CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 09/07/2024 |
| CVE-2023-3288 | 높음8.8 | A BOLA vulnerability in POST /providers allows a low privileged user to create a privileged user (provider) in the system. This results in privilege escalation. | 09/07/2024 |
| CVE-2023-3287 | 높음8.8 | A BOLA vulnerability in POST /admins allows a low privileged user to create a high privileged user (admin) in the system. This results in privilege escalation. | 09/07/2024 |
| CVE-2023-3286 | 보통6.5 | A BOLA vulnerability in POST /secretaries allows a low privileged user to create a low privileged user (secretary) in the system. This results in unauthorized data manipulation. | 09/07/2024 |
| CVE-2023-38055 | 높음8.1 | A BOLA vulnerability in GET, PUT, DELETE /services/{serviceId} allows a low privileged user to fetch, modify or delete the services of any user (including admin). This results in unauthorized access and unauthorized data manipulation. | 09/07/2024 |
| CVE-2023-38054 | 높음8.1 | A BOLA vulnerability in GET, PUT, DELETE /customers/{customerId} allows a low privileged user to fetch, modify or delete a low privileged user (customer). This results in unauthorized access and unauthorized data manipulation. | 09/07/2024 |
| CVE-2023-38053 | 높음8.1 | A BOLA vulnerability in GET, PUT, DELETE /settings/{settingName} allows a low privileged user to fetch, modify or delete the settings of any user (including admin). This results in unauthorized access and unauthorized data manipulation. | 09/07/2024 |
| CVE-2023-38052 | 높음8.1 | A BOLA vulnerability in GET, PUT, DELETE /admins/{adminId} allows a low privileged user to fetch, modify or delete a high privileged user (admin). This results in unauthorized access and unauthorized data manipulation. | 09/07/2024 |
| CVE-2023-38051 | 높음8.1 | A BOLA vulnerability in GET, PUT, DELETE /secretaries/{secretaryId} allows a low privileged user to fetch, modify or delete a low privileged user (secretary). This results in unauthorized access and unauthorized data manipulation. | 09/07/2024 |
| CVE-2023-38050 | 높음8.1 | A BOLA vulnerability in GET, PUT, DELETE /webhooks/{webhookId} allows a low privileged user to fetch, modify or delete a webhook of any user (including admin). This results in unauthorized access and unauthorized data manipulation. | 09/07/2024 |
| CVE-2023-38049 | 높음8.1 | A BOLA vulnerability in GET, PUT, DELETE /appointments/{appointmentId} allows a low privileged user to fetch, modify or delete an appointment of any user (including admin). This results in unauthorized access and unauthorized data manipulation. | 09/07/2024 |
| CVE-2023-38048 | 높음8.1 | A BOLA vulnerability in GET, PUT, DELETE /providers/{providerId} allows a low privileged user to fetch, modify or delete a privileged user (provider). This results in unauthorized access and unauthorized data manipulation. | 09/07/2024 |
| CVE-2023-38047 | 높음8.1 | A BOLA vulnerability in GET, PUT, DELETE /categories/{categoryId} allows a low privileged user to fetch, modify or delete the category of any user (including admin). This results in unauthorized access and unauthorized data manipulation. | 09/07/2024 |
| CVE-2023-3700 | 보통4.3 | Authorization Bypass Through User-Controlled Key in GitHub repository alextselegidis/easyappointments prior to 1.5.0.
| 17/07/2023 |
| CVE-2023-2105 | 높음8.8 | Session Fixation in GitHub repository alextselegidis/easyappointments prior to 1.5.0. | 15/04/2023 |
| CVE-2023-2104 | 보통5.4 | Improper Access Control in GitHub repository alextselegidis/easyappointments prior to 1.5.0. | 15/04/2023 |
| CVE-2023-2103 | 보통5.4 | Cross-site Scripting (XSS) - Stored in GitHub repository alextselegidis/easyappointments prior to 1.5.0. | 15/04/2023 |