CVE-2020-36852

The Custom Searchable Data Entry System plugin for WordPress is vulnerable to unauthenticated database wiping in versions up to, and including 1.7.1, due to a missing capability check and lack of sufficient validation on the ghazalesdsdeleteentriestablerow function. This makes it possible for...

WordPress Custom Searchable Data Entry System plugin <= 1.7.1 - Unauthenticated Database Wiping vulnerability

Unauthenticated Database Wiping vulnerability discovered by Sean Murphy in WordPress Plugin Custom Searchable Data Entry System versions = 1.7.1...

CVE-2020-36852

creationtimestamp| type| source ---|---|--- 2025-10-01 21:02:24+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m25wrqrzrh27...

@nx/powerpack-azure-cache (>=1.3.0 <=21.0.0-beta.0) potentially affected by CVE-2025-36852 via @nx/azure-cache (>=1.3.0-beta.1 <=5.0.7)

@nx/azure-cache NPM version =1.3.0-beta.1, =1.3.0, =21.0.0-beta.0 Source cves: CVE-2025-36852 Source advisory: SNYK:JS-NXAZURECACHE-13559382...

CVE-2022-36852

Improper Authorization vulnerability in Video Editor prior to SMR Sep-2022 Release 1 allows local attacker to access internal application data...

CVE-2022-36852

creationtimestamp| type| source ---|---|--- 2022-09-09 18:26:29+00:00| seen| https://t.me/cibsecurity/49499...

CVE-2022-36852

Improper Authorization vulnerability in Video Editor prior to SMR Sep-2022 Release 1 allows local attacker to access internal application data...

CVE-2022-36852

Improper Authorization vulnerability in Video Editor prior to SMR Sep-2022 Release 1 allows local attacker to access internal application data...

CVE-2022-36852

Video Editor on Samsung mobile devices is affected by an Improper Authorization vulnerability. The issue allows a local attacker to access internal application data due to improper authorization. Affected versions are prior to SMR Sep-2022 Release 1. Mitigation: update to SMR Sep-2022 Release 1 o...

CVE-2021-36852

Cross-Site Request Forgery CSRF vulnerability in ThimPress WP Hotel Booking plugin = 1.10.5 at WordPress...

CVE-2021-36852 WordPress WP Hotel Booking plugin <= 1.10.5 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in ThimPress WP Hotel Booking plugin = 1.10.5 at WordPress...

CVE-2021-36852

CVE-2021-36852 is a CSRF vulnerability in the WordPress ThimPress WP Hotel Booking plugin versions

Firefox下载管理器完全可写文件本地权限提升漏洞

BUGTRAQ ID: 36852 CVECAN ID: CVE-2009-3274 Firefox是一款流行的开源WEB浏览器。 Linux平台上的Firefox对从“下载”窗口所选择的文件使用了可预测的/tmp路径名。如果攻击者拥有对机器的本地访问并知道了用户通过下载管理器所要打开文件的名称，就可以在用于保存临时下载文件的完全可写目录中放置恶意文件，在打开该文件时浏览器就会选择错误的文件。 Mozilla Firefox 3.5.x Mozilla Firefox 3.0.x 厂商补丁： Debian ------...