CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 02/04/2024 |
| CVE-2024-27602 | KRITISCH9.1 | Alldata V0.4.6 is vulnerable to Incorrect Access Control. A total of many modules interface documents have been leaked.For example, the /api/system/v2/api-docs module. | 02/04/2024 |
| CVE-2024-29435 | MITTEL4.1 | An issue discovered in Alldata v0.4.6 allows attacker to run arbitrary commands via the processId parameter. | 01/04/2024 |
| CVE-2024-29433 | KRITISCH9.8 | A deserialization vulnerability in the FASTJSON component of Alldata v0.4.6 allows attackers to execute arbitrary commands via supplying crafted data. | 01/04/2024 |