최근 6개월의 모든 CVE를 매일 업데이트합니다.

5개 중 5개 표시

• 중간CVE-2024-23567CVSS 점수 4.32026. 7. 17.

  HCL Aftermarket EPC is affected by Sensitive Information in GET method & in URL which allows application to pass sensitive data via URL parameters during normal usage. Data passed in this manner can be exposed because it may end up stored in unintended locatio

  CWE-804
• 중간CVE-2024-23566CVSS 점수 6.52026. 7. 17.

  HCL Aftermarket EPC is vulnerable to brute force attacks since application doesn’t have captcha implemented. It can lead to various security issues like brute force , automated attacks & account enumeration

  CWE-804
• 중간CVE-2026-13082CVSS 점수 5.32026. 7. 17.

  GD::SecurityImage versions through 1.75 for Perl use rand to generate secrets. The random method creates the challenge text used for the CAPTCHA by sampling characters from an array using Perl's built-in rand function, and generates a (by default) six-characte

  CWE-338CWE-804
• 중간CVE-2026-49953CVSS 점수 6.52026. 6. 15.

  Discuz! X5.0 releases 20260320 through 20260610 contains a CAPTCHA bypass vulnerability that allows unauthenticated remote attackers to defeat challenge controls by exploiting limited complexity and predictable character sets in generated CAPTCHA images. Attac

  CWE-804
• 중간CVE-2026-40935CVSS 점수 5.32026. 4. 21.

  WWBN AVideo is an open source video platform. In versions 29.0 and prior, `objects/getCaptcha.php` accepts the CAPTCHA length (`ql`) directly from the query string with no clamping or sanitization, letting any unauthenticated client force the server to generat

  CWE-804wwbn avideo