Vulnerabilities (CVE)

Filtered by CWE-648
Total 25 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-6150 1 Eskom 1 E-belediye 2024-11-21 N/A 7.5 HIGH
Incorrect Use of Privileged APIs vulnerability in ESKOM Computer e-municipality module allows Collect Data as Provided by Users.This issue affects e-municipality module: before v.105.
CVE-2023-4972 1 Yepas 1 Digital Yepas 2024-11-21 N/A 9.8 CRITICAL
Incorrect Use of Privileged APIs vulnerability in Yepas Digital Yepas allows Collect Data as Provided by Users.This issue affects Digital Yepas: before 1.0.1.
CVE-2022-4805 1 Usememos 1 Memos 2024-11-21 N/A 4.3 MEDIUM
Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.1.
CVE-2022-4796 1 Usememos 1 Memos 2024-11-21 N/A 8.1 HIGH
Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.1.
CVE-2022-24821 1 Xwiki 1 Xwiki 2024-11-21 5.5 MEDIUM 6.8 MEDIUM
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Simple users can create global SSX/JSX without specific rights: in theory only users with Programming Rights should be allowed to create SSX or JSX that are executed everywhere on a wiki. But a bug allow anyone with edit rights to actually create those. This issue has been patched in XWiki 13.10-rc-1, 12.10.11 and 13.4.6. There's no easy workaround for this issue, administrators should upgrade their wiki.