Lucene search
+L

270 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/15 12:00 a.m.•3 views

CVE-2024-51037: Origin Validation Error

An issue in kodbox v.1.52.04 and before allows a remote attacker to obtain sensitive information via the captcha feature in the password reset function...

5.3CVSS5.9AI score0.00276EPSS
SaveExploits1References3
CVE
CVE
•added 2024/11/15 12:00 a.m.•76 views

CVE-2024-51037

The network file manager kodbox (version 1.52.04 and before ) is susceptible to a vulnerability where a remote attacker can obtain sensitive information . This issue originates from the captcha feature within the password reset function . As a temporary workaround, users are recommended to disabl...

5.3CVSS6.9AI score0.00276EPSS
SaveExploits1References2Affected Software1
Mend
Mend
•added 2024/11/15 12:00 a.m.•2 views

CVE-2024-51037

An issue in kodbox v.1.52.04 and before allows a remote attacker to obtain sensitive information via the captcha feature in the password reset function...

6.9CVSS0.00276EPSS
SaveExploits1References5
OSV
OSV
•added 2024/01/17 3:15 a.m.•16 views

CVE-2023-52069

kodbox v1.49.04 was discovered to contain a cross-site scripting XSS vulnerability via the URL parameter...

5.4CVSS5.7AI score0.00292EPSS
SaveExploits0References2
NVD
NVD
•added 2024/01/17 3:15 a.m.•23 views

CVE-2023-52069

kodbox v1.49.04 was discovered to contain a cross-site scripting XSS vulnerability via the URL parameter...

5.4CVSS5.4AI score0.00292EPSS
SaveExploits0References2
Prion
Prion
•added 2024/01/17 3:15 a.m.•31 views

Cross site scripting

kodbox v1.49.04 was discovered to contain a cross-site scripting XSS vulnerability via the URL parameter...

4.9CVSS6.4AI score0.00292EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2024/01/17 12:00 a.m.•34 views

CVE-2023-52069

kodbox v1.49.04 was discovered to contain a cross-site scripting XSS vulnerability via the URL parameter...

5.6AI score0.00292EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/17 12:00 a.m.•5 views

CVE-2023-52069: Improper Neutralization of Input During Web Page Generation

kodbox v1.49.04 was discovered to contain a cross-site scripting XSS vulnerability via the URL parameter...

5.4CVSS5.8AI score0.00292EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/01/17 12:00 a.m.•11 views

CVE-2023-52069

kodbox v1.49.04 was discovered to contain a cross-site scripting XSS vulnerability via the URL parameter...

5.4AI score0.00292EPSS
SaveExploits0References2
CVE
CVE
•added 2024/01/17 12:00 a.m.•72 views

CVE-2023-52069

CVE-2023-52069 affects kodbox v1.49.04, which is reported to contain a cross-site scripting (XSS) vulnerability via a URL parameter. The CVSS v3.1 base score is 5.4 (Medium), with attack vector NETWORK, attack complexity LOW, privileges required LOW, user interaction REQUIRED, and a Changed scope...

5.4CVSS5.3AI score0.00292EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2024/01/17 12:00 a.m.•18 views

kodbox security breach

kodbox is a web file manager. A security vulnerability exists in kodbox version v1.49.04, which stems from the presence of a cross-site scripting XSS vulnerability via URL parameters...

5.4CVSS5.8AI score0.00292EPSS
SaveExploits0References3
OSV
OSV
•added 2024/01/16 10:15 p.m.•36 views

CVE-2023-39691

An issue discovered in kodbox through 1.43 allows attackers to arbitrarily add Administrator accounts via crafted GET request...

9.8CVSS6.8AI score0.00561EPSS
SaveExploits0References1
NVD
NVD
•added 2024/01/16 10:15 p.m.•20 views

CVE-2023-39691

An issue discovered in kodbox through 1.43 allows attackers to arbitrarily add Administrator accounts via crafted GET request...

9.8CVSS9.4AI score0.00561EPSS
SaveExploits0References1
OSV
OSV
•added 2024/01/16 10:15 p.m.•37 views

CVE-2023-52068

kodbox v1.43 was discovered to contain a cross-site scripting XSS vulnerability via the operation and login logs...

6.1CVSS6.2AI score0.00308EPSS
SaveExploits0References1
Prion
Prion
•added 2024/01/16 10:15 p.m.•22 views

Cross site request forgery (csrf)

An issue discovered in kodbox through 1.43 allows attackers to arbitrarily add Administrator accounts via crafted GET request...

7.5CVSS7.1AI score0.00561EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2024/01/16 10:15 p.m.•31 views

Cross site scripting

kodbox v1.43 was discovered to contain a cross-site scripting XSS vulnerability via the operation and login logs...

5.8CVSS6.3AI score0.00308EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2024/01/16 12:00 a.m.•16 views

kodbox security breach

kodbox is a web file manager. A security vulnerability exists in kodbox version v1.43, which stems from the presence of a cross-site scripting XSS vulnerability...

6.1CVSS6AI score0.00308EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/01/16 12:00 a.m.•15 views

kodbox security breach

kodbox is a network file manager. A security vulnerability exists in kodbox version v1.43, which stems from a vulnerability that allows an attacker to arbitrarily add administrator accounts via a crafted GET request...

9.8CVSS6.7AI score0.00561EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/01/16 12:00 a.m.•9 views

CVE-2023-39691

An issue discovered in kodbox through 1.43 allows attackers to arbitrarily add Administrator accounts via crafted GET request...

9.4AI score0.00561EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/01/16 12:00 a.m.•17 views

CVE-2023-52068

kodbox v1.43 was discovered to contain a cross-site scripting XSS vulnerability via the operation and login logs...

6.2AI score0.00308EPSS
SaveExploits0References1
Rows per page
Query Builder