Lucene search
K

13 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-18062

Malicious code in bioql PyPI...

4.3CVSS6.5AI score0.00512EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/06/12 11:21 p.m.4 views

CVE-2025-22829

The CloudStack Quota plugin has an improper privilege management logic in version 4.20.0.0. Anyone with authenticated user-account access in CloudStack 4.20.0.0 environments, where this plugin is enabled and have access to specific APIs can enable or disable reception of quota-related emails for...

4.3CVSS6.5AI score0.00512EPSS
Exploits0References1
OSV
OSV
added 2025/06/10 11:15 p.m.2 views

CVE-2025-22829

The CloudStack Quota plugin has an improper privilege management logic in version 4.20.0.0. Anyone with authenticated user-account access in CloudStack 4.20.0.0 environments, where this plugin is enabled and have access to specific APIs can enable or disable reception of quota-related emails for...

4.3CVSS7AI score
Exploits0References3
NVD
NVD
added 2025/06/10 11:15 p.m.3 views

CVE-2025-22829

The CloudStack Quota plugin has an improper privilege management logic in version 4.20.0.0. Anyone with authenticated user-account access in CloudStack 4.20.0.0 environments, where this plugin is enabled and have access to specific APIs can enable or disable reception of quota-related emails for...

4.3CVSS0.00512EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/06/10 11:11 p.m.3 views

CVE-2025-22829 Apache CloudStack: Unauthorised access to dedicated resources in Quota plugin

The CloudStack Quota plugin has an improper privilege management logic in version 4.20.0.0. Anyone with authenticated user-account access in CloudStack 4.20.0.0 environments, where this plugin is enabled and have access to specific APIs can enable or disable reception of quota-related emails for...

2.3CVSS7.1AI score0.00512EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/06/10 11:11 p.m.10 views

CVE-2025-22829 Apache CloudStack: Unauthorised access to dedicated resources in Quota plugin

The CloudStack Quota plugin has an improper privilege management logic in version 4.20.0.0. Anyone with authenticated user-account access in CloudStack 4.20.0.0 environments, where this plugin is enabled and have access to specific APIs can enable or disable reception of quota-related emails for...

2.3CVSS0.00512EPSS
Exploits0References3
CVE
CVE
added 2025/06/10 11:11 p.m.45 views

CVE-2025-22829

Affected software: Apache CloudStack with the Quota plugin (version 4.20.0.0). Issue: Improper privilege management logic lets an authenticated user with access to specific APIs enable/disable quota‑related emails and list quota configurations for any account in environments where the plugin is e...

4.3CVSS6.5AI score0.00512EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2025/06/10 12:0 a.m.2 views

PT-2025-25166 · Unknown · Cloudstack

Name of the Vulnerable Software and Affected Versions: CloudStack version 4.20.0.0 Description: The CloudStack Quota plugin has an improper privilege management logic. Anyone with authenticated user-account access in CloudStack environments where this plugin is enabled can enable or disable...

4.3CVSS6.4AI score0.00512EPSS
Exploits0References8
Vulnrichment
Vulnrichment
added 2025/03/20 6:0 a.m.6 views

CVE-2024-13880 My Quota <= 1.0.8 - Reflected XSS

The My Quota WordPress plugin through 1.0.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.5AI score0.00185EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/03/20 6:0 a.m.12 views

CVE-2024-13880 My Quota <= 1.0.8 - Reflected XSS

The My Quota WordPress plugin through 1.0.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

0.00185EPSS
Exploits1References1
Cvelist
Cvelist
added 2024/10/16 7:54 a.m.11 views

CVE-2024-45461 Apache CloudStack Quota plugin: Access checks not enforced in Quota

The CloudStack Quota feature allows cloud administrators to implement a quota or usage limit system for cloud resources, and is disabled by default. In environments where the feature is enabled, due to missing access check enforcements, non-administrative CloudStack user accounts are able to acce...

5.7CVSS0.00193EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/10/16 7:54 a.m.10 views

CVE-2024-45461 Apache CloudStack Quota plugin: Access checks not enforced in Quota

The CloudStack Quota feature allows cloud administrators to implement a quota or usage limit system for cloud resources, and is disabled by default. In environments where the feature is enabled, due to missing access check enforcements, non-administrative CloudStack user accounts are able to acce...

5.7CVSS7.1AI score0.00193EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/10/15 12:0 a.m.2 views

PT-2024-31652 · Apache · Apache Cloudstack

Name of the Vulnerable Software and Affected Versions: Apache CloudStack versions 4.7.0 through 4.18.2.3 Apache CloudStack versions 4.19.0.0 through 4.19.1.1 Description: The CloudStack Quota feature, which is disabled by default, allows cloud administrators to implement a quota or usage limit...

6.3CVSS7.2AI score0.00193EPSS
Exploits0References16
Rows per page
Query Builder