Lucene search
K

13 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-33958

Malicious code in bioql PyPI...

7.5CVSS5.1AI score0.00337EPSS
Exploits0References3
CNVD
CNVD
added 2025/09/16 12:0 a.m.3 views

Unspecified Vulnerability in Dreamer CMS (CNVD-2025-21438)

Dreamer CMS is a dreamer content management system. A security vulnerability exists in Dreamer CMS 4.1.3.2 and earlier versions, which stems from improper handling of the file /admin/user/updatePwd, which could lead to weak password requirements. No details of the vulnerability are provided at th...

3.1CVSS4.5AI score0.00043EPSS
Exploits0Affected Software1
NVD
NVD
added 2025/09/12 4:15 p.m.1 views

CVE-2025-10320

A vulnerability was detected in iteachyou Dreamer CMS up to 4.1.3.2. This issue affects some unknown processing of the file /admin/user/updatePwd. Performing manipulation results in weak password requirements. Remote exploitation of the attack is possible. A high degree of complexity is needed fo...

3.1CVSS0.00043EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/09/12 4:2 p.m.8 views

CVE-2025-10320 iteachyou Dreamer CMS updatePwd weak password

A vulnerability was detected in iteachyou Dreamer CMS up to 4.1.3.2. This issue affects some unknown processing of the file /admin/user/updatePwd. Performing manipulation results in weak password requirements. Remote exploitation of the attack is possible. A high degree of complexity is needed fo...

3.1CVSS0.00043EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/09/12 4:2 p.m.2 views

CVE-2025-10320 iteachyou Dreamer CMS updatePwd weak password

A vulnerability was detected in iteachyou Dreamer CMS up to 4.1.3.2. This issue affects some unknown processing of the file /admin/user/updatePwd. Performing manipulation results in weak password requirements. Remote exploitation of the attack is possible. A high degree of complexity is needed fo...

3.1CVSS6.1AI score0.00043EPSS
Exploits0References4
CVE
CVE
added 2025/09/12 4:2 p.m.10 views

CVE-2025-10320

Dreamer CMS (it-eachyou Dreamer CMS) versions through 4.1.3.2 are affected by a vulnerability in the handling of /admin/user/updatePwd that results in weak password requirements. The root cause is an improper processing path for updatePwd, permitting a password policy bypass. Exploitation can be ...

3.1CVSS6.1AI score0.00043EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/09/12 12:0 a.m.1 views

Dreamer CMS 安全漏洞

Dreamer CMS is a dreamer content management system. A security vulnerability exists in Dreamer CMS 4.1.3.2 and earlier versions, which stems from improper handling of the file /admin/user/updatePwd, which could lead to weak password requirements. No details of the vulnerability are provided at th...

3.1CVSS6.7AI score0.00043EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2025/05/23 5:39 a.m.1 views

CVE-2023-0674

A vulnerability, which was classified as problematic, has been found in XXL-JOB 2.3.1. Affected by this issue is some unknown functionality of the file /user/updatePwd of the component New Password Handler. The manipulation leads to cross-site request forgery. The attack may be launched remotely...

6.5CVSS4.6AI score0.00111EPSS
Exploits1References1
NVD
NVD
added 2023/05/02 1:15 p.m.9 views

CVE-2023-2473

A vulnerability was found in Dreamer CMS up to 4.1.3. It has been declared as problematic. This vulnerability affects the function updatePwd of the file UserController.java of the component Password Hash Calculation. The manipulation leads to inefficient algorithmic complexity. The attack can be...

7.5CVSS5.3AI score0.00337EPSS
Exploits0References3
Prion
Prion
added 2023/05/02 1:15 p.m.14 views

Design/Logic Flaw

A vulnerability was found in Dreamer CMS up to 4.1.3. It has been declared as problematic. This vulnerability affects the function updatePwd of the file UserController.java of the component Password Hash Calculation. The manipulation leads to inefficient algorithmic complexity. The attack can be...

4CVSS7.5AI score0.00337EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2023/05/02 12:0 p.m.39 views

CVE-2023-2473

CVE-2023-2473 affects Dreamer CMS versions up to 4.1.3. The vulnerability resides in the Password Hash Calculation component, specifically the updatePwd function in the UserController.java, causing inefficient algorithmic complexity. The issue can be exploited remotely, with upgrade recommended a...

7.5CVSS5.8AI score0.00337EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2023/05/02 12:0 p.m.13 views

CVE-2023-2473 Dreamer CMS Password Hash Calculation UserController.java updatePwd algorithmic complexity

A vulnerability was found in Dreamer CMS up to 4.1.3. It has been declared as problematic. This vulnerability affects the function updatePwd of the file UserController.java of the component Password Hash Calculation. The manipulation leads to inefficient algorithmic complexity. The attack can be...

4.3CVSS7.7AI score0.00337EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/05/02 12:0 a.m.2 views

PT-2023-19753 · Unknown · Dreamer Cms

Name of the Vulnerable Software and Affected Versions: Dreamer CMS versions up to 4.1.3 Description: A vulnerability was found in the Password Hash Calculation component, specifically affecting the updatePwd function of the UserController.java file. This issue leads to inefficient algorithmic...

7.5CVSS7.1AI score0.00337EPSS
Exploits0References7
Rows per page
Query Builder