8 matches found
PT-2026-99774
Name of the Vulnerable Software and Affected Versions Bookly WordPress plugin versions prior to 28.3 Description Insufficient server-side validation of client-supplied booking quantity values allows unauthenticated users to manipulate the appointment total. By reducing the total to zero, an...
PT-2026-96057
Name of the Vulnerable Software and Affected Versions RestroPress WordPress plugin versions prior to 3.4.6 Description Insufficient server-side validation of client-supplied item add-on prices occurs when items are added to or updated in the cart. This allows unauthenticated users to manipulate t...
CVE-2025-20113: Client-Side Enforcement of Server-Side Security
A vulnerability in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to elevate privileges to Administrator for a limited set of functions on an affected system. This vulnerability is due to insufficient server-side validation of user-supplied parameters in API or HT...
CVE-2024-1599
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2024-1599
This CVE entry is rejected/not used and does not represent an active vulnerability.
PT-2024-18160
Name of the Vulnerable Software and Affected Versions lunary-ai/lunary version 0.3.0 Description The issue is related to insufficient server-side validation of user account types during project creation, allowing unauthorized project creation. Specifically, in the free account tier, users are...
CVE-2019-7861: Unrestricted Upload of File with Dangerous Type
Insufficient server-side validation of user input could allow an attacker to bypass file upload restrictions in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2...
PT-2019-18786
Name of the Vulnerable Software and Affected Versions Magento 2.1 prior to 2.1.18 Magento 2.2 prior to 2.2.9 Magento 2.3 prior to 2.3.2 Description The issue is related to insufficient server-side validation of user input, which could allow an attacker to bypass file upload restrictions...