Filtered by CWE-592
Total 22 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-42759 1 Ellevo 1 Ellevo 2024-09-10 6.3 Medium
An issue in Ellevo v.6.2.0.38160 allows a remote attacker to escalate privileges via the /api/usuario/cadastrodesuplente endpoint.
CVE-2024-38884 1 Horizoncloud 1 Caterease 2024-08-07 7.8 High
An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a local attacker to perform an Authentication Bypass attack due to improperly implemented security checks for standard authentication mechanisms