Lucene search
+L

28 matches found

vulnersOsv
vulnersOsv
•added 2026/10/15 10:22 a.m.•6 views

connect-cli (>=24.5.0, <=31.0.0), connect-reports-core (>=24.0.1, <=29.0.0) +3 more potentially affected by CVE-2026-106443 via weasyprint (53.4.0)

weasyprint PYPI version 53.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - connect-cli =24.5.0, =24.0.1, =24.3.0, =0.1.0, =1.0.0, =1.1.0 Source cves: CVE-2026-106443 Source advisory: OSV:PYSEC-2026-4311...

8.8CVSS5.8AI score0.00705EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/10/07 6:05 p.m.•6 views

connect-cli (>=24.5.0, <=31.0.0), connect-reports-core (>=24.0.1, <=29.0.0) +3 more potentially affected by CVE-2026-106443 via weasyprint (53.4.0)

weasyprint PYPI version 53.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - connect-cli =24.5.0, =24.0.1, =24.3.0, =0.1.0, =1.0.0, =1.1.0 Source cves: CVE-2026-106443 Source advisory: OSV:GHSA-R543-Q48M-4C9J...

8.8CVSS5.8AI score0.00705EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/09/10 9:45 a.m.•4 views

connect-cli (>=24.5.0, <=31.0.0), connect-reports-core (>=24.0.1, <=29.0.0) +3 more potentially affected by CVE-2026-55073 via weasyprint (53.4.0)

weasyprint PYPI version 53.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - connect-cli =24.5.0, =24.0.1, =24.3.0, =0.1.0, =1.0.0, =1.1.0 Source cves: CVE-2026-55073 Source advisory: OSV:PYSEC-2026-3940...

6.2CVSS5.8AI score0.00225EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/09/09 6:06 p.m.•4 views

connect-cli (>=24.5.0, <=31.0.0), connect-reports-core (>=24.0.1, <=29.0.0) +3 more potentially affected by CVE-2026-55073 via weasyprint (53.4.0)

weasyprint PYPI version 53.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - connect-cli =24.5.0, =24.0.1, =24.3.0, =0.1.0, =1.0.0, =1.1.0 Source cves: CVE-2026-55073 Source advisory: OSV:GHSA-JF6Q-CHMF-3H3V...

6.2CVSS5.8AI score0.00225EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/07/13 3:46 p.m.•5 views

connect-cli (>=24.5.0, <=31.0.0), connect-reports-core (>=24.0.1, <=29.0.0) +3 more potentially affected by CVE-2026-49452 via weasyprint (53.4.0)

weasyprint PYPI version 53.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - connect-cli =24.5.0, =24.0.1, =24.3.0, =0.1.0, =1.0.0, =1.1.0 Source cves: CVE-2026-49452 Source advisory: OSV:PYSEC-2026-3412...

6.5CVSS5.8AI score0.00372EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/07/07 4:03 p.m.•4 views

connect-cli (>=24.5.0, <=31.0.0), connect-reports-core (>=24.0.1, <=29.0.0) +3 more potentially affected by CVE-2025-68616 via weasyprint (53.4.0)

weasyprint PYPI version 53.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - connect-cli =24.5.0, =24.0.1, =24.3.0, =0.1.0, =1.0.0, =1.1.0 Source cves: CVE-2025-68616 Source advisory: OSV:PYSEC-2026-2034...

7.5CVSS5.9AI score0.00702EPSS
SaveExploits2
vulnersOsv
vulnersOsv
•added 2026/01/20 4:29 p.m.•3 views

connect-cli (>=24.5.0, <=31.0.0), connect-reports-core (>=24.0.1, <=29.0.0) +3 more potentially affected by CVE-2025-68616 via weasyprint (53.4.0)

weasyprint PYPI version 53.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - connect-cli =24.5.0, =24.0.1, =24.3.0, =0.1.0, =1.0.0, =1.1.0 Source cves: CVE-2025-68616 Source advisory: OSV:GHSA-983W-RHVV-GWMV...

7.5CVSS5.9AI score0.00702EPSS
SaveExploits2
NVD
NVD
•added 2024/06/25 3:15 a.m.•29 views

CVE-2024-6295

udn News Android APP stores the unencrypted user session in the local database when user log into the application. A malicious APP or an attacker with physical access to the Android device can retrieve this session and use it to log into the news APP and other services provided by udn...

3.9CVSS0.00212EPSS
SaveExploits0References2
NVD
NVD
•added 2024/06/25 2:15 a.m.•29 views

CVE-2024-6294

udn News Android APP stores the user session in logcat file when user log into the APP. A malicious APP or an attacker with physical access to the Android device can retrieve this session and use it to log into the news APP and other services provided by udn...

3.9CVSS0.00212EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/06/25 2:13 a.m.•40 views

CVE-2024-6295 udn News App - Insecure Data Storage

udn News Android APP stores the unencrypted user session in the local database when user log into the application. A malicious APP or an attacker with physical access to the Android device can retrieve this session and use it to log into the news APP and other services provided by udn...

3.9CVSS0.00212EPSS
SaveExploits0References2
CVE
CVE
•added 2024/06/25 2:13 a.m.•73 views

CVE-2024-6295

CVE-2024-6295 concerns the udn News Android APP, where the app stores the unencrypted user session in the local database after login. The connected CNNVD entry specifies that versions prior to 4.20.1 are affected, enabling a malicious app or an attacker with physical access to retrieve the sessio...

3.9CVSS5.8AI score0.00212EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/06/25 2:13 a.m.•20 views

CVE-2024-6295 udn News App - Insecure Data Storage

udn News Android APP stores the unencrypted user session in the local database when user log into the application. A malicious APP or an attacker with physical access to the Android device can retrieve this session and use it to log into the news APP and other services provided by udn...

3.9CVSS5.8AI score0.00212EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/06/25 1:58 a.m.•41 views

CVE-2024-6294 udn News App - Sensitive Information Exposure

udn News Android APP stores the user session in logcat file when user log into the APP. A malicious APP or an attacker with physical access to the Android device can retrieve this session and use it to log into the news APP and other services provided by udn...

3.9CVSS0.00212EPSS
SaveExploits0References2
CVE
CVE
•added 2024/06/25 1:58 a.m.•78 views

CVE-2024-6294

The CVE-2024-6294 entry concerns udn News Android APP storing the user session in a logcat file during login, enabling a local attacker with physical access or a malicious app to retrieve the session and log into the news app and other services. Public sources confirm the issue as an information ...

3.9CVSS5.8AI score0.00212EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/25 12:00 a.m.•8 views

CVE-2024-6295: Insecure Storage of Sensitive Information

udn News Android APP stores the unencrypted user session in the local database when user log into the application. A malicious APP or an attacker with physical access to the Android device can retrieve this session and use it to log into the news APP and other services provided by udn...

3.9CVSS5.8AI score0.00212EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/06/25 12:00 a.m.•11 views

PT-2024-37518

Name of the Vulnerable Software and Affected Versions: udn News Android APP affected versions not specified Description: The issue concerns the storage of unencrypted user sessions in the local database of the udn News Android APP when a user logs in. This allows a malicious APP or an attacker wi...

3.9CVSS5.7AI score0.00212EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2024/06/25 12:00 a.m.•7 views

PT-2024-37517

Name of the Vulnerable Software and Affected Versions: udn News Android APP affected versions not specified Description: The issue concerns the storage of user sessions in the logcat file when a user logs into the udn News Android APP. This allows a malicious APP or an attacker with physical acce...

3.9CVSS5.7AI score0.00212EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/25 12:00 a.m.•13 views

CVE-2024-6294: Exposure of Sensitive Information to an Unauthorized Actor

udn News Android APP stores the user session in logcat file when user log into the APP. A malicious APP or an attacker with physical access to the Android device can retrieve this session and use it to log into the news APP and other services provided by udn...

3.9CVSS5.8AI score0.00212EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2023/02/15 5:43 a.m.•13 views

SUSE CVE-2012-5959

Stack-based buffer overflow in the uniqueservicename function in ssdp/ssdpserver.c in the SSDP parser in the portable SDK for UPnP Devices aka libupnp, formerly the Intel SDK for UPnP devices before 1.6.18 allows remote attackers to execute arbitrary code via a long UDN aka uuid field within a...

10CVSS8.4AI score0.75796EPSS
SaveExploits3References3
SUSE CVE
SUSE CVE
•added 2023/02/15 5:43 a.m.•18 views

SUSE CVE-2012-5961

Stack-based buffer overflow in the uniqueservicename function in ssdp/ssdpserver.c in the SSDP parser in the portable SDK for UPnP Devices aka libupnp, formerly the Intel SDK for UPnP devices 1.3.1 allows remote attackers to execute arbitrary code via a long UDN aka device field in a UDP packet...

10CVSS8.4AI score0.36925EPSS
SaveExploits2References3
Rows per page
Query Builder