Lucene search
K

30 matches found

RedhatCVE
RedhatCVE
added 2026/04/02 10:53 a.m.1 views

CVE-2026-24096

Insufficient permission validation on multiple REST API Quick Setup endpoints in Checkmk 2.5.0 beta before version 2.5.0b2 and 2.4.0 before version 2.4.0p25 allows low-privileged users to perform unauthorized actions or obtain sensitive information...

8.8CVSS5.9AI score0.00053EPSS
Exploits0References1
EUVD
EUVD
added 2026/04/01 12:31 p.m.1 views

EUVD-2026-17867

Insufficient permission validation on multiple REST API Quick Setup endpoints in Checkmk 2.5.0 beta before version 2.5.0b2 and 2.4.0 before version 2.4.0p25 allows low-privileged users to perform unauthorized actions or obtain sensitive information...

5.3CVSS5.9AI score0.00053EPSS
Exploits0References2
NVD
NVD
added 2026/04/01 11:15 a.m.3 views

CVE-2026-24096

Insufficient permission validation on multiple REST API Quick Setup endpoints in Checkmk 2.5.0 beta before version 2.5.0b2 and 2.4.0 before version 2.4.0p25 allows low-privileged users to perform unauthorized actions or obtain sensitive information...

8.8CVSS0.00053EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2026/04/01 11:15 a.m.2 views

CVE-2026-24096

Insufficient permission validation on multiple REST API Quick Setup endpoints in Checkmk 2.5.0 beta before version 2.5.0b2 and 2.4.0 before version 2.4.0p25 allows low-privileged users to perform unauthorized actions or obtain sensitive information...

8.8CVSS5.9AI score0.00053EPSS
Exploits0References2
OSV
OSV
added 2026/04/01 11:15 a.m.1 views

UBUNTU-CVE-2026-24096

Insufficient permission validation on multiple REST API Quick Setup endpoints in Checkmk 2.5.0 beta before version 2.5.0b2 and 2.4.0 before version 2.4.0p25 allows low-privileged users to perform unauthorized actions or obtain sensitive information...

8.8CVSS5.8AI score0.00053EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/04/01 10:7 a.m.1 views

CVE-2026-24096 Insufficient permission validation on multiple REST API Quick Setup endpoints

Insufficient permission validation on multiple REST API Quick Setup endpoints in Checkmk 2.5.0 beta before version 2.5.0b2 and 2.4.0 before version 2.4.0p25 allows low-privileged users to perform unauthorized actions or obtain sensitive information...

5.3CVSS5.9AI score0.00053EPSS
Exploits0References1
CVE
CVE
added 2026/04/01 10:7 a.m.6 views

CVE-2026-24096

CVE-2026-24096 affects Checkmk 2.5.0 (beta) prior to 2.5.0b2 and 2.4.0 prior to 2.4.0p25, due to insufficient permission validation on multiple REST API Quick Setup endpoints. Low-privileged users can perform unauthorized actions or obtain sensitive information. CVSSv4 base score 5.3 (MEDIUM) wit...

8.8CVSS5.9AI score0.00053EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2026/04/01 12:0 a.m.1 views

Checkmk 安全漏洞

Checkmk is an IT monitoring platform developed by Checkmk Corporation. Versions of Checkmk prior to 2.5.0b2 and 2.4.0p25 contained security vulnerabilities. These vulnerabilities stemmed from insufficient permission validation for multiple REST API quick-setup endpoints, which could allow...

8.8CVSS5.8AI score0.00053EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 12:14 p.m.6 views

CVE-2024-52429

Unrestricted Upload of File with Dangerous Type vulnerability in AntonHoelstad WP Quick Setup wp-quick-setup allows Upload a Web Shell to a Web Server.This issue affects WP Quick Setup: from n/a through = 2.0...

9.9CVSS7.2AI score0.41142EPSS
Exploits0References1
NVD
NVD
added 2024/11/20 6:15 p.m.5 views

CVE-2024-29292

Multiple OS Command Injection vulnerabilities affecting Kasda LinkSmart Router KW6512 = v1.3 enable an authenticated remote attacker to execute arbitrary OS commands via various cgi parameters...

9.1CVSS0.01055EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/11/20 12:0 a.m.12 views

CVE-2024-29292

Multiple OS Command Injection vulnerabilities affecting Kasda LinkSmart Router KW6512 = v1.3 enable an authenticated remote attacker to execute arbitrary OS commands via various cgi parameters...

0.01055EPSS
Exploits0References2
CVE
CVE
added 2024/11/20 12:0 a.m.42 views

CVE-2024-29292

CVE-2024-29292 affects Kasda LinkSmart Router KW6512,

9.1CVSS7.9AI score0.01055EPSS
Exploits0References2
OSV
OSV
added 2024/11/18 3:15 p.m.0 views

CVE-2024-52429

Unrestricted Upload of File with Dangerous Type vulnerability in Anton Hoelstad WP Quick Setup allows Upload a Web Shell to a Web Server.This issue affects WP Quick Setup: from n/a through 2.0...

8.8CVSS7.3AI score
Exploits0References1
Cvelist
Cvelist
added 2024/11/18 2:19 p.m.258 views

CVE-2024-52429 WordPress WP Quick Setup plugin <= 2.0 - Arbitrary Plugin and Theme Installation to Remote Code Execution vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in AntonHoelstad WP Quick Setup wp-quick-setup allows Upload a Web Shell to a Web Server.This issue affects WP Quick Setup: from n/a through = 2.0...

9.9CVSS0.41142EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/18 2:19 p.m.14 views

CVE-2024-52429 WordPress WP Quick Setup plugin <= 2.0 - Arbitrary Plugin and Theme Installation to Remote Code Execution vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in AntonHoelstad WP Quick Setup wp-quick-setup allows Upload a Web Shell to a Web Server.This issue affects WP Quick Setup: from n/a through = 2.0...

9.9CVSS7.2AI score0.41142EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/11/18 12:0 a.m.1 views

WordPress plugin WP Quick Setup 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

9.9CVSS8.4AI score0.41142EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/11/15 8:32 a.m.1 views

WordPress WP Quick Setup plugin <= 2.0 - Arbitrary Plugin and Theme Installation to Remote Code Execution vulnerability

Arbitrary Plugin and Theme Installation to Remote Code Execution vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin WP Quick Setup versions = 2.0...

9.9CVSS7.5AI score0.41142EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2024/11/15 12:0 a.m.12 views

WordPress WP Quick Setup Plugin <= 2.0 is vulnerable to Arbitrary File Upload

Software WP Quick Setup Type Plugin Vulnerable versions = 2.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-52429 Patch priority High CVSS severity High 9.9 Developer Claim ownership PSID ceb3ca8b7fc9 Credits Mika Required privilege Subscriber Published...

9.9CVSS7.2AI score0.41142EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2019/12/16 9:0 p.m.63 views

CVE-2019-18191

The CVE-2019-18191 entry concerns Trend Micro Deep Security as a Service Quick Setup cloud formation template. The vulnerability enables privilege escalation where an authenticated entity with certain unrestricted AWS execution privileges can gain full privileges within the target AWS account. Do...

8.8CVSS8.8AI score0.00759EPSS
Exploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2019/01/17 12:0 a.m.35 views

EMC RSA Authentication Manager < 8.4 Relative Path Traversal (DSA-2018-226)

The version of EMC RSA Authentication Manager running on the remote host is prior to 8.4. It is, therefore, affected by a relative path traversal vulnerability in the Quick Setup component. An attacker could provide an administrator with a maliciously crafted license file to be used during the...

7.8CVSS7.4AI score0.00028EPSS
Exploits0References2
Rows per page
Query Builder