Advisories · Weakness
CWE-1125.
Every Advisory and CVE whose sources give the weakness CWE-1125, newest first.
- CVSS 4.0 Medium
Excessive Attack Surface in pyload-ng
- CWE-1125
<0.5.0b3.dev41 · fixed in 0.5.0b3.dev41
GHSA-6jmx-pv77-wm5w · CVE-2023-0435 - CVSS 9.6 CriticalCritical · CVSS 9+
Account Hijacking via Password Reset Token Leak in lunary-ai/lunary
- lunary-ai/lunary
- CWE-1125
- CVSS 8.3 High
Bosch BCC101: Network port 8899 open in WiFi firmware of BCC101/BCC102/BCC50 products…
- Bosch BCC101
- Bosch BCC102
- CWE-1125
- CVSS 9.8 CriticalCritical · CVSS 9+
Excessive Attack Surface in tooljet/tooljet
- tooljet/tooljet
- CWE-1125
- CVSS 9.8 CriticalCritical · CVSS 9+
Account takeover in facturascripts
- Hard-coded credentials
- CWE-1125
<2022.08 · fixed in 2022.08
GHSA-vjq3-x3f2-fvxq · CVE-2022-1715