CWE-1125 — known CVE vulnerabilities

CVEs classified under CWE-1125, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2023-0435 — CVSS 9.8 (critical): Excessive Attack Surface in GitHub repository pyload/pyload prior to 0.5.0b3.dev41.
• CVE-2022-1715 — CVSS 9.8 (critical): Account Takeover in GitHub repository neorazorx/facturascripts prior to 2022.07.
• CVE-2024-5386 — CVSS 8.8 (high): In lunary-ai/lunary version 1.2.2, an account hijacking vulnerability exists due to a password reset token leak. A user with a 'viewer'…
• CVE-2023-49722 — CVSS 8.3 (high): Network port 8899 open in WiFi firmware of BCC101/BCC102/BCC50 products, that allows an attacker to connect to the device via same WiFi…
• CVE-2022-2037 — CVSS 8.0 (high): Excessive Attack Surface in GitHub repository tooljet/tooljet prior to v1.16.0.