Lucene search
+L

6031 matches found

osv_cve
osv_cve
•added 2026/02/20 5:25 p.m.•15 views

CVE-2026-26100

Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network request...

5.5CVSS5.8AI score0.00153EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2026/02/20 5:25 p.m.•19 views

CVE-2026-26096

Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network request...

5.5CVSS5.8AI score0.00153EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/02/20 4:56 p.m.•13 views

CVE-2026-26102

Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network request...

8.5CVSS5.8AI score0.0017EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/02/20 4:55 p.m.•53 views

CVE-2026-26101 Incorrect Permission Assignment for Critical Resource in Owl opds

Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network request...

8.5CVSS0.0017EPSS
SaveExploits0References1
CVE
CVE
•added 2026/02/20 4:55 p.m.•55 views

CVE-2026-26100

CVE-2026-26100 concerns Owl opds, version 2.2.0.4, where incorrect permission assignment of a critical resource enables file manipulation via a crafted network request. The CVE entry documents a MEDIUM-severity issue with CVSS 4.0, scoped as local access, low attack complexity, and no user intera...

6.8CVSS5.8AI score0.00153EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2026/02/20 4:52 p.m.•13 views

CVE-2026-26096

Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network request...

8.5CVSS5.8AI score0.00153EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/02/20 4:52 p.m.•43 views

CVE-2026-26096 Incorrect Permission Assignment for Critical Resource in Owl opds

Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network request...

8.5CVSS0.00153EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/02/20 4:51 p.m.•14 views

CVE-2026-26095

Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network request...

8.5CVSS5.8AI score0.00153EPSS
SaveExploits0References2
NVD
NVD
•added 2026/02/20 4:22 p.m.•21 views

CVE-2025-69378

Incorrect Privilege Assignment vulnerability in XforWooCommerce Product Filter for WooCommerce prdctfltr allows Privilege Escalation.This issue affects Product Filter for WooCommerce: from n/a through = 9.1.2...

7.2CVSS0.00471EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/02/20 3:46 p.m.•8 views

CVE-2025-69378 WordPress Product Filter for WooCommerce plugin <= 9.1.2 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in XforWooCommerce Product Filter for WooCommerce prdctfltr allows Privilege Escalation.This issue affects Product Filter for WooCommerce: from n/a through = 9.1.2...

7.2CVSS5.8AI score0.00471EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/02/20 1:25 p.m.•16 views

CVE-2026-22267

Dell PowerProtect Data Manager, versions prior to 19.22, contains an Incorrect Privilege Assignment vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

8.8CVSS6AI score0.00458EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/02/20 6:41 a.m.•16 views

CVE-2017-4582

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...

5.8AI score
SaveExploits0References1
attackerkb
attackerkb
•added 2026/02/20 6:29 a.m.•5 views

CVE-2017-4217

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...

5.8AI score
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/20 12:00 a.m.•4 views

CVE-2025-69378: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in XforWooCommerce Product Filter for WooCommerce prdctfltr allows Privilege Escalation.This issue affects Product Filter for WooCommerce: from n/a through = 9.1.2...

7.2CVSS5.8AI score0.00471EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2026/02/20 12:00 a.m.•11 views

VulnCheck KEV: CVE-2026-27542

Incorrect Privilege Assignment vulnerability in Rymera Web Co Pty Ltd. Woocommerce Wholesale Lead Capture woocommerce-wholesale-lead-capture allows Privilege Escalation.This issue affects Woocommerce Wholesale Lead Capture: from n/a through = 2.0.3.1...

9.8CVSS5.9AI score0.01775EPSS
SaveIn wildExploits1References4
VulnCheck KEV
VulnCheck KEV
•added 2026/02/20 12:00 a.m.•25 views

VulnCheck KEV: CVE-2026-27541

Incorrect Privilege Assignment vulnerability in Josh Kohlbach Wholesale Suite woocommerce-wholesale-prices allows Privilege Escalation.This issue affects Wholesale Suite: from n/a through = 2.2.6...

7.2CVSS5.8AI score0.00376EPSS
SaveIn wildExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/20 12:00 a.m.•9 views

CVE-2026-26096: Incorrect Permission Assignment for Critical Resource

Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network request...

8.5CVSS5.8AI score0.00153EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/02/20 12:00 a.m.•29 views

PT-2026-21269

Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network request...

8.5CVSS5.8AI score0.0017EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/02/19 11:38 p.m.•12 views

Incorrect Privilege Assignment

Overview Affected versions of this package are vulnerable to Incorrect Privilege Assignment due to incorrect handling of network traffic permissions when certain network configurations, such as Native Routing, WireGuard, and Node Encryption, are enabled. An attacker can gain unauthorized access t...

6.1CVSS8.2AI score0.00183EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
•added 2026/02/19 8:31 p.m.•26 views

Formwork Improperly Managed Privileges in User creation

Summary The application fails to properly enforce role-based authorization during account creation. Although the system validates that the specified role exists, it does not verify whether the current user has sufficient privileges to assign highly privileged roles such as admin. As a result, an...

8.8CVSS5.7AI score0.00588EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder