Lucene search
K

7 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-2770

Malicious code in bioql PyPI...

8CVSS6.6AI score0.00572EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 11:58 a.m.5 views

CVE-2025-22384

An issue was discovered in Optimizely Configured Commerce before 5.2.2408. A medium-severity issue concerning business logic exists in the Commerce B2B application, which allows storefront visitors to purchase discontinued products in specific scenarios where requests are altered before reaching...

7.5CVSS6.8AI score0.00368EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 11:42 a.m.4 views

CVE-2025-22385

An issue was discovered in Optimizely Configured Commerce before 5.2.2408. For newly created accounts, the Commerce B2B application does not require email confirmation. This medium-severity issue allows the mass creation of accounts. This could affect database storage; also, non-requested...

5.9CVSS6.8AI score0.00385EPSS
Exploits0References1
NVD
NVD
added 2025/01/04 2:15 a.m.12 views

CVE-2025-22387

An issue was discovered in Optimizely Configured Commerce before 5.2.2408. A medium-severity issue exists in requests for resources where the session token is submitted as a URL parameter. This exposes information about the authenticated session, which can be leveraged for session hijacking...

7.5CVSS0.00383EPSS
Exploits0References1
CVE
CVE
added 2025/01/04 12:0 a.m.64 views

CVE-2025-22384

CVE-2025-22384 affects Optimizely Configured Commerce prior to version 5.2.2408. The issue is a medium-severity business‑logic flaw in the Commerce B2B application that can let storefront visitors purchase discontinued products when requests are manipulated before reaching the server. Impact is d...

7.5CVSS6.5AI score0.00368EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2025/01/04 12:0 a.m.69 views

CVE-2025-22385

Optimizely Configured Commerce before 5.2.2408 contains an issue where the Commerce B2B application does not require email confirmation for newly created accounts, enabling mass account creation and potential impacts to database storage (and non-requested storefront accounts). Affected version ra...

5.9CVSS6.5AI score0.00385EPSS
Exploits0References1Affected Software1
securityvulns
securityvulns
added 2002/11/08 12:0 a.m.26 views

Remote pine Denial of Service

Security Advisory 23rd October 2002 Remote pine version 4.44 denial of service Name: Pine version 4.44 Arch: Redhat 7.2 i386 Severity: Medium Vendor URL: http://www.washington.edu/pine/ Author: Linus Sjberg [email protected] Vendor notified: 14:th October 2002 Vendor response: 14:th October 2002...

0.5AI score
Exploits0
Rows per page
Query Builder