Lucene search
K

53 matches found

Cvelist
Cvelist
added 2025/12/09 2:52 p.m.19 views

CVE-2025-63065 WordPress Media LIbrary Assistant plugin <= 3.29 - Broken Access Control vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Media LIbrary Assistant: from n/a through = 3.29...

5.3CVSS0.00012EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/09 12:0 a.m.2 views

PT-2025-50065

Name of the Vulnerable Software and Affected Versions David Lingren Media Library Assistant versions through 3.30 Description The software contains a flaw related to incorrectly configured access control security levels, leading to an authorization bypass through a user-controlled key...

5.4CVSS5.3AI score0.00012EPSS
Exploits0References5
CBLMariner
CBLMariner
added 2025/10/22 3:7 p.m.3 views

CVE-2025-10823 affecting package fio for versions less than 3.30-3

CVE-2025-10823 affecting package fio for versions less than 3.30-3. A patched version of the package is available...

4.8CVSS6.9AI score0.00031EPSS
Exploits0
NVD
NVD
added 2025/09/26 4:15 p.m.2 views

CVE-2025-56463

Mercusys MW305R 3.30 and below is has a Transport Layer Security TLS certificate private key disclosure...

6.8CVSS0.00029EPSS
Exploits1References2
OSV
OSV
added 2025/09/26 4:15 p.m.0 views

CVE-2025-56463

Mercusys MW305R 3.30 and below is has a Transport Layer Security TLS certificate private key disclosure...

6.8CVSS5.8AI score0.00029EPSS
Exploits1References2
CVE
CVE
added 2025/09/26 12:0 a.m.13 views

CVE-2025-56463

Mercusys MW305R routers with firmware version 3.30 and earlier are affected by a flaw that leads to TLS certificate private key disclosure. Root cause: an issue in the device firmware that allows private key exposure. Impact areas documented include confidentiality, integrity, and availability as...

6.8CVSS6.6AI score0.00029EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2025/09/23 12:15 a.m.1 views

AZL-67664 CVE-2025-10823 affecting package fio for versions less than 3.30-3

A vulnerability was found in axboe fio up to 3.41. This affects the function strbufferpatterncb of the file options.c. Performing manipulation results in null pointer dereference. The attack must be initiated from a local position. The exploit has been made public and could be used...

4.8CVSS5.4AI score0.00031EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/05/31 12:0 a.m.1 views

WordPress plugin Atarim security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

7.2CVSS6AI score0.03971EPSS
Exploits0References7
Akamai Blog
Akamai Blog
added 2024/05/02 6:1 p.m.7 views

Noname Security Platform Updates: 3.30 Release

...

7.3AI score
Exploits0
Patchstack
Patchstack
added 2023/03/03 12:0 a.m.12 views

WordPress Leyka Plugin <= 3.29.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Leyka Type Plugin Vulnerable versions = 3.29.2 Fixed in 3.30 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-27442 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID dc5061a06f06 Credits yuyudhn Required privilege...

8.8CVSS6.7AI score0.00123EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2022/10/27 12:0 a.m.3 views

PT-2022-20404 · Google · Flutter +1

Name of the Vulnerable Software and Affected Versions: Dart versions prior to 2.18 Flutter versions prior to 3.30 Description: The implementation of backslash parsing in the Dart URI class differs from the WhatWG URL standards, as it uses the RFC 3986 syntax. This creates incompatibilities with t...

9.8CVSS9.5AI score0.00101EPSS
Exploits0References5
Prion
Prion
added 2021/10/18 1:15 p.m.10 views

Out-of-bounds

FATEK Automation WinProladder versions 3.30 and prior is vulnerable to an out-of-bounds read, which may allow an attacker to read unauthorized information...

4.3CVSS4.1AI score0.00147EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2021/06/29 3:15 p.m.1 views

CVE-2021-32990

FATEK Automation WinProladder Versions 3.30 and prior are vulnerable to an out-of-bounds read, which may allow an attacker to execute arbitrary code...

9.8CVSS7.5AI score0.00748EPSS
Exploits0References1
NVD
NVD
added 2021/06/29 3:15 p.m.15 views

CVE-2021-32988

FATEK Automation WinProladder Versions 3.30 and prior are vulnerable to an out-of-bounds write, which may allow an attacker to execute arbitrary code...

9.8CVSS0.00748EPSS
Exploits0References1
Prion
Prion
added 2021/06/29 3:15 p.m.9 views

Out-of-bounds

FATEK Automation WinProladder Versions 3.30 and prior are vulnerable to an out-of-bounds write, which may allow an attacker to execute arbitrary code...

7.5CVSS9.6AI score0.00748EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2021/04/12 3:15 p.m.0 views

CVE-2021-27486

FATEK Automation WinProladder Versions 3.30 and prior is vulnerable to an integer underflow, which may cause an out-of-bounds write and allow an attacker to execute arbitrary code...

7.8CVSS7.3AI score0.00263EPSS
Exploits0References1
Prion
Prion
added 2021/04/12 3:15 p.m.13 views

Integer overflow

FATEK Automation WinProladder Versions 3.30 and prior is vulnerable to an integer underflow, which may cause an out-of-bounds write and allow an attacker to execute arbitrary code...

6.8CVSS7.9AI score0.00263EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2021/02/17 2:15 p.m.0 views

CVE-2020-0525

Improper access control in firmware for the IntelR Ethernet I210 Controller series of network adapters before version 3.30 may allow a privileged user to potentially enable denial of service via local access...

4.4CVSS5.8AI score
Exploits0References1
Intel
Intel
added 2021/02/09 12:0 a.m.31 views

Intel® Ethernet I210 Controller Advisory

Summary: Potential security vulnerabilities in the Intel® Ethernet I210 Controller series of network adapters may allow denial of service. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-0522 Description: Improper...

5.5CVSS5.1AI score0.00055EPSS
Exploits0
The Hacker News
The Hacker News
added 2020/09/25 2:32 p.m.1 views

Microsoft Windows XP Source Code Reportedly Leaked Online

Microsoft's long-lived operating system Windows XP—that still powers over 1% of all laptops and desktop computers worldwide—has had its source code leaked online, allegedly, along with Windows Server 2003. Yes, you heard that right. The source code for Microsoft's 19-year-old operating system was...

5.8AI score
Exploits0
Rows per page
Query Builder