Skip to content
Noroxi

common-services records

5 published records for vendor common-services.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 23
  2. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

5 records
  • CVE-2023-40921
    39Monitor

    SQL Injection vulnerability in functions/point_list.php in Common Services soliberte before v4.3.03 allows attackers to obtain sensitive inf

    CriticalCVSS 9.8No exploitEPSS 1%

    common-services · soliberteDec 13, 2023

  • CVE-2023-45382
    30Monitor

    In the module "SoNice Retour" (sonice_retour) up to version 2.1.0 from Common-Services for PrestaShop, a guest can download personal informa

    HighCVSS 7.5No exploitEPSS 1%

    common-services · sonice retourNov 16, 2023

  • CVE-2023-45383
    30Monitor

    In the module "SoNice etiquetage" (sonice_etiquetage) up to version 2.5.9 from Common-Services for PrestaShop, a guest can download personal

    HighCVSS 7.5No exploitEPSS 1%

    common-services · sonice etiquetageOct 18, 2023

  • CVE-2024-25844
    30Monitor

    An issue was discovered in Common-Services "So Flexibilite" (soflexibilite) module for PrestaShop before version 4.1.26, allows remote attac

    HighCVSS 7.5No exploitEPSS 1%

    common-services · so flexibiliteMar 3, 2024

  • CVE-2024-25841
    23Monitor

    In the module "So Flexibilite" (soflexibilite) from Common-Services for PrestaShop < 4.1.26, a guest (authenticated customer) can perform Cr

    MediumCVSS 5.9No exploitEPSS 0%

    common-services · so flexibiliteFeb 27, 2024