Lucene search
K

18 matches found

RedhatCVE
RedhatCVE
added 2026/03/26 5:3 p.m.2 views

CVE-2026-25030

Deserialization of Untrusted Data vulnerability in parkofideas Goldish goldish allows Object Injection.This issue affects Goldish: from n/a through 3.47...

9.8CVSS5.8AI score0.00061EPSS
Exploits0References1
CVE
CVE
added 2026/03/25 4:14 p.m.5 views

CVE-2026-25030

CVE-2026-25030 affects WordPress Goldish theme versions prior to 3.47. The vulnerability is due to deserialization of untrusted data, enabling PHP object injection in Goldish. Impact is described as high for confidentiality, integrity, and availability with network access and no user interaction ...

9.8CVSS5.8AI score0.00061EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-33604

Malicious code in bioql PyPI...

7.3CVSS5.9AI score0.00059EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2025/08/12 12:0 a.m.2 views

Zoom Workplace < 6.3.10 Vulnerability (ZSB-25030)

The version of Zoom Workplace installed on the remote host is prior to 6.3.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-25030 advisory. - Untrusted search path in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an escalation of privilege...

9.6CVSS6.1AI score0.00398EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 6:25 p.m.7 views

CVE-2021-25030

The Events Made Easy WordPress plugin before 2.2.36 does not sanitise and escape the searchtext parameter before using it in a SQL statement via the emesearchmail AJAX action, available to any authenticated users. As a result, users with a role as low as subscriber can call it and perform SQL...

8.8CVSS7.3AI score0.00955EPSS
Exploits2References1
Circl
Circl
added 2025/04/15 2:55 p.m.0 views

CVE-2018-25030

creationtimestamp| type| source ---|---|--- 2025-04-15 14:55:06+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11826...

3.3CVSS4.1AI score0.00245EPSS
Exploits1References1
IBM Security Bulletins
IBM Security Bulletins
added 2024/07/01 5:50 a.m.45 views

Security Bulletin: Multiple vulnerabilities in IBM Db2 may affect IBM Storage Protect Server ( CVE-2023-38729, CVE-2012-2677, CVE-2024-25030, CVE-2024-25046, CVE-2024-27254, CVE-2023-52296)

Summary IBM Storage Protect Server uses IBM Db2 and may be affected by multiple vulnerabilities which could lead to denial of service, loss of confidentiality, integrity or availability. CVE-2023-38729, CVE-2012-2677, CVE-2024-25030, CVE-2024-25046, CVE-2024-27254, CVE-2023-52296. This bulletin...

6.8CVSS7.5AI score0.00821EPSS
Exploits1Affected Software1
Vulnrichment
Vulnrichment
added 2024/06/12 9:39 a.m.14 views

CVE-2023-25030 WordPress Buy Me a Coffee plugin <= 3.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in Buy Me a Coffee.This issue affects Buy Me a Coffee: from n/a through 3.7...

4.3CVSS7.2AI score0.0012EPSS
Exploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2024/04/05 8:23 a.m.30 views

Security Bulletin: Multiple security vulnerabilities have been identified in IBM DB2 which is shipped with IBM Intelligent Operations Center.

Summary IBM DB2 shipped with IBM Intelligent Operations Center. Information about security vulnerabilities affecting IBM DB2 has been published in a security bulletin CVE-2023-38729, CVE-2012-2677, CVE-2024-25030, CVE-2024-25046, CVE-2024-27254, CVE-2023-52296, CVE-2024-22360 Vulnerability Detail...

6.8CVSS5.9AI score0.00821EPSS
Exploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2024/04/02 5:1 p.m.42 views

Security Bulletin: IBM® Db2® is vulnerable to an information disclosure vulnerability as sensitive information may be included in a log file (CVE-2024-25030)

Summary IBM® Db2® is vulnerable to an information disclosure vulnerability as sensitive information may be included in a log file. Vulnerability Details CVEID:CVE-2024-25030 DESCRIPTION: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server stores potentially sensitive information in lo...

6.2CVSS5.8AI score0.00029EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2023/07/07 12:0 a.m.14 views

WordPress Buy Me a Coffee Plugin <= 3.7 is vulnerable to Broken Access Control

Software Buy Me a Coffee Type Plugin Vulnerable versions = 3.7 Fixed in 3.8 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-25030 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID efd2e1e73286 Credits Abdi Pranata Required privilege...

4.3CVSS6.4AI score0.0012EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2022/03/28 6:15 p.m.2 views

CVE-2018-25030

A vulnerability classified as problematic has been found in Mirmay Secure Private Browser and File Manager up to 2.5. Affected is the Auto Lock. A race condition leads to a local authentication bypass. The exploit has been disclosed to the public and may be used...

2.5CVSS5AI score
Exploits0References3
CVE
CVE
added 2022/03/28 6:0 p.m.43 views

CVE-2018-25030

CVE-2018-25030 affects Mirmay Secure Private Browser and File Manager up to version 2.5, specifically the Auto Lock module. The underlying issue is a race condition that allows a local authentication bypass. The vulnerability description indicates the exploit has been disclosed publicly. Connecte...

3.3CVSS3.7AI score0.00245EPSS
Exploits1References3Affected Software2
Vulnrichment
Vulnrichment
added 2022/03/28 6:0 p.m.12 views

CVE-2018-25030 Mirmay Secure Private Browser / File Manager Auto Lock improper authentication

A vulnerability classified as problematic has been found in Mirmay Secure Private Browser and File Manager up to 2.5. Affected is the Auto Lock. A race condition leads to a local authentication bypass. The exploit has been disclosed to the public and may be used...

3.3CVSS4.2AI score0.00245EPSS
Exploits1References3
Cvelist
Cvelist
added 2022/03/28 6:0 p.m.11 views

CVE-2018-25030 Mirmay Secure Private Browser / File Manager Auto Lock improper authentication

A vulnerability classified as problematic has been found in Mirmay Secure Private Browser and File Manager up to 2.5. Affected is the Auto Lock. A race condition leads to a local authentication bypass. The exploit has been disclosed to the public and may be used...

3.3CVSS3.9AI score0.00245EPSS
Exploits1References3
Circl
Circl
added 2022/01/03 4:44 p.m.2 views

CVE-2021-25030

creationtimestamp| type| source ---|---|--- 2022-01-03 16:44:09+00:00| seen| https://t.me/cibsecurity/34857...

8.8CVSS8.1AI score0.00955EPSS
Exploits2References1
CVE
CVE
added 2022/01/03 12:49 p.m.53 views

CVE-2021-25030

CVE-2021-25030 : The WordPress plugin Events Made Easy (before 2.2.36) fails to sanitize and escape the search_text parameter used in the eme_searchmail AJAX action, enabling SQL injection when called by any authenticated user (e.g., roles as low as a subscriber). The vulnerability stems from imp...

8.8CVSS8.9AI score0.00955EPSS
Exploits2References1Affected Software1
CVE
CVE
added 2021/05/26 6:45 p.m.51 views

CVE-2019-25030

CVE-2019-25030 affects Versa Director, Versa Analytics and VOS. Passwords were stored without an adaptive hash or KDF, using Merkle-Damgard-based algorithms (e.g., MD5/SHA-1), enabling rainbow-table based cracking. The connected documents indicate the mitigation is to hash with adaptive algorithm...

5.5CVSS5.5AI score0.00047EPSS
Exploits0References1Affected Software3
Rows per page
Query Builder