Filtered by CWE-914
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-24914 1 Checkpoint 7 Clusterxl, Multi-domain Management, Quantum Appliances and 4 more 2024-11-08 8 High
Authenticated Gaia users can inject code or commands by global variables through special HTTP requests. A Security fix that mitigates this vulnerability is available.
CVE-2023-33175 1 Toui Project 1 Toui 2024-08-02 9.1 Critical
ToUI is a Python package for creating user interfaces (websites and desktop apps) from HTML. ToUI is using Flask-Caching (SimpleCache) to store user variables. Websites that use `Website.user_vars` property. It affects versions 2.0.1 to 2.4.0. This issue has been patched in version 2.4.1.