Lucene search
+L

26 matches found

PyPA
PyPA
•added 2026/07/07 11:45 a.m.•26 views

Scancode.io Reflected Cross-Site Scripting (XSS) in license endpoint

SummaryIn the /license/ endpoint, the detailed view key is not properly validated and sanitized, which can result in a potential cross-site scripting XSS vulnerability when attempting to access a detailed license view that does not exist. DetailsIn the /license/ endpoint, the licensedetailsview...

6.1CVSS6.2AI score0.00506EPSS
SaveExploits1References7Affected Software1
CNNVD
CNNVD
•added 2026/01/15 12:00 a.m.•19 views

SICK Incoming Goods Suite security vulnerabilities

SICK Incoming Goods Suite is a logistics receipt process software developed by the German company SICK. There is a security vulnerability in SICK Incoming Goods Suite. This vulnerability stems from the application disclosing all component information, version details, and license details to...

5.3CVSS5.8AI score0.00457EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2026/01/09 10:43 a.m.•17 views

CVE-2022-26777

Zoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view license details...

5.3CVSS6.9AI score0.02121EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/12/17 7:00 p.m.•23 views

CVE-2025-46296

An authorization bypass vulnerability in FileMaker Server Admin Console allowed administrator roles with minimal privileges to access administrative features such as viewing license details and downloading application logs. This vulnerability has been fully addressed in FileMaker Server 22.0.4...

5.4CVSS6.9AI score0.00169EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/16 6:16 p.m.•20 views

CVE-2025-46296

An authorization bypass vulnerability in FileMaker Server Admin Console allowed administrator roles with minimal privileges to access administrative features such as viewing license details and downloading application logs. This vulnerability has been fully addressed in FileMaker Server 22.0.4...

5.4CVSS0.00169EPSS
SaveExploits0References1
OSV
OSV
•added 2025/12/16 6:16 p.m.•19 views

CVE-2025-46296

An authorization bypass vulnerability in FileMaker Server Admin Console allowed administrator roles with minimal privileges to access administrative features such as viewing license details and downloading application logs. This vulnerability has been fully addressed in FileMaker Server 22.0.4...

5.4CVSS5.7AI score0.00169EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/16 6:07 p.m.•47 views

CVE-2025-46296

An authorization bypass vulnerability in FileMaker Server Admin Console allowed administrator roles with minimal privileges to access administrative features such as viewing license details and downloading application logs. This vulnerability has been fully addressed in FileMaker Server 22.0.4...

0.00169EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/16 6:07 p.m.•9 views

CVE-2025-46296

An authorization bypass vulnerability in FileMaker Server Admin Console allowed administrator roles with minimal privileges to access administrative features such as viewing license details and downloading application logs. This vulnerability has been fully addressed in FileMaker Server 22.0.4...

5.8AI score0.00169EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/16 6:07 p.m.•32 views

CVE-2025-46296

An authorization bypass vulnerability exists in the FileMaker Server Admin Console , where users with minimal administrator privileges can access restricted administrative features. This flaw allows unauthorized access to view license details and download application logs . The issue stems from i...

5.4CVSS5.8AI score0.00169EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2025/12/16 12:00 a.m.•15 views

PT-2025-51765

An authorization bypass vulnerability in FileMaker Server Admin Console allowed administrator roles with minimal privileges to access administrative features such as viewing license details and downloading application logs. This vulnerability has been fully addressed in FileMaker Server 22.0.4...

5.4CVSS6.9AI score0.00169EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/16 12:00 a.m.•1 views

CVE-2025-46296: Improper Authorization

An authorization bypass vulnerability in FileMaker Server Admin Console allowed administrator roles with minimal privileges to access administrative features such as viewing license details and downloading application logs. This vulnerability has been fully addressed in FileMaker Server 22.0.4...

5.4CVSS5.7AI score0.00169EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/10/30 11:09 a.m.•15 views

CVE-2025-12461

This vulnerability allows an attacker to access parts of the application that are not protected by any type of access control. The attacker could access this path ‘…/epsilonnet/License/About.aspx’ and obtain information on both the licence and the configuration of the product by knowing which...

6.9CVSS6.6AI score0.00305EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2022-31327

Malicious code in bioql PyPI...

5.3CVSS5.4AI score0.02121EPSS
SaveExploits2References2
Citrix
Citrix
•added 2024/06/20 12:00 a.m.•17 views

The detail explanation about the parameters in License file

This article explains the parameter details in License file...

7.1AI score
SaveExploits0
Citrix
Citrix
•added 2024/03/07 12:00 a.m.•15 views

Get License, Hardware and Platform details from API call

Get the output of Hardware, platform and License via API...

7.2AI score
SaveExploits0
Vulnrichment
Vulnrichment
•added 2024/02/21 4:52 p.m.•28 views

CVE-2024-26138 License information is public, exposing instance id and license holder details

The XWiki licensor application, which manages and enforce application licenses for paid extensions, includes the document Licenses.Code.LicenseJSON that provides information for admins regarding active licenses. This document is public and thus exposes this information publicly. The information...

5.3CVSS6.4AI score0.00492EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2023/10/13 12:00 a.m.•18 views

The vulnerability of the license_details_view function in the ScanCode.io software, which allows a hacker to perform XSS attacks.

The vulnerability of the licensedetailsview function in the ScanCode.io software exists because measures to protect the structure of web pages have not been implemented. Exploiting this vulnerability could allow a malicious actor to carry out XSS attacks remotely...

6.4CVSS6.2AI score0.00506EPSS
SaveExploits1References3Affected Software1
NVD
NVD
•added 2022/04/16 4:15 p.m.•29 views

CVE-2022-26777

Zoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view license details...

5.3CVSS0.02121EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/04/16 4:15 p.m.•8 views

CVE-2022-26777

Zoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view license details...

5.3CVSS6.1AI score0.02121EPSS
SaveExploits1References3
Prion
Prion
•added 2022/04/16 4:15 p.m.•18 views

Design/Logic Flaw

Zoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view license details...

5CVSS5.3AI score0.02121EPSS
SaveExploits2References2Affected Software1
Rows per page
Query Builder