Lucene search
K

111 matches found

CNNVD
CNNVD
added 2026/05/07 12:0 a.m.5 views

PHOENIX CONTACT多款产品 安全漏洞

PHOENIX CONTACT FL MGUARD 2102, among others, are products of the German company PHOENIX CONTACT. PHOENIX CONTACT FL MGUARD 2102 is a router. PHOENIX CONTACT FL MGUARD 2105 is also a router. PHOENIX CONTACT FL MGUARD represents a series of routers. Several products from PHOENIX CONTACT have...

8CVSS5.9AI score0.0003EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-46145

Malicious code in bioql PyPI...

6.8CVSS6.7AI score0.00124EPSS
Exploits1References2
Circl
Circl
added 2025/06/20 11:46 a.m.2 views

CVE-2025-4102

creationtimestamp| type| source ---|---|--- 2025-06-20 11:46:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18934...

7.2CVSS4.8AI score0.01373EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/06/20 11:16 a.m.3 views

CVE-2025-4102 Beaver Builder Plugin (Starter Version) <= 2.9.1 - Authenticated (Administrator+) Arbitrary File Upload

The Beaver Builder Plugin Starter Version plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'saveenabledicons' function in all versions up to, and including, 2.9.1. This makes it possible for authenticated attackers, with Administrator-level...

7.2CVSS0.01373EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/06/20 11:16 a.m.1 views

CVE-2025-4102 Beaver Builder Plugin (Starter Version) <= 2.9.1 - Authenticated (Administrator+) Arbitrary File Upload

The Beaver Builder Plugin Starter Version plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'saveenabledicons' function in all versions up to, and including, 2.9.1. This makes it possible for authenticated attackers, with Administrator-level...

7.2CVSS7.3AI score0.01373EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 12:35 a.m.4 views

CVE-2022-4102

The Royal Elementor Addons WordPress plugin before 1.3.56 does not have authorization and CSRF checks when deleting a template and does not ensure that the post to be deleted is a template. This could allow any authenticated users, such as subscribers, to delete arbitrary posts assuming they know...

3.1CVSS6.7AI score0.00102EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 11:56 p.m.4 views

CVE-2022-43096

Mediatrix 4102 before v48.5.2718 allows local attackers to gain root access via the UART port...

6.8CVSS7AI score0.00124EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2025/03/03 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2011-4102

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based buffer overflow in the erfreadheader function in wiretap/erf.c in the ERF file parser in Wireshark 1.4.0 through 1.4.9 and 1.6.x before 1.6.3 allows...

4.3CVSS7.3AI score0.01526EPSS
Exploits0References2
Circl
Circl
added 2024/07/09 11:50 a.m.0 views

CVE-2024-4102

creationtimestamp| type| source ---|---|--- 2024-07-09 11:50:12+00:00| seen| https://t.me/cvedetector/296...

5.4CVSS4.8AI score0.00263EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/07/09 8:33 a.m.18 views

CVE-2024-4102 Pricing Table <= 2.0.1 - Missing Authorization

The Pricing Table plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the ajax function in all versions up to, and including, 2.0.1. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform unauthoriz...

5.4CVSS0.00263EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/07/09 8:33 a.m.8 views

CVE-2024-4102 Pricing Table <= 2.0.1 - Missing Authorization

The Pricing Table plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the ajax function in all versions up to, and including, 2.0.1. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform unauthoriz...

5.4CVSS6.5AI score0.00263EPSS
Exploits0References2
Patchstack
Patchstack
added 2024/07/09 12:0 a.m.6 views

WordPress Pricing Table Plugin <= 2.0.1 is vulnerable to Broken Access Control

Software Pricing Table Type Plugin Vulnerable versions = 2.0.1 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-4102 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 7d83a882cffe Credits Benedictus Jovan aillesiM Required...

5.4CVSS6.6AI score0.00263EPSS
Exploits0References2Affected Software1
Circl
Circl
added 2024/02/01 6:46 p.m.2 views

CVE-2013-4102

creationtimestamp| type| source ---|---|--- 2024-02-01 18:46:35+00:00| seen| https://t.me/ctinow/177738...

9.1CVSS8.6AI score0.0044EPSS
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/01/24 8:23 p.m.2 views

Malicious code in wlwz-2312-4102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05d9aeb6ebf51cdee694343413cb77f270f988278304108397a18e9edadfd474 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OpenVAS
OpenVAS
added 2023/10/18 12:0 a.m.16 views

SUSE: Security Advisory (SUSE-SU-2023:4102-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.1AI score0.00133EPSS
Exploits0References4
Circl
Circl
added 2023/10/03 4:41 p.m.1 views

CVE-2023-4102

creationtimestamp| type| source ---|---|--- 2023-10-03 16:41:22+00:00| seen| https://t.me/cibsecurity/71498...

8.8CVSS8.1AI score0.00164EPSS
Exploits0References1
NVD
NVD
added 2023/10/03 12:15 p.m.13 views

CVE-2023-4102

QSige login SSO does not have an access control mechanism to verify whether the user requesting a resource has sufficient permissions to do so. As a prerequisite, it is necessary to log into the application...

8.8CVSS8.7AI score0.00164EPSS
Exploits0References1
OSV
OSV
added 2023/10/03 12:15 p.m.2 views

CVE-2023-4102

QSige login SSO does not have an access control mechanism to verify whether the user requesting a resource has sufficient permissions to do so. As a prerequisite, it is necessary to log into the application...

8.8CVSS5.8AI score0.00164EPSS
Exploits0References1
CVE
CVE
added 2023/10/03 11:29 a.m.33 views

CVE-2023-4102

CVE-2023-4102 affects the QSige login SSO in IDM Sistemas QSige. The root cause is the absence of an access control mechanism to verify that a requesting user has sufficient permissions before granting access to a resource. This leads to potential unauthorized access with high impact on confident...

8.8CVSS8.7AI score0.00164EPSS
Exploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/07/20 12:0 a.m.26 views

Oracle Linux 8 : bind (ELSA-2023-4102)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-4102 advisory. 32:9.11.36-8.1 - Improve RBT overmem cache cleaning CVE-2023-2828 Tenable has extracted the preceding description block directly from the Oracle Linux security...

7.5CVSS7.5AI score0.01176EPSS
Exploits0References2
Rows per page
Query Builder