Lucene search

K

Qumagie Security Vulnerabilities

cve
cve

CVE-2023-39295

An OS command injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following version:QuMagie 2.1.3 and later

8.8CVSS

8.7AI Score

0.001EPSS

2023-11-10 04:15 PM
29
cve
cve

CVE-2023-41284

A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version:QuMagie 2.1.4 and later

8.8CVSS

8.7AI Score

0.001EPSS

2023-11-10 04:15 PM
26
cve
cve

CVE-2023-41285

A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version:QuMagie 2.1.4 and later

8.8CVSS

8.7AI Score

0.001EPSS

2023-11-10 04:15 PM
28
cve
cve

CVE-2023-47219

A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version:QuMagie 2.2.1 and later

8.8CVSS

8.7AI Score

0.001EPSS

2024-01-05 05:15 PM
27
cve
cve

CVE-2023-47559

A cross-site scripting (XSS) vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version:QuMagie 2.2.1 and later

5.5CVSS

5.8AI Score

0.0004EPSS

2024-01-05 05:15 PM
22
cve
cve

CVE-2023-47560

An OS command injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following version:QuMagie 2.2.1 and later

8.8CVSS

9.1AI Score

0.0005EPSS

2024-01-05 05:15 PM
19
cve
cve

CVE-2024-38642

An improper certificate validation vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow local network users to compromise the security of the system via unspecified vectors. We have already fixed the vulnerability in the following version:QuMagie 2.3.1 and ...

7.8CVSS

6.5AI Score

0.0004EPSS

2024-09-06 05:15 PM
21