TI-2024-27759 CVE-2024-41699 · GHSA-2q7v-x8xx-mpjx
Priority – CWE-552: Files or Directories Accessible to External Parties
Priority LOW 33
Priority – CWE-552: Files or Directories Accessible to External Parties
Vulnerabilities
7 records
TI-2024-27758 CVE-2024-41698 · GHSA-c3gm-32gm-crw9
Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Priority LOW 33
Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
TI-2024-27757 CVE-2024-41697 · GHSA-f8w7-phwr-8g55
Priority – CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Priority LOW 27
Priority - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
TI-2023-09302 CVE-2023-23460 · GHSA-499w-c4pr-hwwh
Priority Web – Authentication bypass
Priority MEDIUM 50
Priority Web version 19.1.0.68, parameter manipulation on an unspecified end-point may allow authentication bypass.
TI-2023-09301 CVE-2023-23459 · GHSA-wv7f-jp7g-37rc
Priority Windows – Command Execution via SQL Injection
Priority MEDIUM 50
Priority Windows may allow Command Execution via SQL Injection using an unspecified method.
TI-2022-07329 CVE-2022-23173 · GHSA-g4qr-pvvg-9h2w
Priority - Priority web Insecure direct object references (IDOR)
Priority LOW 29
this vulnerability affect user that even not allowed to access via the web interface.
TI-2022-07328 CVE-2022-23172 · GHSA-w7v3-573j-vhr9
Priority - Priority User Enumeration
Priority LOW 25
An attacker can access to "Forgot my password" button, as soon as he puts users is valid in the system, the system would issue a message that a password reset email had been sent to user.