Archive
8 April 2024
Vulnerabilities first published on this day (UTC), newest first.
5 results · Clear filters · Feed
-
Medium 5.3
DataEase has database configuration information exposure vulnerability
DataEase, an open source data visualization and analysis tool, has a database configuration information exposure vulnerability prior to version 2.5.0. Visiting the `/de2api/engine/getEngine;.js` path via a browser reveals that the platform's database configur…
-
Medium 6.0CVE-2024-27631 Public exploit
Cross Site Request Forgery vulnerability in GNU Savane v.3.12 and before allows a remote attacker to escalate privilege…
-
High 8.8CVE-2024-27632 Public exploit
An issue in GNU Savane v.3.12 and before allows a remote attacker to escalate privileges via the form_id in the form_he…
-
High 7.5CVE-2024-27630 Public exploit
Insecure Direct Object Reference (IDOR) in GNU Savane v.3.12 and before allows a remote attacker to delete arbitrary fi…
-
High 7.8CVE-2024-26574 Public exploit
Insecure Permissions vulnerability in Wondershare Filmora v.13.0.51 allows a local attacker to execute arbitrary code v…