Vendors / Timgreen Records 8 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 1
Exploited now Timgreen records in CISA KEV No Timgreen vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
The user avatar upload function in python_book V1.0 has an arbitrary file upload vulnerability.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00989 · Published 2024-11-15 · No fix listed CWE-22
Priority HIGH 72
python_book V1.0 is vulnerable to Incorrect Access Control, which allows attackers to obtain sensitive information of users with different IDs by modifying the ID parameter.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.0055 · Published 2024-11-15 · No fix listed CWE-863
Open these records in search → All records by CVSS severity
2 1 5 0 0
