CVE search

404,385 vulnerabilities · 1,768 actively exploited (CISA KEV)

4 results

ID	Severity	Summary	Published
CVE-2019-25023	MEDIUM6.5	An issue was discovered in Scytl sVote 2.1. Because the IP address from an X-Forwarded-For header (which can be manipulated client-side) is used for the internal application logs, an attacker can inject wrong IP addresses into these logs.	27/02/2021
CVE-2019-25022	CRITICAL9.8	An issue was discovered in Scytl sVote 2.1. An attacker can inject code that gets executed by creating an election-event and injecting a payload over an event alias, because the application calls Runtime.getRuntime().exec() without validation.	27/02/2021
CVE-2019-25021	HIGH7.5	An issue was discovered in Scytl sVote 2.1. Due to the implementation of the database manager, an attacker can access the OrientDB by providing admin as the admin password. A different password cannot be set because of the implementation in code.