Lucene search
+L

1429 matches found

CNNVD
CNNVD
•added 2026/02/24 12:00 a.m.•18 views

Mautic 安全漏洞

Mautic is an open-source marketing automation software developed by Mautic. This software can monitor and manage websites, send emails, and manage customer resources. Mautic has a security vulnerability, which stems from SQL injections in the API endpoints used for retrieving contact activities...

8.8CVSS6AI score0.00389EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/02/04 7:27 p.m.•15 views

CVE-2026-24774

The Open eClass platform formerly known as GUnet eClass is a complete course management system. Prior to version 4.2, a business logic vulnerability allows authenticated students to improperly mark themselves as present in attendance activities, including activities that have already expired, by...

4.3CVSS5.4AI score0.00213EPSS
SaveExploits1References1
OSV
OSV
•added 2026/02/04 7:15 a.m.•10 views

CVE-2026-20979

Improper privilege management in Settings prior to SMR Feb-2026 Release 1 allows local attackers to launch arbitrary activity with Settings privilege...

7.8CVSS5.9AI score0.00134EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/02/04 6:14 a.m.•5 views

CVE-2026-20983

Improper export of android application components in Samsung Dialer prior to SMR Feb-2026 Release 1 allows local attackers to launch arbitrary activity with Samsung Dialer privilege...

8.4CVSS5.5AI score0.00134EPSS
SaveExploits0References1
CVE
CVE
•added 2026/02/04 6:14 a.m.•33 views

CVE-2026-20983

Samsung Dialer (Android) is affected by CVE-2026-20983 due to improper export of Android application components, enabling a local attacker to launch arbitrary activities with Samsung Dialer privileges. Affected software is Samsung Dialer prior to SMR Feb-2026 Release 1. The vulnerability is local...

8.4CVSS5.5AI score0.00134EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/02/04 6:14 a.m.•45 views

CVE-2026-20983

Improper export of android application components in Samsung Dialer prior to SMR Feb-2026 Release 1 allows local attackers to launch arbitrary activity with Samsung Dialer privilege...

8.4CVSS0.00134EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/02/04 6:14 a.m.•7 views

CVE-2026-20979

Improper privilege management in Settings prior to SMR Feb-2026 Release 1 allows local attackers to launch arbitrary activity with Settings privilege...

8.4CVSS5.5AI score0.00134EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/02/04 12:00 a.m.•18 views

SAMSUNG Dialer 安全漏洞

Samsung Dialer is a dialer application developed by South Korea’s Samsung Corporation. Versions of the Samsung Dialer prior to SMR Feb-2026 Release 1 contained security vulnerabilities. These vulnerabilities stemmed from improper export of Android application components, potentially allowing loca...

8.4CVSS5.9AI score0.00134EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/02/04 12:00 a.m.•28 views

PT-2026-6093

Name of the Vulnerable Software and Affected Versions Samsung Dialer versions prior to SMR Feb-2026 Release 1 Description A flaw exists due to the improper export of Android application components in Samsung Dialer. This allows a local attacker to launch arbitrary activity with Samsung Dialer...

8.4CVSS5.6AI score0.00134EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/02/04 12:00 a.m.•24 views

SAMSUNG Members 安全漏洞

Samsung Members is a community platform app developed by South Korea’s Samsung Corporation. Versions of Samsung Members prior to 5.6.00.11 contained security vulnerabilities. These vulnerabilities stemmed from improper input validation, potentially allowing remote attackers to connect to arbitrar...

7CVSS6.1AI score0.00293EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/02/03 4:58 p.m.•60 views

CVE-2026-24774 Open eClass Business Logic Flaw Allows Students to Mark Attendance in Expired Activities

The Open eClass platform formerly known as GUnet eClass is a complete course management system. Prior to version 4.2, a business logic vulnerability allows authenticated students to improperly mark themselves as present in attendance activities, including activities that have already expired, by...

4.3CVSS0.00213EPSS
SaveExploits1References1
CVE
CVE
•added 2026/02/03 4:58 p.m.•115 views

CVE-2026-24774

Open eClass (formerly GUnet eClass) before version 4.2 is affected by a business‑logic flaw that lets authenticated students mark themselves present in attendance for activities, including those that have expired, by directly accessing a crafted URL. The issue has been patched in version 4.2. Rem...

4.3CVSS5.4AI score0.00213EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/02/03 4:58 p.m.•8 views

CVE-2026-24774 Open eClass Business Logic Flaw Allows Students to Mark Attendance in Expired Activities

The Open eClass platform formerly known as GUnet eClass is a complete course management system. Prior to version 4.2, a business logic vulnerability allows authenticated students to improperly mark themselves as present in attendance activities, including activities that have already expired, by...

4.3CVSS5.4AI score0.00213EPSS
SaveExploits1References1
OSV
OSV
•added 2026/02/03 4:58 p.m.•14 views

CVE-2026-24774 Open eClass Business Logic Flaw Allows Students to Mark Attendance in Expired Activities

The Open eClass platform formerly known as GUnet eClass is a complete course management system. Prior to version 4.2, a business logic vulnerability allows authenticated students to improperly mark themselves as present in attendance activities, including activities that have already expired, by...

4.3CVSS5.4AI score
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/03 12:00 a.m.•1 views

CVE-2026-24774: Improper Enforcement of Behavioral Workflow

The Open eClass platform formerly known as GUnet eClass is a complete course management system. Prior to version 4.2, a business logic vulnerability allows authenticated students to improperly mark themselves as present in attendance activities, including activities that have already expired, by...

4.3CVSS5.8AI score0.00213EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/23 9:17 p.m.•16 views

CVE-2025-67953

Incorrect Privilege Assignment vulnerability in Booking Activities Team Booking Activities booking-activities allows Privilege Escalation.This issue affects Booking Activities: from n/a through = 1.16.44...

8.1CVSS5.4AI score0.00392EPSS
SaveExploits1References1
NVD
NVD
•added 2026/01/22 5:16 p.m.•13 views

CVE-2025-67953

Incorrect Privilege Assignment vulnerability in Booking Activities Team Booking Activities booking-activities allows Privilege Escalation.This issue affects Booking Activities: from n/a through = 1.16.44...

8.1CVSS0.00392EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2026/01/22 4:51 p.m.•7 views

CVE-2025-67953

Incorrect Privilege Assignment vulnerability in Booking Activities Team Booking Activities booking-activities allows Privilege Escalation.This issue affects Booking Activities: from n/a through = 1.16.44...

8.1CVSS5.3AI score0.00392EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2026/01/22 4:51 p.m.•33 views

CVE-2025-67953 WordPress Booking Activities plugin <= 1.16.44 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in Booking Activities Team Booking Activities booking-activities allows Privilege Escalation.This issue affects Booking Activities: from n/a through = 1.16.44...

8.1CVSS0.00392EPSS
SaveExploits1References1
CVE
CVE
•added 2026/01/22 4:51 p.m.•39 views

CVE-2025-67953

The Booking Activities WordPress plugin (versions

8.1CVSS5.4AI score0.00392EPSS
SaveIn wildExploits1References1
Rows per page
Query Builder