الباحثون
رجوع
Jakob Pachmann
باحث من
SBA Research
#15080
من 60,594
20.7
إجمالي CVSS
الثغرات
·
4
منخفضة
1
متوسطة
3
PT-2024-37069
2024-06-19
6.8
CVE-2024-5676
Paradox
Paradox Ip150 Internet Module
The issue is related to Cross-Site Request Forgery (CSRF) attacks, which can be executed due to the lack of countermeasures and the use of the HTTP method `GET` to introduce changes in the system.
PT-2024-36875
2024-06-06
3.7
CVE-2024-5657
Craft Cms
Two-Factor Authentication
The issue discloses the password hash of the currently authenticated user after submitting a valid TOTP.
PT-2024-36886
2024-06-06
4.8
CVE-2024-5658
Craft Cms
Two-Factor Authentication
The issue allows reuse of TOTP tokens multiple times within the validity period.
PT-2022-24373
2022-09-27
5.4
CVE-2022-38335
Vtiger
Vtiger Crm
A stored cross-site scripting (XSS) issue was found in the e-mail template modules. This allows for malicious scripts to be stored and executed when the module is accessed.