Rami

3 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-44463 Oct 02, 20:15 PyPI MEDIUM PATCH This Month

An issue was discovered in pretix before 2023.7.1. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Pretix Rami

NVD GitHub

CVSS 3.1

5.3

EPSS

0.5%

CVE-2023-44464 Sep 29, 05:15 PyPI HIGH PATCH This Week

pretix before 2023.7.2 allows Pillow to parse EPS files. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Information Disclosure Pretix Rami

NVD GitHub

CVSS 3.1

7.8

EPSS

0.3%

CVE-2023-27891 Mar 06, 23:15 PyPI HIGH PATCH This Week

rami.io pretix before 4.17.1 allows OAuth application authorization from a logged-out session. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Pretix Rami

NVD

CVSS 3.1

7.5

EPSS

0.6%

CVE-2023-44463 PyPI

EPSS 1% CVSS 5.3

MEDIUM PATCH This Month

An issue was discovered in pretix before 2023.7.1. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Pretix Rami

NVD GitHub

CVE-2023-44464 PyPI

EPSS 0% CVSS 7.8

HIGH PATCH This Week

pretix before 2023.7.2 allows Pillow to parse EPS files. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Information Disclosure Pretix Rami

NVD GitHub

CVE-2023-27891 PyPI

EPSS 1% CVSS 7.5

HIGH PATCH This Week

Information Disclosure Pretix Rami

NVD