Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2025/10/07 5:35 p.m.2 views

CVE-2025-59943

phpMyFAQ is an open source FAQ web application. Versions 4.0-nightly-2025-10-03 and below do not enforce uniqueness of email addresses during user registration. This allows multiple distinct accounts to be created with the same email. Because email is often used as an identifier for password...

8.1CVSS7.3AI score0.00061EPSS
Exploits1References1
NVD
NVD
added 2025/10/03 9:15 p.m.3 views

CVE-2025-59943

phpMyFAQ is an open source FAQ web application. Versions 4.0-nightly-2025-10-03 and below do not enforce uniqueness of email addresses during user registration. This allows multiple distinct accounts to be created with the same email. Because email is often used as an identifier for password...

9.8CVSS0.00061EPSS
Exploits1References2
CVE
CVE
added 2025/10/03 8:6 p.m.14 views

CVE-2025-59943

CVE-2025-59943 affects phpMyFAQ prior to 4.0.13. Versions 4.0-nightly-2025-10-03 and earlier fail to enforce unique email addresses during user registration, allowing multiple distinct accounts to share the same email. This can cause account ambiguity and, in certain configurations, may lead to p...

9.8CVSS6.8AI score0.00061EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2024/03/12 9:15 a.m.1 views

CVE-2024-1328

The Newsletter2Go plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘style’ parameter in all versions up to, and including, 4.0.13 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber access and...

5.4CVSS5.9AI score0.00141EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2020/11/23 12:0 a.m.2 views

PT-2020-10893 · Mongodb +1 · Mongodb Server +2

Name of the Vulnerable Software and Affected Versions: MongoDB Server versions prior to 4.2.1 MongoDB Server versions prior to 4.0.13 MongoDB Server versions prior to 3.6.15 Description: A user authorized to perform database queries may trigger denial of service by issuing specially crafted...

7.5CVSS5.8AI score0.00484EPSS
Exploits2References29
Hacker One
Hacker One
added 2016/01/06 8:34 a.m.39 views

Ruby on Rails: Validation bypass for Active Record and Active Model

Possible Input Validation Circumvention in Active Model There is a possible input validation circumvention vulnerability in Active Model. This vulnerability has been assigned the CVE identifier CVE-2016-0753. Versions Affected: 4.1.0 and newer Not affected: 4.0.13 and older Fixed Versions:...

5CVSS1.1AI score0.02328EPSS
Exploits0
OpenVAS
OpenVAS
added 2014/05/05 12:0 a.m.21 views

ownCloud Multiple Code Execution & Local File Disclosure Vulnerabilities (May 2014)

ownCloud is prone to multiple arbitrary code execution and local file disclosure vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

6.5CVSS7.1AI score0.0053EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2013/12/12 12:0 a.m.35 views

Samba 3.x < 3.6.22 / 4.0.x < 4.0.13 / 4.1.x < 4.1.3 Multiple Vulnerabilities

According to its banner, the version of Samba running on the remote host is 3.3.x equal or later than 3.3.10, 3.4.x, 3.5.x, 3.6.x prior to 3.6.22, 4.0.x prior to 4.0.13 or 4.1.x prior to 4.1.3. It is, therefore, potentially affected by multiple vulnerabilities : - A security bypass vulnerability...

8.3CVSS8.2AI score0.0295EPSS
Exploits1References6
Rows per page
Query Builder