53 matches found
CVE-2025-63065 WordPress Media LIbrary Assistant plugin <= 3.29 - Broken Access Control vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Media LIbrary Assistant: from n/a through = 3.29...
PT-2025-50065
Name of the Vulnerable Software and Affected Versions David Lingren Media Library Assistant versions through 3.30 Description The software contains a flaw related to incorrectly configured access control security levels, leading to an authorization bypass through a user-controlled key...
CVE-2025-10823 affecting package fio for versions less than 3.30-3
CVE-2025-10823 affecting package fio for versions less than 3.30-3. A patched version of the package is available...
CVE-2025-56463
Mercusys MW305R 3.30 and below is has a Transport Layer Security TLS certificate private key disclosure...
CVE-2025-56463
Mercusys MW305R 3.30 and below is has a Transport Layer Security TLS certificate private key disclosure...
CVE-2025-56463
Mercusys MW305R routers with firmware version 3.30 and earlier are affected by a flaw that leads to TLS certificate private key disclosure. Root cause: an issue in the device firmware that allows private key exposure. Impact areas documented include confidentiality, integrity, and availability as...
AZL-67664 CVE-2025-10823 affecting package fio for versions less than 3.30-3
A vulnerability was found in axboe fio up to 3.41. This affects the function strbufferpatterncb of the file options.c. Performing manipulation results in null pointer dereference. The attack must be initiated from a local position. The exploit has been made public and could be used...
WordPress plugin Atarim security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
Noname Security Platform Updates: 3.30 Release
...
WordPress Leyka Plugin <= 3.29.2 is vulnerable to Cross Site Request Forgery (CSRF)
Software Leyka Type Plugin Vulnerable versions = 3.29.2 Fixed in 3.30 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-27442 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID dc5061a06f06 Credits yuyudhn Required privilege...
PT-2022-20404 · Google · Flutter +1
Name of the Vulnerable Software and Affected Versions: Dart versions prior to 2.18 Flutter versions prior to 3.30 Description: The implementation of backslash parsing in the Dart URI class differs from the WhatWG URL standards, as it uses the RFC 3986 syntax. This creates incompatibilities with t...
Out-of-bounds
FATEK Automation WinProladder versions 3.30 and prior is vulnerable to an out-of-bounds read, which may allow an attacker to read unauthorized information...
CVE-2021-32990
FATEK Automation WinProladder Versions 3.30 and prior are vulnerable to an out-of-bounds read, which may allow an attacker to execute arbitrary code...
CVE-2021-32988
FATEK Automation WinProladder Versions 3.30 and prior are vulnerable to an out-of-bounds write, which may allow an attacker to execute arbitrary code...
Out-of-bounds
FATEK Automation WinProladder Versions 3.30 and prior are vulnerable to an out-of-bounds write, which may allow an attacker to execute arbitrary code...
CVE-2021-27486
FATEK Automation WinProladder Versions 3.30 and prior is vulnerable to an integer underflow, which may cause an out-of-bounds write and allow an attacker to execute arbitrary code...
Integer overflow
FATEK Automation WinProladder Versions 3.30 and prior is vulnerable to an integer underflow, which may cause an out-of-bounds write and allow an attacker to execute arbitrary code...
CVE-2020-0525
Improper access control in firmware for the IntelR Ethernet I210 Controller series of network adapters before version 3.30 may allow a privileged user to potentially enable denial of service via local access...
Intel® Ethernet I210 Controller Advisory
Summary: Potential security vulnerabilities in the Intel® Ethernet I210 Controller series of network adapters may allow denial of service. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-0522 Description: Improper...
Microsoft Windows XP Source Code Reportedly Leaked Online
Microsoft's long-lived operating system Windows XP—that still powers over 1% of all laptops and desktop computers worldwide—has had its source code leaked online, allegedly, along with Windows Server 2003. Yes, you heard that right. The source code for Microsoft's 19-year-old operating system was...