Lucene search
+L

8 matches found

Positive Technologies
Positive Technologies
•added 2026/09/28 12:00 a.m.•9 views

PT-2026-99774

Name of the Vulnerable Software and Affected Versions Bookly WordPress plugin versions prior to 28.3 Description Insufficient server-side validation of client-supplied booking quantity values allows unauthenticated users to manipulate the appointment total. By reducing the total to zero, an...

5.3CVSS5.8AI score0.00217EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/21 12:00 a.m.•14 views

PT-2026-96057

Name of the Vulnerable Software and Affected Versions RestroPress WordPress plugin versions prior to 3.4.6 Description Insufficient server-side validation of client-supplied item add-on prices occurs when items are added to or updated in the cart. This allows unauthenticated users to manipulate t...

5.3CVSS5.9AI score0.00324EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/21 12:00 a.m.•5 views

CVE-2025-20113: Client-Side Enforcement of Server-Side Security

A vulnerability in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to elevate privileges to Administrator for a limited set of functions on an affected system. This vulnerability is due to insufficient server-side validation of user-supplied parameters in API or HT...

7.1CVSS7AI score0.00417EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/04/10 5:15 p.m.•28 views

CVE-2024-1599

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

6.6AI score
SaveExploits0
CVE
CVE
•added 2024/04/10 5:08 p.m.•106 views

CVE-2024-1599

This CVE entry is rejected/not used and does not represent an active vulnerability.

5.3AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2024/04/10 12:00 a.m.•4 views

PT-2024-18160

Name of the Vulnerable Software and Affected Versions lunary-ai/lunary version 0.3.0 Description The issue is related to insufficient server-side validation of user account types during project creation, allowing unauthorized project creation. Specifically, in the free account tier, users are...

6AI score
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/02 12:00 a.m.•8 views

CVE-2019-7861: Unrestricted Upload of File with Dangerous Type

Insufficient server-side validation of user input could allow an attacker to bypass file upload restrictions in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2...

7.5CVSS8.2AI score0.02044EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2019/08/02 12:00 a.m.•7 views

PT-2019-18786

Name of the Vulnerable Software and Affected Versions Magento 2.1 prior to 2.1.18 Magento 2.2 prior to 2.2.9 Magento 2.3 prior to 2.3.2 Description The issue is related to insufficient server-side validation of user input, which could allow an attacker to bypass file upload restrictions...

7.5CVSS0.02044EPSS
SaveExploits0References8
Rows per page
Query Builder