EUVD-2024-42728

Malicious code in bioql PyPI...

CVE-2024-47915

VaeMendis - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2024-45254

VaeMendis - CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2024-47914

VaeMendis - CWE-352: Cross-Site Request Forgery CSRF...

CVE-2024-47915 VaeMendis - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

VaeMendis - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2024-47915 VaeMendis - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

VaeMendis - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2024-47915

CVE-2024-47915 relates to VaeMendis Ubooquity vulnerability (reported in CVE records) where sensitive information can be exposed to unauthorized actors. Public details across sources indicate an information disclosure issue affecting VaeMendis Ubooquity, with a concrete product/version mentioned ...

CVE-2024-47914

CVE-2024-47914 is tied to a CSRF vulnerability affecting VaeMendis Ubooquity (reported by CNNVD as version 2.1.2). The available connected sources identify Cross-Site Request Forgery as the issue and attribute affected software to VaeMendis/Ubooquity, but do not provide a precise vulnerable compo...

CVE-2024-47914 VaeMendis - CWE-352: Cross-Site Request Forgery (CSRF)

VaeMendis - CWE-352: Cross-Site Request Forgery CSRF...

CVE-2024-47914 VaeMendis - CWE-352: Cross-Site Request Forgery (CSRF)

VaeMendis - CWE-352: Cross-Site Request Forgery CSRF...

CVE-2024-45254 VaeMendis - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

VaeMendis - CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

CVE-2024-45254

The CVE CVE-2024-45254 concerns Vaemendis products (e.g., Vaemendis Ubooquity) with a Cross-site Scripting (CWE-79) flaw caused by improper input neutralization during web page generation. The NVD entry records CVSS v3.1 base score 7.5 (HIGH) with NETWORK attack vector, LOW attack complexity, no ...

CVE-2024-45254 VaeMendis - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

VaeMendis - CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

VaeMendis Ubooquity 信息泄露漏洞

VaeMendis Ubooquity is a free, lightweight and easy-to-use home server from VaeMendis. An information disclosure vulnerability exists in VaeMendis Ubooquity version 2.1.2 that originates from exposing sensitive information to unauthorized actors...

VaeMendis Ubooquity 跨站脚本漏洞

VaeMendis Ubooquity is a free, lightweight and easy-to-use home server from VaeMendis. VaeMendis Ubooquity suffers from a cross-site scripting vulnerability that stems from an improper neutralization of input during web page generation, resulting in a cross-site scripting vulnerability...

PT-2024-32889 · Vaemendis · Vaemendis

Name of the Vulnerable Software and Affected Versions: VaeMendis affected versions not specified Description: The issue is related to Cross-Site Request Forgery CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application. Recommendations: At the...

VaeMendis Ubooquity 跨站请求伪造漏洞

VaeMendis Ubooquity is a free, lightweight and easy-to-use home server from VaeMendis. A cross-site request forgery vulnerability exists in VaeMendis Ubooquity version 2.1.2, which stems from the inclusion of a cross-site request forgery issue...