Lucene search
+L

84 matches found

Vulnrichment
Vulnrichment
added 2025/05/30 4:32 a.m.10 views

CVE-2025-48478 FreeScout Has Business Logic Errors

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, insufficient input validation during user creation has resulted in a mass assignment vulnerability, allowing an attacker to manipulate all fields of the object, which are enumerated in the $fillable array the...

7CVSS6.8AI score0.00418EPSS
SaveExploits1References2
OSV
OSV
added 2025/05/23 1:15 p.m.8 views

CVE-2025-47539

Incorrect Privilege Assignment vulnerability in Themewinter Eventin allows Privilege Escalation. This issue affects Eventin: from n/a through 4.0.26...

9.8CVSS5.8AI score0.33199EPSS
SaveExploits4References1
CNNVD
CNNVD
added 2025/04/09 12:00 a.m.5 views

WordPress plugin Checkout Mestres WP 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

9.8CVSS8.7AI score0.00545EPSS
SaveExploits0References1
CVE
CVE
added 2025/02/26 1:54 a.m.81 views

CVE-2022-49056

CVE-2022-49056 entry is rejected/not used per the Initial Description.

5.4AI score
SaveExploits0
CNNVD
CNNVD
added 2025/02/03 12:00 a.m.11 views

WordPress plugin Admin and Site Enhancements Pro 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

7.5CVSS9AI score0.00428EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/01/22 12:00 a.m.13 views

The vulnerability of the Boost library in the Mercedes-Benz MBUX multimedia system, related to the manipulation of the zero pointer, allows a intruder to compromise the accessibility of protected information.

The vulnerability of the Boost library in the Mercedes-Benz MBUX multimedia system is related to a pointer assignment error. Exploiting this vulnerability could allow an attacker to compromise the accessibility of the protected information...

5.5CVSS7.2AI score0.00662EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/01/16 12:00 a.m.25 views

WordPress plugin DD Roles 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

8.8CVSS8.2AI score0.00554EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/09 12:00 a.m.6 views

Drupal 安全漏洞

Drupal is an open source content management system developed in the PHP language by the Drupal community. A security vulnerability exists in Drupal Registration role prior to version 2.0.1, which stems from the inclusion of a privilege assignment error vulnerability...

8.8CVSS6.8AI score0.00362EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/07 12:00 a.m.7 views

WordPress plugin Accessibility by AllAccessible 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

8.8CVSS8.1AI score0.00406EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/31 12:00 a.m.11 views

WordPress plugin WPLMS 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

9.8CVSS8.7AI score0.00626EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/31 12:00 a.m.6 views

WordPress plugin SSL Wireless SMS Notification 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...

9.8CVSS8.1AI score0.0046EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/26 12:00 a.m.7 views

Honor MagicOS 安全漏洞

Honor MagicOS is a mobile device operating system from Chinese company Honor Honor. A security vulnerability exists in Honor MagicOS version 8.0.1.112, which stems from the presence of a privilege assignment error and can be successfully exploited to cause a device service exception...

5.5CVSS6.6AI score0.00135EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/26 12:00 a.m.7 views

Honor MagicOS 安全漏洞

Honor MagicOS is a mobile device operating system from Chinese company Honor Honor. A security vulnerability exists in Honor MagicOS version 8.0.0.64, which stems from the presence of a privilege assignment error, and successful exploitation may result in a device service exception...

5.5CVSS6.8AI score0.00149EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/26 12:00 a.m.8 views

Honor MagicOS 安全漏洞

Honor MagicOS is a mobile device operating system by Chinese company Honor Honor. A security vulnerability exists in Honor MagicOS version 8.0.0.157, which stems from a privilege assignment error and can be successfully exploited to cause a device service exception...

5.5CVSS6.6AI score0.00119EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/24 12:00 a.m.9 views

Trend Micro Deep Security 安全漏洞

Trend Micro Deep Security is a server deep security protection system client from Trend Micro. A security vulnerability exists in Trend Micro Deep Security that stems from the inclusion of a privilege assignment error vulnerability that could allow a local attacker to elevate the privileges of an...

7.3CVSS6.3AI score0.00135EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/12/16 12:00 a.m.10 views

WordPress plugin SV100 Companion 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

9.8CVSS6.7AI score0.00434EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/13 12:00 a.m.4 views

WordPress plugin CE21 Suite 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

9.8CVSS8.5AI score0.00621EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/12/04 12:00 a.m.7 views

QNAP Notes Station 3 Resource Privilege Assignment Error Vulnerability

QNAP Notes Station 3 is a private cloud notes software that runs on QNAP NAS devices and supports real-time multi-person collaboration, version control, data encryption and snapshot backup. QNAP Notes Station 3 suffers from a Resource Privilege Assignment Error vulnerability that stems from the...

8.4CVSS7AI score0.00177EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/11/29 12:00 a.m.24 views

The vulnerability of the installer for Intel Advanced Link Analyzer, a tool for analyzing and optimizing network connections, allows a hacker to enhance their privileges.

The vulnerability of the Intel Advanced Link Analyzer, a tool for analyzing and optimizing network connections, is related to errors in privilege assignment. Exploiting this vulnerability can allow attackers to enhance their privileges...

6.7CVSS5.5AI score0.0015EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/27 12:00 a.m.12 views

The vulnerability of the wmi_char_open() function in Linux operating system kernels, which allows a hacker to cause a service failure

The vulnerability of the wmicharopen function in Linux operating system kernels is related to the lack of binding of the driver to the device due to a pointer assignment error. Exploiting this vulnerability can allow an attacker to trigger a service failure...

5.5CVSS6.4AI score0.00266EPSS
SaveExploits0References24Affected Software5
Rows per page
Query Builder