Lucene search
K

11 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-54210

Malicious code in bioql PyPI...

8.1CVSS6.3AI score0.0124EPSS
Exploits2References3
RedhatCVE
RedhatCVE
added 2025/05/23 2:18 a.m.4 views

CVE-2023-46401

KWHotel 0.47 is vulnerable to CSV Formula Injection in the invoice adding function...

9.8CVSS7.2AI score0.00128EPSS
Exploits1References1
Github Security Blog
Github Security Blog
added 2025/03/18 3:30 p.m.10 views

TastyIgniter Has an Incorrect Access Control Vulnerability via `invoice()` Function

TastyIgniter 3.7.6 contains an Incorrect Access Control vulnerability in the invoice function within Orders.php which allows unauthorized users to access and generate invoices due to missing permission checks...

8.1CVSS7AI score0.0124EPSS
Exploits2References4Affected Software1
OSV
OSV
added 2025/03/18 3:30 p.m.6 views

GHSA-GG2F-R4JH-VPMH TastyIgniter Has an Incorrect Access Control Vulnerability via `invoice()` Function

TastyIgniter 3.7.6 contains an Incorrect Access Control vulnerability in the invoice function within Orders.php which allows unauthorized users to access and generate invoices due to missing permission checks...

8.1CVSS6.6AI score0.0124EPSS
Exploits2References4
NVD
NVD
added 2025/03/18 3:15 p.m.7 views

CVE-2024-44313

TastyIgniter 3.7.6 contains an Incorrect Access Control vulnerability in the invoice function within Orders.php which allows unauthorized users to access and generate invoices due to missing permission checks...

8.1CVSS0.0124EPSS
Exploits2References2
OSV
OSV
added 2025/03/18 3:15 p.m.8 views

CVE-2024-44313

TastyIgniter 3.7.6 contains an Incorrect Access Control vulnerability in the invoice function within Orders.php which allows unauthorized users to access and generate invoices due to missing permission checks...

8.1CVSS6.6AI score0.0124EPSS
Exploits2References2
Cvelist
Cvelist
added 2025/03/18 12:0 a.m.10 views

CVE-2024-44313

TastyIgniter 3.7.6 contains an Incorrect Access Control vulnerability in the invoice function within Orders.php which allows unauthorized users to access and generate invoices due to missing permission checks...

0.0124EPSS
Exploits2References2
NVD
NVD
added 2025/01/23 10:15 p.m.12 views

CVE-2023-46401

KWHotel 0.47 is vulnerable to CSV Formula Injection in the invoice adding function...

9.8CVSS0.00128EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/01/23 12:0 a.m.8 views

CVE-2023-46401

KWHotel 0.47 is vulnerable to CSV Formula Injection in the invoice adding function...

0.00128EPSS
Exploits1References1
CVE
CVE
added 2025/01/23 12:0 a.m.53 views

CVE-2023-46401

KWHotel 0.47 is vulnerable to CSV Formula Injection in the invoice adding function. Affected product: KWHotel (desktop/web/mobile) version 0.47. Root cause: CSV formula injection in the Add Invoice feature. Impact is described as high for confidentiality, integrity, and availability per CVE metri...

9.8CVSS7.2AI score0.00128EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/01/23 12:0 a.m.5 views

CVE-2023-46401

KWHotel 0.47 is vulnerable to CSV Formula Injection in the invoice adding function...

8.8AI score0.00128EPSS
Exploits1References1
Rows per page
Query Builder