CWE-472
External Control of Assumed-Immutable Web Parameter
The web application does not sufficiently verify inputs that are assumed to be immutable but are actually externally controllable, such as hidden form fields.
75 vulnerabilities with CWE-472
CVE-2024-50703
MEDIUM
TeamPass <3.1.3.1 - Privilege Escalation
CVSS 5.4
CVE-2024-12123
MEDIUM
Issuetrak 17.1 - Auth Bypass
CVE-2024-7025
HIGH
Google Chrome < 129.0.6668.89 - Integer Overflow
CVSS 8.8
CVE-2024-9123
HIGH
Google Chrome < 129.0.6668.70 - Integer Overflow
CVSS 8.8
CVE-2024-6010
MEDIUM
Cost Calculator Builder PRO <3.2.1 - Info Disclosure
CVSS 5.3
CVE-2024-3649
MEDIUM
The Contact Form by WPForms - WordPress <1.8.7.2 - Info Disclosure
CVSS 5.3
CVE-2024-25153
CRITICAL
FileCatalyst Workflow Web Portal - Path Traversal
CVSS 9.8
CVE-2024-22049
MEDIUM
httparty <0.21.0 - Info Disclosure
CVSS 5.3
CVE-2023-38520
MEDIUM
PINPOINT.WORLD Pinpoint Booking System <2.9.9.3.4 - XSS
CVSS 6.5
CVE-2023-24373
LOW
WpDevArt Booking calendar <3.2.3 - XSS
CVSS 3.7
CVE-2023-28512
MEDIUM
IBM Watson CP4D Data Stores <4.6.3 - Info Disclosure
CVSS 5.9
CVE-2022-30597
MEDIUM
Moodle - Info Disclosure
CVSS 5.3
CVE-2021-27770
MEDIUM
FaviconService - Info Disclosure
CVSS 6.8
CVE-2021-27769
MEDIUM
Information Disclosure - Info Disclosure
CVSS 5.3
CVE-2021-1295
CRITICAL
Cisco Small Business VPN Routers - RCE
CVSS 9.8
CVE-2021-1294
CRITICAL
Cisco Small Business RV160-260 - RCE
CVSS 9.8
CVE-2021-1293
CRITICAL
Cisco Small Business RV160-260 - RCE
CVSS 9.8
CVE-2021-1292
CRITICAL
Cisco Small Business RV160-260 - RCE
CVSS 9.8
CVE-2021-1291
CRITICAL
Cisco Small Business RV160-260 - RCE
CVSS 9.8
CVE-2021-1290
CRITICAL
Cisco Small Business RV160-260 - RCE
CVSS 9.8
CVE-2021-1289
CRITICAL
Cisco Small Business RV160-260 - RCE
CVSS 9.8
CVE-2020-1765
LOW
OTRS <5.0.39, <6.0.24, <7.0.13 - Info Disclosure
CVSS 3.5
CVE-2019-13927
MEDIUM
Desigo PX - Path Traversal
CVSS 5.3
CVE-2017-5261
HIGH
Cambium Networks cnPilot <4.3.2-R4 - Path Traversal
CVSS 8.8
CVE-2017-5260
HIGH
Cambium Networks cnPilot <4.3.2-R4 - Info Disclosure
CVSS 8.8
Details
Vulnerabilities
75