Lucene search
+L

944 matches found

RedhatCVE
RedhatCVE
added 2025/10/23 6:14 p.m.9 views

CVE-2025-22169

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to subscribe to an item/object without having the expected permission level...

5.4CVSS6.7AI score0.00164EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/10/23 3:14 p.m.8 views

CVE-2025-60224

Deserialization of Untrusted Data vulnerability in wpshuffle Subscribe to Download subscribe-to-download allows Object Injection.This issue affects Subscribe to Download: from n/a through = 2.0.9...

9.8CVSS6.9AI score0.00542EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/10/22 6:18 p.m.27 views

CVE-2025-11757

The CloudEdge Cloud does not sanitize the MQTT topic input, which could allow an attacker to leverage the MQTT wildcard to receive all the messages that should be delivered to other users by subscribing to the a MQTT topic. In these messages, the attacker can obtain the credentials and key...

8.7CVSS6.7AI score0.00303EPSS
SaveExploits0References1
OSV
OSV
added 2025/10/22 5:15 p.m.5 views

CVE-2025-22169

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to subscribe to an item/object without having the expected permission level...

5.4CVSS5.7AI score0.00164EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/22 4:30 p.m.4 views

CVE-2025-22169

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to subscribe to an item/object without having the expected permission level...

5.3CVSS6.3AI score0.00164EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/22 4:30 p.m.16 views

CVE-2025-22169

CVE-2025-22169 affects Atlassian Jira Align. Multiple connected sources describe an authorization flaw where a low-privilege user can access endpoints that disclose limited sensitive information, including subscribing to an item/object without the expected permissions. This once again confirms an...

5.4CVSS6.3AI score0.00164EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2025/10/22 3:15 p.m.18 views

CVE-2025-60224

Deserialization of Untrusted Data vulnerability in wpshuffle Subscribe to Download subscribe-to-download allows Object Injection.This issue affects Subscribe to Download: from n/a through = 2.0.9...

9.8CVSS0.00542EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/22 2:32 p.m.7 views

CVE-2025-60224 WordPress Subscribe to Download plugin <= 2.0.9 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in wpshuffle Subscribe to Download subscribe-to-download allows Object Injection.This issue affects Subscribe to Download: from n/a through = 2.0.9...

9.8CVSS6.6AI score0.00542EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/22 2:32 p.m.8 views

EUVD-2025-35405

Deserialization of Untrusted Data vulnerability in wpshuffle Subscribe to Download subscribe-to-download allows Object Injection.This issue affects Subscribe to Download: from n/a through = 2.0.9...

6.5CVSS6.4AI score0.00542EPSS
SaveExploits0References2
CVE
CVE
added 2025/10/22 2:32 p.m.15 views

CVE-2025-60224

CVE-2025-60224 affects the WordPress Subscribe to Download plugin (versions

9.8CVSS6.6AI score0.00542EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/10/22 2:32 p.m.12 views

CVE-2025-60224 WordPress Subscribe to Download plugin <= 2.0.9 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in wpshuffle Subscribe to Download subscribe-to-download allows Object Injection.This issue affects Subscribe to Download: from n/a through = 2.0.9...

9.8CVSS0.00542EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/10/22 12:0 a.m.8 views

WordPress plugin Subscribe to Download security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, with the ability to host personal blog sites on PHP and MySQL based servers.WordPress...

9.8CVSS5.8AI score0.00542EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2019-3446

Malware in sbrugna...

6.5CVSS7AI score0.02742EPSS
SaveExploits0References13
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2011-3972

Malware in sbrugna...

5.4CVSS6.4AI score0.01127EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2019-0481

Malware in sbrugna...

7.5CVSS7.4AI score0.01586EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2021-24804

Malware in sbrugna...

6.1CVSS6.3AI score0.00895EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2020-17728

Malware in sbrugna...

6.1CVSS6.2AI score0.00977EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2021-23420

Malware in sbrugna...

4.8CVSS5AI score0.00543EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2013-1035

Malware in sbrugna...

6.1CVSS4.7AI score0.00571EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2001-0086

Malware in sbrugna...

5CVSS6.4AI score0.01606EPSS
SaveExploits1References4
Rows per page
Query Builder