Lucene search
+L

138 matches found

RedhatCVE
RedhatCVE
added 2025/12/17 10:02 a.m.11 views

CVE-2025-66162

Missing Authorization vulnerability in merkulove Spoter for Elementor spoter-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spoter for Elementor: from n/a through = 1.04...

5.4CVSS7AI score0.00199EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/16 9:31 a.m.14 views

EUVD-2025-203573

Missing Authorization vulnerability in merkulove Spoter for Elementor spoter-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spoter for Elementor: from n/a through = 1.04...

5.4CVSS6.5AI score0.00199EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/12/16 8:12 a.m.4 views

CVE-2025-66162 WordPress Spoter for Elementor plugin <= 1.04 - Broken Access Control vulnerability

Missing Authorization vulnerability in merkulove Spoter for Elementor spoter-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spoter for Elementor: from n/a through = 1.04...

5.4CVSS6.6AI score0.00199EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/16 8:12 a.m.44 views

CVE-2025-66162 WordPress Spoter for Elementor plugin <= 1.04 - Broken Access Control vulnerability

Missing Authorization vulnerability in merkulove Spoter for Elementor spoter-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spoter for Elementor: from n/a through = 1.04...

5.4CVSS0.00199EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/16 8:12 a.m.20 views

CVE-2025-66162

CVE-2025-66162 describes a Missing Authorization vulnerability in the WordPress plugin Spoter for Elementor (Spoter-elementor). Affected: Spoter for Elementor versions up to 1.04. Root cause: incorrectly configured access control security levels that can be exploited to bypass authorization. Expl...

5.4CVSS6.6AI score0.00199EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/11 5:02 p.m.68 views

CVE-2025-14528

The CVE-2025-14528 issue affects D-Link DIR-803 routers (firmware up to 1.04, A1 era). A vulnerability in the Configuration Handler’s /getcfg.php allows manipulation of the AUTHORIZED_GROUP parameter via newline injection, resulting in an authentication bypass and exposure of administrator creden...

7.5CVSS5.1AI score0.03991EPSS
SaveIn wildExploits1References6Affected Software1
Patchstack
Patchstack
added 2025/12/11 4:19 a.m.9 views

WordPress Spoter for Elementor plugin <= 1.04 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin Spoter for Elementor versions = 1.04...

5.4CVSS7AI score0.00199EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2025/12/11 12:00 a.m.16 views

D-Link DIR-803 安全漏洞

The D-Link DIR-803 is a wireless router from China's AUO D-Link. The D-Link DIR-803 suffers from an information disclosure vulnerability that originates from the incorrect operation of the parameter AUTHORIZEDGROUP in the file /getcfg.php of the component Configuration Handler, which can be...

7.5CVSS5AI score0.03991EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2005-0408

Malware in sbrugna...

4.3CVSS6.4AI score0.01257EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.16 views

EUVD-2020-26715

Malware in sbrugna...

10CVSS8.1AI score0.02274EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2010-4929

Malware in sbrugna...

9CVSS6.4AI score0.02816EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-1999-1017

Malware in sbrugna...

7.2CVSS6.4AI score0.00345EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2020-26714

Malware in sbrugna...

6.1CVSS6.3AI score0.00773EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2015-2161

Malware in sbrugna...

6.8CVSS6.4AI score0.00931EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/08/22 12:00 a.m.5 views

CVE-2022-31491

Voltronic Power ViewPower through 1.04-24215, ViewPower Pro through 2.0-22165, and PowerShield Netguard before 1.04-23292 allows a remote attacker to run arbitrary code via an unspecified web interface related to detection of a managed UPS shutting down. An unauthenticated attacker can use this t...

7.9AI score0.00798EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2025/08/22 12:00 a.m.20 views

CVE-2022-31491

Voltronic Power ViewPower through 1.04-24215, ViewPower Pro through 2.0-22165, and PowerShield Netguard before 1.04-23292 allows a remote attacker to run arbitrary code via an unspecified web interface related to detection of a managed UPS shutting down. An unauthenticated attacker can use this t...

0.00798EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2025/05/22 12:28 p.m.14 views

CVE-2010-4964

recordertest.cgi on the D-Link DCS-2121 camera with firmware 1.04 allows remote attackers to execute arbitrary commands via shell metacharacters in the Password field, related to a "semicolon injection" vulnerability...

9CVSS8.1AI score0.03773EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 8:49 a.m.20 views

CVE-2015-2048

Cross-site request forgery CSRF vulnerability in D-Link DCS-931L with firmware 1.04 and earlier allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

6.8CVSS7.7AI score0.00931EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:11 a.m.14 views

CVE-2011-3793

Pixie 1.04 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by admin/modules/static.php and certain other files...

5CVSS6.5AI score0.01914EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/03/03 12:00 a.m.10 views

WordPress plugin DZS Ajaxer Lite 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS5.8AI score0.0034EPSS
SaveExploits0References3
Rows per page
Query Builder