Lucene search
K

4 matches found

OSV
OSV
added 2025/02/05 7:27 a.m.10 views

BIT-SUPERSET-2023-42504 Apache Superset: Lack of rate limiting allows for possible denial of service

An authenticated malicious user could initiate multiple concurrent requests, each requesting multiple dashboard exports, leading to a possible denial of service. This issue affects Apache Superset: before 3.0.0...

6.5CVSS5.8AI score0.0114EPSS
Exploits0References3
OSV
OSV
added 2024/09/09 10:15 a.m.4 views

CVE-2024-8601

This vulnerability exists in TechExcel Back Office Software versions prior to 1.0.0 due to improper access controls on certain API endpoints. An authenticated remote attacker could exploit this vulnerability by manipulating a parameter through API request URL which could lead to unauthorized acce...

6.5CVSS5.8AI score0.00485EPSS
Exploits0References1
OSV
OSV
added 2021/11/08 3:15 p.m.3 views

CVE-2021-28023

Arbitrary file upload in Service import feature in ServiceTonic Helpdesk software version 9.0.35937 allows a malicious user to execute JSP code by uploading a zip that extracts files in relative paths...

9.8CVSS7.4AI score
Exploits0References2
OSV
OSV
added 2017/04/02 8:59 p.m.4 views

CVE-2016-8790

Huawei CloudEngine 5800 with software before V200R001C00SPC700, CloudEngine 6800 with software before V200R001C00SPC700, CloudEngine 7800 with software before V200R001C00SPC700, CloudEngine 8800 with software before V200R001C00SPC700, CloudEngine 12800 with software before V200R001C00SPC700 could...

5.7CVSS6.1AI score
Exploits0References2
Rows per page
Query Builder