Lucene search
K

17 matches found

RedhatCVE
RedhatCVE
added 2026/01/07 9:17 a.m.8 views

CVE-2025-1341

A vulnerability, which was classified as problematic, was found in PMWeb 7.2.0. This affects an unknown part of the component Setting Handler. The manipulation leads to weak password requirements. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The...

8.1CVSS6.7AI score0.00073EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-2112

Malicious code in bioql PyPI...

6.3CVSS4.8AI score0.00073EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-48387

Malicious code in bioql PyPI...

5.4CVSS4AI score0.0014EPSS
Exploits1References4
RedhatCVE
RedhatCVE
added 2025/05/23 10:22 a.m.3 views

CVE-2024-7466

A vulnerability has been found in PMWeb 7.2.00 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Web Application Firewall. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed t...

5.4CVSS6.1AI score0.0014EPSS
Exploits1References1
NVD
NVD
added 2025/02/16 2:15 p.m.7 views

CVE-2025-1341

A vulnerability, which was classified as problematic, was found in PMWeb 7.2.0. This affects an unknown part of the component Setting Handler. The manipulation leads to weak password requirements. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The...

8.1CVSS0.00073EPSS
Exploits1References4
OSV
OSV
added 2025/02/16 2:15 p.m.1 views

CVE-2025-1341

A vulnerability, which was classified as problematic, was found in PMWeb 7.2.0. This affects an unknown part of the component Setting Handler. The manipulation leads to weak password requirements. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The...

8.1CVSS4.4AI score
Exploits0References4
CVE
CVE
added 2025/02/16 2:0 p.m.47 views

CVE-2025-1341

CVE-2025-1341 affects PMWeb 7.2.0, specifically the Setting Handler component, causing weak password requirements. Several connected sources confirm remote exploitation potential with high attack complexity and a high overall risk (CVSS 3.1: AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H; base 8.1). Exploit...

8.1CVSS6.8AI score0.00073EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2025/02/16 2:0 p.m.9 views

CVE-2025-1341 PMWeb Setting weak password

A vulnerability, which was classified as problematic, was found in PMWeb 7.2.0. This affects an unknown part of the component Setting Handler. The manipulation leads to weak password requirements. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The...

6.3CVSS0.00073EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2025/02/16 2:0 p.m.6 views

CVE-2025-1341 PMWeb Setting weak password

A vulnerability, which was classified as problematic, was found in PMWeb 7.2.0. This affects an unknown part of the component Setting Handler. The manipulation leads to weak password requirements. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The...

6.3CVSS6.8AI score0.00073EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2025/02/16 12:0 a.m.2 views

PT-2025-6884 · Pmweb · Pmweb

Name of the Vulnerable Software and Affected Versions: PMWeb version 7.2.0 Description: A problem has been detected in the Setting Handler component, leading to weak password requirements. The attack can be initiated remotely and has a high complexity, making exploitation difficult. The exploit h...

6.3CVSS7.1AI score0.00073EPSS
Exploits1References8
CNNVD
CNNVD
added 2025/02/16 12:0 a.m.1 views

PMWeb 安全漏洞

PMWeb is a web-based platform from PMWeb, Inc. which is used to manage the lifecycle of a user's schedule and build operations. A security vulnerability exists in PMWeb version 7.2.0, which stems from an insufficient password strength requirement in the Settings Processing component, which could...

8.1CVSS4.9AI score0.00073EPSS
Exploits1References5
NVD
NVD
added 2024/08/05 2:16 a.m.8 views

CVE-2024-7466

A vulnerability has been found in PMWeb 7.2.00 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Web Application Firewall. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed t...

5.4CVSS0.0014EPSS
Exploits1References4
OSV
OSV
added 2024/08/05 2:16 a.m.3 views

CVE-2024-7466

A vulnerability has been found in PMWeb 7.2.00 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Web Application Firewall. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed t...

5.4CVSS3.5AI score
Exploits0References4
Cvelist
Cvelist
added 2024/08/05 2:0 a.m.12 views

CVE-2024-7466 PMWeb Web Application Firewall cross site scripting

A vulnerability has been found in PMWeb 7.2.00 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Web Application Firewall. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed t...

5.1CVSS0.0014EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2024/08/05 2:0 a.m.9 views

CVE-2024-7466 PMWeb Web Application Firewall cross site scripting

A vulnerability has been found in PMWeb 7.2.00 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Web Application Firewall. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed t...

5.1CVSS6.1AI score0.0014EPSS
Exploits1References4
CVE
CVE
added 2024/08/05 2:0 a.m.20 views

CVE-2024-7466

PMWeb 7.2.00 is affected by a cross-site scripting vulnerability in an unknown functionality of the Web Application Firewall component. The issue allows remote exploitation and has been publicly disclosed. Details in connected sources confirm the vulnerability impact as XSS, affecting PMWeb’s WAF...

5.4CVSS3.4AI score0.0014EPSS
Exploits1References4Affected Software1
CNNVD
CNNVD
added 2024/08/05 12:0 a.m.1 views

PMWeb 跨站脚本漏洞

PMWeb is a web-based platform from PMWeb Inc. It is used to manage the lifecycle of a user's schedule and build operations. A cross-site scripting vulnerability exists in PMWeb version 7.2.00, which stems from an unknown feature of the component Web Application Firewall that can lead to cross-sit...

5.4CVSS3.9AI score0.0014EPSS
Exploits1References5
Rows per page
Query Builder