Lucene search
K

15 matches found

RedhatCVE
RedhatCVE
added 2025/05/01 9:18 p.m.10 views

CVE-2025-46344

The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. Versions starting from 4.0.1 and prior to 4.5.1, do not invoke .setExpirationTime when generating a JWE token for the session. As a result, the JWE does not contain an internal expiration claim. While...

7.1CVSS7AI score0.00251EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2024/11/04 10:31 p.m.13 views

CVE-2024-51744

golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in ParseWithClaims can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors returned by...

3.1CVSS6.6AI score0.0006EPSS
Exploits0References5
OSV
OSV
added 2024/11/04 10:15 p.m.4 views

AZL-52186 CVE-2024-51744 affecting package flannel for versions less than 0.24.2-13

golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in ParseWithClaims can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors returned by...

3.1CVSS6.5AI score0.0006EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2024/07/21 12:0 a.m.4 views

Fedora 39 : tcpreplay (2024-740d26aaf7)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-740d26aaf7 advisory. Announcing v4.5.1 This release contains contributions from a record number of new contributors. This is greatly appreciated since I am a team of one, and do...

5.6AI score
Exploits0References1
NVD
NVD
added 2024/04/12 7:15 a.m.11 views

CVE-2024-29400

An issue was discovered in RuoYi v4.5.1, allows attackers to obtain sensitive information via the status parameter...

7.5CVSS6AI score0.0011EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2024/04/12 12:0 a.m.13 views

CVE-2024-29400

An issue was discovered in RuoYi v4.5.1, allows attackers to obtain sensitive information via the status parameter...

6.3AI score0.0011EPSS
Exploits1References1
CVE
CVE
added 2024/04/12 12:0 a.m.44 views

CVE-2024-29400

CVE-2024-29400 affects RuoYi v4.5.1. The vulnerability allows attackers to obtain sensitive information via the status parameter. Public documents (NVD, Red Hat, CNVD, etc.) confirm the affected software and impact description but do not provide root-cause specifics or a guaranteed fix. No exploi...

7.5CVSS6.2AI score0.0011EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2024/04/12 12:0 a.m.16 views

CVE-2024-29400

An issue was discovered in RuoYi v4.5.1, allows attackers to obtain sensitive information via the status parameter...

6.2AI score0.0011EPSS
Exploits1References1
Cvelist
Cvelist
added 2023/09/26 12:0 a.m.13 views

CVE-2021-38243

xunruicms up to v4.5.1 was discovered to contain a remote code execution RCE vulnerability in /index.php. This vulnerability allows attackers to execute arbitrary code via a crafted GET request...

10AI score0.04212EPSS
Exploits1References1
OSV
OSV
added 2021/12/20 10:15 p.m.22 views

CVE-2021-43843

jsx-slack is a package for building JSON objects for Slack block kit surfaces from JSX. The maintainers found the patch for CVE-2021-43838 in jsx-slack v4.5.1 is insufficient tfor protection from a Regular Expression Denial of Service ReDoS attack. If an attacker can put a lot of JSX elements int...

7.5CVSS7.1AI score
Exploits0References4
CVE
CVE
added 2018/03/14 1:0 p.m.120 views

CVE-2018-1000132

CVE-2018-1000132 affects Mercurial 4.5 and earlier, with an Incorrect Access Control (CWE-285) in the Protocol server that can lead to unauthorized data access over the network. The vulnerability is explicitly stated to have been fixed in Mercurial 4.5.1. Connected advisories reference affected p...

9.1CVSS8.8AI score0.006EPSS
Exploits0References5Affected Software1
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.12 views

ShopEx Single <= 4.5.1 - Multiple Vulnerabilities

No description provided by source. Exploit Title: ShopEx = Single V4.5.1 Multiple Vulnerabilities Date: 30/01/10 Author: cp77fk4r | empty0pageSHIFT+2gmail.com| www.DigitalWhisper.co.il Software Link: http://www.shopex.cn | http://www.shopex.cn/download/ Version: = Single V4.5.1 Tested on: PHP Cro...

7.1AI score
Exploits0
exploitpack
exploitpack
added 2010/02/06 12:0 a.m.18 views

ShopEx Single 4.5.1 - Multiple Vulnerabilities

ShopEx Single 4.5.1 - Multiple Vulnerabilities Exploit Title: ShopEx = Single V4.5.1 Multiple Vulnerabilities Date: 30/01/10 Author: cp77fk4r | empty0pageSHIFT+2gmail.com| www.DigitalWhisper.co.il Software Link: http://www.shopex.cn | http://www.shopex.cn/download/ Version: = Single V4.5.1 Tested...

0.2AI score
Exploits0
Exploit DB
Exploit DB
added 2010/02/06 12:0 a.m.32 views

ShopEx Single 4.5.1 - Multiple Vulnerabilities

Exploit Title: ShopEx = Single V4.5.1 Multiple Vulnerabilities Date: 30/01/10 Author: cp77fk4r | empty0pageSHIFT+2gmail.com| www.DigitalWhisper.co.il Software Link: http://www.shopex.cn | http://www.shopex.cn/download/ Version: = Single V4.5.1 Tested on: PHP Cross Site Scripting Cross-Site...

7.4AI score
Exploits0
0day.today
0day.today
added 2010/02/06 12:0 a.m.17 views

ShopEx <= Single V4.5.1 Multiple Vulnerabilities

Exploit for unknown platform in category web applications ================================================ ShopEx = Single V4.5.1 Multiple Vulnerabilities ================================================ Software Link: http://www.shopex.cn | http://www.shopex.cn/download/ Version: = Single V4.5.1...

7.1AI score
Exploits0
Rows per page
Query Builder