21 matches found
CVE-2026-25167
Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally...
CVE-2026-25167
creationtimestamp| type| source ---|---|--- 2026-03-10 16:57:37+00:00| seen| https://www.thezdi.com/blog/2026/3/10/the-march-2026-security-update-review 2026-03-10 19:07:55+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0080 2026-03-11 03:00:16+00:00| seen|...
CVE-2023-25167
Discourse is an open source discussion platform. In affected versions a malicious user can cause a regular expression denial of service using a carefully crafted git URL. This issue is patched in the latest stable, beta and tests-passed versions of Discourse. Users are advised to upgrade. There a...
EUVD-2021-25167
Malware in sbrugna...
CVE-2024-25167
Cross Site Scripting vulnerability in eblog v1.0 allows a remote attacker to execute arbitrary code via a crafted script to the argument description parameter when submitting a comment on a post...
CVE-2025-25167
Missing Authorization vulnerability in Black and White BookPress – For Book Authors book-press allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BookPress – For Book Authors: from n/a through = 1.2.7...
CVE-2025-25167
Missing Authorization vulnerability in Black and White BookPress – For Book Authors book-press allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BookPress – For Book Authors: from n/a through = 1.2.7...
CVE-2025-25167 WordPress BookPress – For Book Authors Plugin <= 1.2.7 - Broken Access Control vulnerability
Missing Authorization vulnerability in Black and White BookPress – For Book Authors book-press allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BookPress – For Book Authors: from n/a through = 1.2.7...
CVE-2025-25167 WordPress BookPress – For Book Authors Plugin <= 1.2.7 - Broken Access Control vulnerability
Missing Authorization vulnerability in blackandwhitedigital BookPress – For Book Authors allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects BookPress – For Book Authors: from n/a through 1.2.7...
CVE-2025-25167
CVE-2025-25167 is a Missing Authorization (Broken Access Control) vulnerability in the WordPress plugin BookPress – For Book Authors (version range: affected up to 1.2.7). The CVE description states that an attacker can exploit incorrectly configured access control security levels to bypass autho...
CVE-2024-25167
CVE-2024-25167 affects the eblog v1.0 project. A cross-site scripting (XSS) flaw exists in the description parameter of the comment submission endpoint, allowing a remote attacker to execute arbitrary code. Affected component: the comment submission path handling the description field. Impact: ar...
CVE-2023-25167
creationtimestamp| type| source ---|---|--- 2023-02-08 22:25:32+00:00| seen| https://t.me/cibsecurity/57800...
CVE-2023-25167 Regular expression denial of service via installing themes via git in discourse
Discourse is an open source discussion platform. In affected versions a malicious user can cause a regular expression denial of service using a carefully crafted git URL. This issue is patched in the latest stable, beta and tests-passed versions of Discourse. Users are advised to upgrade. There a...
CVE-2023-25167
Discourse is vulnerable to a regular expression denial of service via carefully crafted git URLs used to install themes. The issue affects affected Discourse versions and is caused by processing Git URLs in a way that can trigger RE DoS. Remediation: upgrade to the latest stable, beta, or tests-p...
CVE-2022-25167
Apache Flume (versions 1.4.0–1.9.0) is vulnerable to remote code execution when a JMS Source is configured with a JNDI LDAP data source URI and an attacker controls the target LDAP server. The underlying issue is the JNDI usage, which can be exploited to run arbitrary code on the target. Remediat...
CVE-2020-25167
creationtimestamp| type| source ---|---|--- 2022-04-18 20:23:42+00:00| seen| https://t.me/cibsecurity/41027...
CVE-2020-25167 OSIsoft PI Vision Incorrect Authorization
OSIsoft PI Vision 2020 versions prior to 3.5.0 could disclose information to a user with insufficient privileges for an AF attribute...
CVE-2020-25167
CVE-2020-25167: OSIsoft PI Vision 2020 versions prior to 3.5.0 are affected by an Incorrect Authorization flaw that could disclose information to a user with insufficient privileges for an AF attribute. The issue arises from improper access controls. Mitigation is to update to PI Vision 2020 v3.5...
CVE-2021-25167
Aruba AirWave Management Platform is affected by a remote unauthorized access vulnerability in versions prior to 8.2.12.1. The issue is addressed by Aruba with patches and fixes released to reach version 8.2.12.1. The public documents do not specify the root cause details beyond this remote acces...