Lucene search
K

8 matches found

Snyk
Snyk
added 2026/03/20 8:34 p.m.3 views

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the CheckTxnAuth function. A user with RBAC restricted permissions on key ranges can gain unauthorized access to the entire data store by bypassing key-level authorization checks using nested transactions...

7.1CVSS5.8AI score0.0021EPSS
Exploits0References2
Fedora
Fedora
added 2026/03/06 1:28 a.m.8 views

[SECURITY] Fedora 42 Update: opensips-3.5.9-2.fc42

OpenSIPS or Open SIP Server is a very fast and flexible SIP RFC3261 proxy server. Written entirely in C, opensips can handle thousands calls per second even on low-budget hardware. A C Shell like scripting language provides full control over the server's behaviour. It's modular architecture allow...

8.3CVSS5.9AI score0.00318EPSS
Exploits0
OSV
OSV
added 2024/09/03 10:15 a.m.3 views

CVE-2024-45587

This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1P160 due to improper access controls on APIs in the Transaction module of vulnerable application. An authenticated remote attacker could exploit this vulnerability by manipulating parameters through HTTP request which...

8.8CVSS5.8AI score0.00417EPSS
Exploits0References1
NVD
NVD
added 2024/09/03 10:15 a.m.15 views

CVE-2024-45587

This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1P160 due to improper access controls on APIs in the Transaction module of vulnerable application. An authenticated remote attacker could exploit this vulnerability by manipulating parameters through HTTP request which...

9.1CVSS0.00417EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/09/03 10:9 a.m.11 views

CVE-2024-45587 Unauthorized Modification Vulnerability

This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1P160 due to improper access controls on APIs in the Transaction module of vulnerable application. An authenticated remote attacker could exploit this vulnerability by manipulating parameters through HTTP request which...

9.1CVSS7AI score0.00417EPSS
Exploits0References1
CVE
CVE
added 2024/09/03 10:9 a.m.70 views

CVE-2024-45587

The CVE-2024-45587 issue affects Symphony XTS Web Trading platform 2.0.0.1_P160, arising from improper access controls in the APIs of the Transaction module. An authenticated remote attacker could manipulate parameters via HTTP requests to compromise other user accounts. The vulnerability is docu...

9.1CVSS8.5AI score0.00417EPSS
Exploits0References1Affected Software2
Cvelist
Cvelist
added 2024/09/03 10:9 a.m.19 views

CVE-2024-45587 Unauthorized Modification Vulnerability

This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1P160 due to improper access controls on APIs in the Transaction module of vulnerable application. An authenticated remote attacker could exploit this vulnerability by manipulating parameters through HTTP request which...

9.1CVSS0.00417EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/07/06 12:0 a.m.2 views

SAMSUNG Mobile device 输入验证错误漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from Samsung South Korea. A security vulnerability exists in SAMSUNG Mobile device SMR Jul-2023 Release 1 version, which stems from an incorrect input validation vulnerability in the Transaction...

7.8CVSS7.3AI score0.00172EPSS
Exploits0References2
Rows per page
Query Builder