Lucene search
+L

7 matches found

CVE
CVE
•added 2026/07/14 12:00 a.m.•47 views

CVE-2026-38450

A vulnerability exists in Aetopia Digital Asset Management DAM v.1.0.0 that allows a remote attacker to perform arbitrary code execution . The flaw is triggered through the name and description parameters within the Add/Update Project function. Exploitation details and specific remediation steps ...

6.8AI score0.0104EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/14 12:00 a.m.•10 views

CVE-2026-38450: Improper Control of Generation of Code

An issue in Aetopia Digital Asset Management DAM v.1.0.0 allows a remote attacker to execute arbitrary code via the name and description parameter of the Add/Update Project function...

9.8CVSS6.6AI score0.0104EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/14 12:00 a.m.•5 views

CVE-2020-28861: Improper Neutralization of Formula Elements in a CSV File

OpenAsset Digital Asset Management DAM 12.0.19 and earlier failed to implement access controls on /Stream/ProjectsCSV endpoint, allowing unauthenticated attackers to gain access to potentially sensitive project information stored by the application...

5.3CVSS5.9AI score0.02294EPSS
SaveExploits2References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/14 12:00 a.m.•8 views

CVE-2020-28859: Improper Neutralization of Input During Web Page Generation

OpenAsset Digital Asset Management DAM through 12.0.19 does not correctly sanitize user supplied input in multiple parameters and endpoints, allowing for reflected cross-site scripting attacks...

6.1CVSS5.6AI score0.00781EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/14 12:00 a.m.•10 views

CVE-2020-28858: Cross-Site Request Forgery (CSRF)

OpenAsset Digital Asset Management DAM through 12.0.19 does not correctly verify whether a request made to the application was intentionally made by the user, allowing for cross-site request forgery attacks on all user functions...

8.8CVSS5.7AI score0.01058EPSS
SaveExploits2References8
Positive Technologies
Positive Technologies
•added 2020/12/14 12:00 a.m.•5 views

PT-2020-17046

Name of the Vulnerable Software and Affected Versions OpenAsset Digital Asset Management DAM through 12.0.19 Description The issue allows for reflected cross-site scripting attacks due to incorrect sanitization of user-supplied input in multiple parameters and endpoints. Recommendations For...

6.1CVSS0.00781EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2018/07/10 12:00 a.m.•9 views

PT-2018-15564

Name of the Vulnerable Software and Affected Versions SAP Dynamic Authorization Management DAM by NextLabs versions 7.7 through 8.5 Description The issue exposes sensitive information in the application logs under certain circumstances. Recommendations For versions 7.7 through 8.5, consider...

4.4CVSS0.00334EPSS
SaveExploits0References4
Rows per page
Query Builder