affected software: Lines Police CAD 1.0. The issue is a host header injection that lets an attacker cause a crafted password reset link to reveal a password reset token, enabling arbitrary password resets and account compromise through user interaction. This vulnerability is documented in multipl...

8.8CVSS7.2AI score0.00385EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/09/26 12:0 a.m.18 views

CVE-2024-45980

A host header injection vulnerability in MEANStore 1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link. This allows attackers to arbitrarily reset other users' passwords and compromise their accounts...

0.00385EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/09/26 12:0 a.m.15 views

CVE-2024-45981

A host header injection vulnerability in BookReviewLibrary 1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link...

0.00347EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/09/26 12:0 a.m.21 views

CVE-2024-45982

A host header injection vulnerability in scheduleR v0.0.18 allows attackers to obtain the password reset token via user interaction with a crafted password reset link. This allows attackers to arbitrarily reset other users' passwords and compromise their accounts...

0.00347EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/09/26 12:0 a.m.10 views

CVE-2024-45979

A host header injection vulnerability in Lines Police CAD 1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link. This allows attackers to arbitrarily reset other users' passwords and compromise their accounts...

7.4AI score0.00385EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/09/26 12:0 a.m.4 views

scheduleR 安全漏洞

scheduleR is a framework available to bart6114 individual developers for deploying R tasks, reports and applications. A security vulnerability exists in scheduleR version 0.0.18, which stems from the presence of a host header injection vulnerability that allows an attacker to obtain a password...

8.8CVSS7.2AI score0.00347EPSS
SaveExploits0References2
Rows per page
Query Builder