Lucene search
K

15 matches found

RedhatCVE
RedhatCVE
added 2025/10/17 3:52 p.m.3 views

CVE-2025-9559

Pega Platform versions 8.7.5 to Infinity 24.2.2 are affected by a Insecure Direct Object Reference issue in a user interface component that can only be used to read data...

6.5CVSS6.8AI score0.00043EPSS
Exploits1References1
NVD
NVD
added 2025/10/16 4:15 p.m.6 views

CVE-2025-9559

Pega Platform versions 8.7.5 to Infinity 24.2.2 are affected by a Insecure Direct Object Reference issue in a user interface component that can only be used to read data...

6.5CVSS0.00043EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/10/16 3:28 p.m.5 views

CVE-2025-9559 Pega Platform versions 8.7.5 to Infinity 24.2.2 are affected by a Insecure Direct Object Reference issue in a user interface component that can only be used to read data

Pega Platform versions 8.7.5 to Infinity 24.2.2 are affected by a Insecure Direct Object Reference issue in a user interface component that can only be used to read data...

6.5CVSS0.00043EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/10/16 12:0 a.m.3 views

Pega Platform 安全漏洞

Pega Platform is an enterprise management platform from Pega Corporation, USA. A security vulnerability exists in Pega Platform versions 8.7.5 through 24.2.2, which stems from an insecure direct object reference in a user interface component that could lead to data readout...

6.5CVSS6.6AI score0.00043EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2025/10/16 12:0 a.m.2 views

PT-2025-42483

Name of the Vulnerable Software and Affected Versions Pega Platform versions 8.7.5 through 24.2.2 Description The Pega Platform contains an Insecure Direct Object Reference issue within a user interface component. This issue allows for the reading of data. Recommendations Update to a version late...

6.5CVSS5.8AI score0.00043EPSS
Exploits1References7
RedhatCVE
RedhatCVE
added 2025/04/11 5:21 p.m.4 views

CVE-2025-32695

Incorrect Privilege Assignment vulnerability in Mestres do WP Checkout Mestres WP checkout-mestres-wp allows Privilege Escalation.This issue affects Checkout Mestres WP: from n/a through = 8.7.5...

9.8CVSS5.9AI score0.0045EPSS
Exploits0References1
CVE
CVE
added 2025/04/09 4:13 p.m.93 views

CVE-2025-32695

CVE-2025-32695 describes an Incorrect Privilege Assignment vulnerability impacting the WordPress plugin Checkout Mestres WP (versions up to 8.7.5). The issue allows privilege escalation within Checkout Mestres WP. Public sources consistently reference the affected component and version range; exp...

9.8CVSS5.9AI score0.0045EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/09 4:13 p.m.17 views

CVE-2025-32695 WordPress Checkout Mestres WP plugin <= 8.7.5 - Privilege Escalation Vulnerability

Incorrect Privilege Assignment vulnerability in Mestres do WP Checkout Mestres WP checkout-mestres-wp allows Privilege Escalation.This issue affects Checkout Mestres WP: from n/a through = 8.7.5...

9.8CVSS0.0045EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/09 4:13 p.m.3 views

CVE-2025-32695 WordPress Checkout Mestres WP plugin <= 8.7.5 - Privilege Escalation Vulnerability

Incorrect Privilege Assignment vulnerability in Mestres do WP Checkout Mestres WP checkout-mestres-wp allows Privilege Escalation.This issue affects Checkout Mestres WP: from n/a through = 8.7.5...

9.8CVSS5.2AI score0.0045EPSS
Exploits0References1
Malwarebytes
Malwarebytes
added 2022/09/13 12:0 p.m.27 views

BackupBuddy WordPress plugin vulnerable to exploitation, update now!

Users of WordPress may need to perform an urgent update related to the popular BackupBuddy plugin. BackupBuddy is a plugin which offers backup solutions designed to combat "hacks, malware, user error, deleted files, and running bad commands". Unfortunately, running an older version of BackupBuddy...

7.5AI score0.9194EPSS
Exploits2
Positive Technologies
Positive Technologies
added 2022/09/09 12:0 a.m.7 views

PT-2022-20752 · Ithemes · Ithemes Backupbuddy

Name of the Vulnerable Software and Affected Versions: iThemes BackupBuddy versions 8.5.8.0 through 8.7.4.1 Description: The issue affects the iThemes BackupBuddy plugin, allowing unauthorized users to upload arbitrary files from a vulnerable site, potentially containing confidential information...

7.5CVSS7AI score0.9194EPSS
Exploits2References9
RedhatCVE
RedhatCVE
added 2018/07/06 3:49 a.m.21 views

CVE-2017-16816

The condorschedd component in HTCondor before 8.6.8 and 8.7.x before 8.7.5 allows remote authenticated users to cause a denial of service daemon crash by leveraging use of GSI and VOMS extensions...

6.5CVSS4.1AI score0.00637EPSS
Exploits0References2
Typo3
Typo3
added 2017/09/05 12:0 a.m.491 views

Cross-Site Scripting in TYPO3 CMS Backend

It has been discovered, that TYPO3 CMS is vulnerable to Cross-Site Scripting. Component Type: TYPO3 CMS Release Date: September 5, 2017 Vulnerability Type: Cross-Site Scripting Affected Versions: 8.0.0 to 8.7.4 Severity: Low Suggested CVSS v2.0: AV:N/AC:L/Au:S/C:P/I:P/A:N/E:F/RL:OF/RC:C CVE: not...

6.9AI score
Exploits0Affected Software1
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.23 views

Sendmail 8.6.x, 8.7.x - 8.7.5 Local Starvation and Overflow Vulnerabilities

The remote Sendmail server, according to its version number, has buffer overflow and denial of service problem through GECOS field, it gives root access to local users. SPDX-FileCopyrightText: 2003 Xue Yong Zhi Some text descriptions might be excerpted from a referenced sources, and are Copyright...

7.2CVSS7.2AI score0.00115EPSS
Exploits0References1
CVE
CVE
added 1999/09/29 4:0 a.m.68 views

CVE-1999-0131

CVE-1999-0131 affects Sendmail up to version 8.7.5 and earlier, where a vulnerability in the GECOS field processing can cause a buffer overflow and denial of service that may grant root access to local users. Publicly documented by Red Hat and OpenVAS entries, as well as CVE records, the vulnerab...

7.2CVSS6.8AI score0.00115EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder