Lucene search
+L

58 matches found

OSV
OSV
•added 2026/07/10 1:56 p.m.•9 views

MINI-GFC5-76RJ-4745

Bulletin has no description...

5.3CVSS5.6AI score0.00346EPSS
SaveExploits0
OSV
OSV
•added 2026/06/30 1:35 p.m.•14 views

MINI-4745-CJ29-4R3C

Bulletin has no description...

5.7AI score
SaveExploits0
Circl
Circl
•added 2026/03/24 6:48 a.m.•13 views

CVE-2026-4745

creationtimestamp| type| source ---|---|--- 2026-03-24 06:48:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhry7uvyye2f 2026-03-24 09:00:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116283331651758120 2026-03-24 09:00:31+00:00| seen|...

10CVSS5.8AI score0.00444EPSS
SaveExploits0References3
OSV
OSV
•added 2025/10/30 7:47 p.m.•3 views

CGA-4745-J25F-F47Q

Bulletin has no description...

8.8CVSS7.2AI score0.00378EPSS
SaveExploits0References14
OSV
OSV
•added 2025/08/10 8:01 p.m.•5 views

MINI-5RFP-W3R9-4745

Bulletin has no description...

8.6CVSS7.2AI score0.00573EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/23 12:32 a.m.•22 views

CVE-2022-4745

The WP Customer Area WordPress plugin before 8.1.4 does not have CSRF checks when performing some actions such as chmod, mkdir and copy, which could allow attackers to make a logged-in admin perform them and create arbitrary folders, copy file for example...

7.1CVSS7AI score0.00276EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/18 4:03 a.m.•21 views

CVE-2025-4745

A vulnerability, which was classified as problematic, was found in code-projects Employee Record System 1.0. This affects an unknown part of the file currentemployees.php. The manipulation of the argument employeedid/firstname/middlename/lastname leads to cross site scripting. It is possible to...

5.4CVSS6.2AI score0.00356EPSS
SaveExploits1References1
OSV
OSV
•added 2025/05/16 4:15 a.m.•15 views

CVE-2025-4745

A vulnerability, which was classified as problematic, was found in code-projects Employee Record System 1.0. This affects an unknown part of the file currentemployees.php. The manipulation of the argument employeedid/firstname/middlename/lastname leads to cross site scripting. It is possible to...

5.4CVSS3.7AI score0.00356EPSS
SaveExploits1References5
NVD
NVD
•added 2025/05/16 4:15 a.m.•25 views

CVE-2025-4745

A vulnerability, which was classified as problematic, was found in code-projects Employee Record System 1.0. This affects an unknown part of the file currentemployees.php. The manipulation of the argument employeedid/firstname/middlename/lastname leads to cross site scripting. It is possible to...

5.4CVSS0.00356EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/05/16 4:00 a.m.•13 views

CVE-2025-4745 code-projects Employee Record System current_employees.php cross site scripting

A vulnerability, which was classified as problematic, was found in code-projects Employee Record System 1.0. This affects an unknown part of the file currentemployees.php. The manipulation of the argument employeedid/firstname/middlename/lastname leads to cross site scripting. It is possible to...

5.1CVSS6.4AI score0.00356EPSS
SaveExploits1References5
CVE
CVE
•added 2025/05/16 4:00 a.m.•53 views

CVE-2025-4745

CVE-2025-4745 affects the code-projects Employee Record System 1.0 , specifically the file current_employees.php . The vulnerability arises from improper handling of the arguments employeed_id , first_name , middle_name , and last_name , leading to a cross-site scripting (XSS) condition. Exploita...

5.4CVSS6.2AI score0.00356EPSS
SaveExploits1References5Affected Software1
NVD
NVD
•added 2024/06/10 8:15 a.m.•34 views

CVE-2024-4745

Missing Authorization vulnerability in RafflePress Giveaways and Contests by RafflePress.This issue affects Giveaways and Contests by RafflePress: from n/a through 1.12.4...

6.3CVSS0.00251EPSS
SaveExploits0References1
CVE
CVE
•added 2024/06/10 8:09 a.m.•86 views

CVE-2024-4745

CVE-2024-4745 affects the WordPress plugin Giveaways and Contests by RafflePress (versions up to 1.12.4). It is a Missing Authorization vulnerability (broken access control) with limited documented impact in the provided sources. The CVSS indicates Network attack, Low confidentiality/integ/availa...

6.3CVSS5.6AI score0.00251EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/06/10 8:09 a.m.•26 views

CVE-2024-4745 WordPress Giveaways and Contests by RafflePress plugin <= 1.12.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in RafflePress Giveaways and Contests by RafflePress.This issue affects Giveaways and Contests by RafflePress: from n/a through 1.12.4...

4.3CVSS6.9AI score0.00251EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/05/10 12:00 a.m.•28 views

WordPress Giveaways and Contests by RafflePress Plugin <= 1.12.4 is vulnerable to Broken Access Control

Software Giveaways and Contests by RafflePress Type Plugin Vulnerable versions = 1.12.4 Fixed in 1.12.5 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-4745 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 632d49d4c2a4 Credits...

6.3CVSS6.6AI score0.00251EPSS
SaveExploits0References2Affected Software1
Circl
Circl
•added 2023/09/04 7:22 a.m.•21 views

CVE-2023-4745

creationtimestamp| type| source ---|---|--- 2023-09-04 07:22:25+00:00| seen| https://t.me/cibsecurity/69753...

9.8CVSS6.9AI score0.01949EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2023/09/03 11:31 p.m.•48 views

CVE-2023-4745 Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform importexport.php sql injection

A vulnerability was found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230822. It has been rated as critical. Affected by this issue is some unknown functionality of the file /importexport.php. The manipulation leads to sql injection. The attack may be...

6.5CVSS9.9AI score0.01949EPSS
SaveExploits1References4
CVE
CVE
•added 2023/09/03 11:31 p.m.•87 views

CVE-2023-4745

CVE-2023-4745 concerns Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform (up to 20230822). Multiple sources confirm a vulnerability in the unknown functionality of /importexport.php that leads to SQL injection. The issue can be triggered remotely over the network and ...

9.8CVSS8.2AI score0.01949EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2023/02/13 3:15 p.m.•13 views

CVE-2022-4745

The WP Customer Area WordPress plugin before 8.1.4 does not have CSRF checks when performing some actions such as chmod, mkdir and copy, which could allow attackers to make a logged-in admin perform them and create arbitrary folders, copy file for example...

7.1CVSS5.9AI score0.00276EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2023/02/13 2:32 p.m.•55 views

CVE-2022-4745 WP Customer Area < 8.1.4 - Unauthorised Actions via CSRF

The WP Customer Area WordPress plugin before 8.1.4 does not have CSRF checks when performing some actions such as chmod, mkdir and copy, which could allow attackers to make a logged-in admin perform them and create arbitrary folders, copy file for example...

7.2AI score0.00276EPSS
SaveExploits1References1
Rows per page
Query Builder