ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Vulnerabilities

35 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos

ShowKEV onlyPublic PoCCVSS ≥ 9CVSS ≥ 7EPSS ≥ 10%EPSS ≥ 50%Window24h7d30d90dAll
StackAllWordPressE-commerceDrupalJoomlanpmpipMavenGoPackagistRubyGemsNuGet
SortpublishedepsscvssKEV dateupdatedvendor: answer ✕
CVEVulnerabilityCVSSEPSSFlagsAffectedExposurePublished
CVE-2023-4815
Missing Authentication for Critical Function in GitHub repository answerdev/answer prior to v1.1.3.

Missing Authentication for Critical Function in GitHub repository answerdev/answer prior to v1.1.3.

NVD description · AI analysis pending		8.8<1% PoC
  • answer answer
—
CVE-2023-4125
+3 in the same advisory: …4126 …4124 …4127
Weak Password Requirements in GitHub repository answerdev/answer prior to v1.1.0.

Weak Password Requirements in GitHub repository answerdev/answer prior to v1.1.0.

NVD description · AI analysis pending		8.8
group max
<1% PoC
  • answer answer
—
CVE-2023-2590
Missing Authorization in GitHub repository answerdev/answer prior to 1.0.9.

Missing Authorization in GitHub repository answerdev/answer prior to 1.0.9.

NVD description · AI analysis pending		3.5<1% PoC
  • answer answer
—
CVE-2023-1976
+2 in the same advisory: …1974 …1975
Password Aging with Long Expiration in GitHub repository answerdev/answer prior to 1.0.6.

Password Aging with Long Expiration in GitHub repository answerdev/answer prior to 1.0.6.

NVD description · AI analysis pending		8.8
group max
<1% PoC
  • answer answer
—
CVE-2023-1537
+8 in the same advisory: …1543 …1542 …1535 …1536 …1540 …1538 +2
Authentication Bypass by Capture-replay in GitHub repository answerdev/answer prior to 1.0.6.

Authentication Bypass by Capture-replay in GitHub repository answerdev/answer prior to 1.0.6.

NVD description · AI analysis pending		9.8
group max
<1% PoC
  • answer answer
—
CVE-2023-1242
+8 in the same advisory: …1241 …1240 …1238 …1245 …1244 …1237 +2
Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

NVD description · AI analysis pending		5.4
group max
<1% PoC
  • answer answer
—
CVE-2023-0934
Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.5.

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.5.

NVD description · AI analysis pending		5.4<1% PoC
  • answer answer
—
CVE-2023-0744
+5 in the same advisory: …0742 …0741 …0743 …0740 …0739
Improper Access Control in GitHub repository answerdev/answer prior to 1.0.4.

Improper Access Control in GitHub repository answerdev/answer prior to 1.0.4.

NVD description · AI analysis pending		9.8
group max
6% PoC
  • answer answer
—
CVE-2017-12775
qa-include/qa-install.php in Question2Answer before 1.7.5 allows remote attackers to create multiple user accounts.

qa-include/qa-install.php in Question2Answer before 1.7.5 allows remote attackers to create multiple user accounts.

NVD description · AI analysis pending		7.52%
  • question2answer question2answer
—