Lucene search
K

7 matches found

NVD
NVD
added 2025/04/07 4:15 p.m.7 views

CVE-2025-28403

An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the editSave method does not properly validate whether the requesting user has administrative privileges before allowing modifications to system configuration settings...

7.2CVSS0.01282EPSS
Exploits1References2
NVD
NVD
added 2023/09/14 7:16 p.m.12 views

CVE-2023-39286

A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2304.102 could allow an unauthenticated attacker to perform a Cross Site Request Forgery CSRF attack due to insufficient request validation. A successful exploit could allow an attacker to provide a...

4.3CVSS4.7AI score0.00138EPSS
Exploits0References1
Prion
Prion
added 2023/09/14 7:16 p.m.18 views

Cross site request forgery (csrf)

A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2304.102 could allow an unauthenticated attacker to perform a Cross Site Request Forgery CSRF attack due to insufficient request validation. A successful exploit could allow an attacker to provide a...

4.3CVSS4.8AI score0.00138EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2023/09/14 7:16 p.m.17 views

Cross site request forgery (csrf)

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 SP3 22.24.5800.0 could allow an unauthenticated attacker to perform a Cross Site Request Forgery CSRF attack due to insufficient request validation. A successful exploit could allow an attacker to provide a modifi...

4.3CVSS4.8AI score0.00138EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/09/14 12:0 a.m.14 views

CVE-2023-39285

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 SP3 22.24.5800.0 could allow an unauthenticated attacker to perform a Cross Site Request Forgery CSRF attack due to insufficient request validation. A successful exploit could allow an attacker to provide a modifi...

5AI score0.00138EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/09/14 12:0 a.m.22 views

CVE-2023-39286

A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2304.102 could allow an unauthenticated attacker to perform a Cross Site Request Forgery CSRF attack due to insufficient request validation. A successful exploit could allow an attacker to provide a...

5AI score0.00138EPSS
Exploits0References1
0day.today
0day.today
added 2015/08/20 12:0 a.m.55 views

Trend Micro Deep Discovery 3.7.1096 Authentication Bypass / XSS Vulnerabilities

Exploit for php platform in category web applications + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/TREND-MICRO-DDI-0818.txt Vendor: ================================ www.trendmicro.com Product:...

5.5CVSS6.5AI score0.02576EPSS
Exploits3
Rows per page
Query Builder