Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2024-0947

Cookies Manipulation in Talya Informatics' Elektraweb

Reliance on Cookies without Validation and Integrity Checking vulnerability in Talya Informatics Elektraweb allows Session Credential Falsification through Manipulation, Accessing/Intercepting/Modifying HTTP Cookies, Manipulating Opaque Client-based Data Tokens. This issue affects Elektraweb: before v17.0.68.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Talya Informatics
Products
Elektraweb
CVE-2024-0949

Improper Access Control in Talya Informatics' Elektraweb

Missing Authentication, Files or Directories Accessible to External Parties, Use of Hard-coded Credentials vulnerability in Talya Informatics Elektraweb allows Authentication Bypass. This issue affects Elektraweb: before v17.0.68.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Talya Informatics
Products
Elektraweb
CVE-2024-1107

IDOR in Talya Informatics' Travel APPS

Authorization Bypass Through User-Controlled Key vulnerability in Talya Informatics Travel APPS allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Travel APPS: before v17.0.68.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Talya Informatics Talyabilisim
Products
Travel Apps Travel Apps