Lucene search
K

96 matches found

EUVD
EUVD
added 2026/01/02 6:30 p.m.1 views

EUVD-2026-0550

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

5.5AI score
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2001-0918

Malware in sbrugna...

7.5CVSS6.4AI score0.00334EPSS
Exploits2References2
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2017-0550

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A remote denial of service vulnerability in libavc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. Thi...

7.1CVSS6.3AI score0.00198EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 5:41 a.m.8 views

CVE-2023-0550

The Quick Restaurant Menu plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 2.0.2. This is due to the fact that during menu item deletion/modification, the plugin does not verify that the post ID provided to the AJAX action is indeed a menu...

8.1CVSS6.6AI score0.00366EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 6:11 p.m.4 views

CVE-2021-0550

In onLoadFailed of AnnotateActivity.java, there is a possible way to gain WRITEEXTERNALSTORAGE permissions without user consent due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

7.8CVSS7.2AI score0.00013EPSS
Exploits0References1
Circl
Circl
added 2025/02/06 3:13 a.m.7 views

CVE-2009-0550

creationtimestamp| type| source ---|---|--- 2025-02-06 03:13:39+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:08:35+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd...

9.3CVSS6.8AI score0.38591EPSS
Exploits5
RedhatCVE
RedhatCVE
added 2025/02/05 7:17 p.m.6 views

CVE-2022-0550

Improper Input Validation vulnerability in custom report logo upload in Nozomi Networks Guardian, and CMC allows an authenticated attacker with admin or report manager roles to execute unattended commands on the appliance using web server user privileges. This issue affects: Nozomi Networks...

8.6CVSS7.1AI score0.00477EPSS
Exploits0References1
CVE
CVE
added 2024/02/28 4:52 a.m.127 views

CVE-2024-0550

CVE-2024-0550 describes a traversal-like flaw where a user with privileged rights (manager/admin) can set their profile picture via the frontend API using a relative filepath, then invoke the PFP GET API to read/download arbitrary files. This is evidenced by multiple sources (e.g., Red Hat, NVD, ...

9.6CVSS9.3AI score0.00849EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2024/02/28 4:52 a.m.11 views

CVE-2024-0550 Privileged User using traversal to read system files

A user who is privileged already manager or admin can set their profile picture via the frontend API using a relative filepath to then user the PFP GET API to download any valid files. The attacker would have to have been granted privileged permissions to the system before executing this attack...

9.6CVSS9.4AI score0.00849EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2024/02/28 4:52 a.m.10 views

CVE-2024-0550 Privileged User using traversal to read system files

A user who is privileged already manager or admin can set their profile picture via the frontend API using a relative filepath to then user the PFP GET API to download any valid files. The attacker would have to have been granted privileged permissions to the system before executing this attack...

9.6CVSS9.2AI score0.00849EPSS
Exploits1References2
Circl
Circl
added 2023/12/11 4:34 a.m.1 views

CVE-2023-0550

creationtimestamp| type| source ---|---|--- 2023-12-11 04:34:27+00:00| seen| https://t.me/arpsyndicate/1699...

8.1CVSS4.8AI score0.00366EPSS
Exploits1References1
0day.today
0day.today
added 2023/02/03 12:0 a.m.280 views

WordPress Quick Restaurant 2.0.2 XSS / CSRF / IDOR / Missing Authorization Vulnerabilities

On January 16, 2023, the Wordfence Threat Intelligence team responsibly disclosed several vulnerabilities in Quick Restaurant Menu, a WordPress plugin that allows users to set up restaurant menus on their sites. This plugin is vulnerable to missing authorization, insecure direct object reference,...

7.6CVSS5.5AI score0.00366EPSS
Exploits1
Wordfence Blog
Wordfence Blog
added 2023/02/01 4:7 p.m.38 views

Multiple Vulnerabilities Patched in Quick Restaurant Menu Plugin

On January 16, 2023, the Wordfence Threat Intelligence team responsibly disclosed several vulnerabilities in Quick Restaurant Menu, a WordPress plugin that allows users to set up restaurant menus on their sites. This plugin is vulnerable to Missing Authorization, Insecure Direct Object Reference,...

0.3AI score0.00366EPSS
Exploits1
Patchstack
Patchstack
added 2023/01/30 12:0 a.m.15 views

WordPress Quick Restaurant Menu Plugin <= 2.0.2 is vulnerable to Insecure Direct Object References (IDOR)

Software Quick Restaurant Menu Type Plugin Vulnerable versions = 2.0.2 Fixed in 2.1.0 OWASP Top 10 A5: Broken Access Control Classification Insecure Direct Object References IDOR CVE CVE-2023-0550 Patch priority Low CVSS severity Low 8.1 Developer Claim ownership PSID 53344b864cc7 Credits Marco...

7.6CVSS6.5AI score0.00366EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2023/01/27 8:17 p.m.73 views

CVE-2023-0550

The CVE-2023-0550 entry concerns the Quick Restaurant Menu WordPress plugin (versions

8.1CVSS4.7AI score0.00366EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2023/01/27 8:17 p.m.11 views

CVE-2023-0550 Quick Restaurant Menu <= 2.0.2 - Insecure Direct Object Reference

The Quick Restaurant Menu plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 2.0.2. This is due to the fact that during menu item deletion/modification, the plugin does not verify that the post ID provided to the AJAX action is indeed a menu...

8.1CVSS6.1AI score0.00366EPSS
Exploits1References4
Photon
Photon
added 2022/12/21 12:0 a.m.40 views

Important Photon OS Security Update - PHSA-2022-0550

Updates of 'grub2' packages of Photon OS have been released...

8.6CVSS1.7AI score0.0012EPSS
Exploits0
OpenVAS
OpenVAS
added 2022/08/02 12:0 a.m.17 views

Intel CPU Information Disclosure Vulnerability (INTEL-SA-00330)

The Intel CPU on the remote host might be prone to an information disclosure vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later...

5.6CVSS5.4AI score0.0006EPSS
Exploits0References6
NVD
NVD
added 2022/03/24 3:15 p.m.14 views

CVE-2022-0550

Improper Input Validation vulnerability in custom report logo upload in Nozomi Networks Guardian, and CMC allows an authenticated attacker with admin or report manager roles to execute unattended commands on the appliance using web server user privileges. This issue affects: Nozomi Networks...

8.6CVSS0.00477EPSS
Exploits0References1
Cvelist
Cvelist
added 2022/03/24 2:15 p.m.14 views

CVE-2022-0550 Authenticated RCE on logo report upload in Guardian/CMC before 22.0.0

Improper Input Validation vulnerability in custom report logo upload in Nozomi Networks Guardian, and CMC allows an authenticated attacker with admin or report manager roles to execute unattended commands on the appliance using web server user privileges. This issue affects: Nozomi Networks...

8.6CVSS7.3AI score0.00477EPSS
Exploits0References1
Rows per page
Query Builder