Lucene search
K

9 matches found

RedhatCVE
RedhatCVE
added 2025/10/31 6:10 p.m.5 views

CVE-2025-64115

Movary is a web application to track, rate and explore your movie watch history. Versions up to and including 0.68.0 use the HTTP Referer header value directly for redirects in multiple settings endpoints, allowing a crafted link to cause an open redirect to an attacker-controlled site and...

6.1CVSS6.6AI score0.0004EPSS
Exploits1References1
NVD
NVD
added 2025/10/30 6:15 p.m.3 views

CVE-2025-64115

Movary is a web application to track, rate and explore your movie watch history. Versions up to and including 0.68.0 use the HTTP Referer header value directly for redirects in multiple settings endpoints, allowing a crafted link to cause an open redirect to an attacker-controlled site and...

6.1CVSS0.0004EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/30 5:39 p.m.2 views

EUVD-2025-37040

Movary is a web application to track, rate and explore your movie watch history. Versions up to and including 0.68.0 use the HTTP Referer header value directly for redirects in multiple settings endpoints, allowing a crafted link to cause an open redirect to an attacker-controlled site and...

5.1CVSS6.1AI score0.0004EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2025/10/30 12:0 a.m.2 views

PT-2025-44442

Name of the Vulnerable Software and Affected Versions Movary versions prior to 0.69.0 Description Movary, a web application for tracking movie watch history, is susceptible to an open redirect issue. Versions up to and including 0.68.0 directly utilize the HTTP Referer header value for redirects...

5.1CVSS6.4AI score0.0004EPSS
Exploits1References7
Positive Technologies
Positive Technologies
added 2023/04/14 12:0 a.m.3 views

PT-2023-14631 · Unknown · Livebox Collaboration Vdesk

Name of the Vulnerable Software and Affected Versions: LIVEBOX Collaboration vDesk versions through v018 Description: An issue exists in the software due to Broken Access Control. This issue affects several API endpoints: "/api/v1/vdeskintegration/saml/user/createorupdate",...

8.8CVSS7.2AI score0.00313EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2022/10/12 12:15 a.m.1 views

CVE-2022-28866

Multiple Improper Access Control was discovered in Nokia AirFrame BMC Web GUI R18 Firmware v4.13.00. It does not properly validate requests for access to or editing of data and functionality in all endpoints under /settings/ and /api/settings/. By not verifying the permissions for access to...

8.8CVSS7.2AI score0.00248EPSS
Exploits1References3
OSV
OSV
added 2022/10/12 12:15 a.m.1 views

CVE-2022-28866

Multiple Improper Access Control was discovered in Nokia AirFrame BMC Web GUI R18 Firmware v4.13.00. It does not properly validate requests for access to or editing of data and functionality in all endpoints under /settings/ and /api/settings/. By not verifying the permissions for access to...

8.8CVSS5.8AI score
Exploits0References2
CNNVD
CNNVD
added 2022/10/11 12:0 a.m.2 views

Nokia AirFrame BMC 安全漏洞

Nokia AirFrame BMC is a high-performance and energy-efficient solution from Nokia of Finland. Designed for scalable data centers and heavy workloads. A security vulnerability exists in the R18 Firmware v4.13.00 version of the Nokia AirFrame BMC Web GUI, which stems from a failure to properly...

8.8CVSS7.9AI score0.00248EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2022/10/11 12:0 a.m.3 views

PT-2022-19270 · Nokia · Nokia Airframe Bmc Web Gui

Name of the Vulnerable Software and Affected Versions: Nokia AirFrame BMC Web GUI versions prior to R18 Firmware v4.13.00 Description: A security issue was found in the software, related to improper access control. It does not correctly validate requests to access or edit data and functionality i...

8.8CVSS8.4AI score0.00248EPSS
Exploits1References3
Rows per page
Query Builder