Vulnerability index

Browse CVEs

7 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

Python Book CRITICAL 9.8

CVE-2024-50649

The user avatar upload function in python_book V1.0 has an arbitrary file upload vulnerability.

No fix yet

Fix from $2,300 2024-11-15

Python Book HIGH 7.5

CVE-2024-50650

python_book V1.0 is vulnerable to Incorrect Access Control, which allows attackers to obtain sensitive information of users with different IDs by mod…

No fix yet

Fix from $1,950 2024-11-15

Dingfanzu Cms CRITICAL 9.3

CVE-2024-50966

dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/doAdminAction.php?act=addAdmin.

No fix yet

Fix from $2,300 2024-11-08

Dingfanzu Cms MEDIUM 6.3

CVE-2024-48291

dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/doAdminAction.php?act=editAdmin&id=17

No fix yet

Fix from $1,600 2024-10-28

Dingfanzu Cms MEDIUM 6.3

CVE-2024-48191

dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/doAdminAction.php?act=delAdmin&id=17

No fix yet

Fix from $1,600 2024-10-28

Dingfanzu Cms MEDIUM 6.1

CVE-2024-48758

dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the addPro parameter of the component doAdminAction.php which al…

No fix yet

Fix from $1,600 2024-10-16

Dingfanzu Cms MEDIUM 6.3

CVE-2024-46485

dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/doAdminAction.php?act=addCate

No fix yet

Fix from $1,600 2024-09-25