Lucene search
K

7 matches found

OSV
OSV
added 2024/07/02 9:21 p.m.9 views

GHSA-8FJ2-587W-5WHR aimeos/ai-admin-jsonadm improper access control vulnerability allows editors to remove required records

Improper access control allows editors to remove admin group and locale configuration in Aimeos backend...

5.5CVSS5.3AI score0.00481EPSS
Exploits0References8
Github Security Blog
Github Security Blog
added 2024/07/02 9:21 p.m.19 views

aimeos/ai-admin-jsonadm improper access control vulnerability allows editors to remove required records

Improper access control allows editors to remove admin group and locale configuration in Aimeos backend...

5.5CVSS5.4AI score0.00481EPSS
Exploits0References8Affected Software1
OSV
OSV
added 2024/07/02 8:19 p.m.28 views

CVE-2024-39322 aimeos/ai-admin-jsonadm improper access control vulnerability allows editors to remove required records

aimeos/ai-admin-jsonadm is the Aimeos e-commerce JSON API for administrative tasks. In versions prior to 2020.10.13, 2021.10.6, 2022.10.3, 2023.10.4, and 2024.4.2, improper access control allows editors to remove admin group and locale configuration in the Aimeos backend. Versions 2020.10.13,...

5.5CVSS6.5AI score0.00481EPSS
Exploits0References8
GitLab Advisory Database
GitLab Advisory Database
added 2024/07/02 12:0 a.m.44 views

aimeos/ai-admin-jsonadm improper access control vulnerability allows editors to remove required records

Improper access control allows editors to remove admin group and locale configuration in Aimeos backend...

5.5CVSS6.8AI score0.00481EPSS
Exploits0References9Affected Software1
Positive Technologies
Positive Technologies
added 2024/07/02 12:0 a.m.9 views

PT-2024-28447 · Aimeos · Aimeos/Ai-Admin-Jsonadm

Name of the Vulnerable Software and Affected Versions: aimeos/ai-admin-jsonadm versions prior to 2020.10.13 aimeos/ai-admin-jsonadm versions prior to 2021.10.6 aimeos/ai-admin-jsonadm versions prior to 2022.10.3 aimeos/ai-admin-jsonadm versions prior to 2023.10.4 aimeos/ai-admin-jsonadm versions...

5.5CVSS6.8AI score0.00481EPSS
Exploits0References12
Tenable Nessus
Tenable Nessus
added 2011/06/13 12:0 a.m.24 views

Ubuntu 10.10 : language-selector vulnerability (USN-1115-1)

Romain Perier discovered that the language-selector D-Bus backend did not correctly check for Policy Kit authorizations. A local attacker could exploit this to inject shell commands into the system-wide locale configuration file, leading to root privilege escalation. Note that Tenable Network...

7.2CVSS5.5AI score0.00439EPSS
Exploits1References3
securityvulns
securityvulns
added 2011/04/21 12:0 a.m.59 views

[USN-1115-1] language-selector vulnerability

========================================================================== Ubuntu Security Notice USN-1115-1 April 19, 2011 language-selector vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its...

7.2CVSS0.8AI score0.00333EPSS
Exploits0
Rows per page
Query Builder