Lucene search
+L

728 matches found

RedhatCVE
RedhatCVE
•added 2025/08/16 7:23 p.m.•20 views

CVE-2025-54715

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Dmitry V. CEO of "UKR Solution" Barcode Scanner with Inventory & Order Manager barcode-scanner-lite-pos-to-manage-products-inventory-and-orders allows Path Traversal.This issue affects Barcode Scanner wi...

4.9CVSS5.9AI score0.00403EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/08/15 12:00 a.m.•10 views

SAP NetWeaver AS ABAP Multiple Vulnerabilities (August 2025)

The remote SAP NetWeaver ABAP server may be affected by multiple vulnerabilies. - The SAP NetWeaver Application Server for ABAP does not enable an administrator to assign distinguished authorizations for different user roles, this issue allows authenticated users to access restricted objects in t...

6.1CVSS5.3AI score0.00231EPSS
SaveExploits0References5
NVD
NVD
•added 2025/08/14 7:15 p.m.•12 views

CVE-2025-54715

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Dmitry V. CEO of "UKR Solution" Barcode Scanner with Inventory & Order Manager barcode-scanner-lite-pos-to-manage-products-inventory-and-orders allows Path Traversal.This issue affects Barcode Scanner wi...

4.9CVSS0.00403EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•4 views

Malicious code in barcode-ognjetina (npm)

The package barcode-ognjetina was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
•added 2025/08/14 6:52 p.m.•2 views

MAL-2025-15466 Malicious code in barcode-ognjetina (npm)

The package barcode-ognjetina was found to contain malicious code...

7.2AI score
SaveExploits0
Cvelist
Cvelist
•added 2025/08/14 6:21 p.m.•26 views

CVE-2025-54715 WordPress Barcode Scanner with Inventory & Order Manager Plugin <= 1.9.0 - Arbitrary File Download Vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Dmitry V. CEO of "UKR Solution" Barcode Scanner with Inventory & Order Manager barcode-scanner-lite-pos-to-manage-products-inventory-and-orders allows Path Traversal.This issue affects Barcode Scanner wi...

4.9CVSS0.00403EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/08/14 6:21 p.m.•6 views

CVE-2025-54715 WordPress Barcode Scanner with Inventory & Order Manager Plugin <= 1.9.0 - Arbitrary File Download Vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Dmitry V. CEO of "UKR Solution" Barcode Scanner with Inventory & Order Manager allows Path Traversal. This issue affects Barcode Scanner with Inventory & Order Manager: from n/a through 1.9.0...

4.9CVSS7AI score0.00403EPSS
SaveExploits0References1
CVE
CVE
•added 2025/08/14 6:21 p.m.•32 views

CVE-2025-54715

CVE-2025-54715 concerns the WordPress plugin Barcode Scanner with Inventory & Order Manager (Barcode Scanner

4.9CVSS5.9AI score0.00403EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/08/14 2:52 p.m.•18 views

WordPress Barcode Scanner with Inventory & Order Manager Plugin <= 1.9.0 - Arbitrary File Download Vulnerability

Arbitrary File Download Vulnerability discovered by domiee13 in WordPress Plugin Barcode Scanner with Inventory & Order Manager versions = 1.9.0...

4.9CVSS6.6AI score0.00403EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2025/08/14 2:24 a.m.•39 views

CVE-2025-42936

The SAP NetWeaver Application Server for ABAP does not enable an administrator to assign distinguished authorizations for different user roles, this issue allows authenticated users to access restricted objects in the barcode interface, leading to privilege escalation. This results in a low impac...

5.4CVSS7AI score0.00196EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/08/14 12:00 a.m.•12 views

WordPress plugin Barcode Scanner with Inventory & Order Manager 路径遍历漏洞

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal vulnerability exists in the WordPress plugin Barcode Scanner with Inventory & Order...

4.9CVSS6.8AI score0.00403EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/08/14 12:00 a.m.•22 views

PT-2025-33383 · Unknown · Barcode Scanner With Inventory & Order Manager

Name of the Vulnerable Software and Affected Versions: Barcode Scanner with Inventory & Order Manager versions through 1.9.0 Description: The software contains a Path Traversal issue due to improper limitation of a pathname to a restricted directory. This allows attackers to traverse directory...

4.9CVSS6.4AI score0.00403EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/14 12:00 a.m.•1 views

CVE-2025-54715: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Dmitry V. CEO of "UKR Solution" Barcode Scanner with Inventory & Order Manager barcode-scanner-lite-pos-to-manage-products-inventory-and-orders allows Path Traversal.This issue affects Barcode Scanner wi...

4.9CVSS5.8AI score0.00403EPSS
SaveExploits0References1
OSV
OSV
•added 2025/08/12 3:15 a.m.•13 views

CVE-2025-42936

The SAP NetWeaver Application Server for ABAP does not enable an administrator to assign distinguished authorizations for different user roles, this issue allows authenticated users to access restricted objects in the barcode interface, leading to privilege escalation. This results in a low impac...

5.4CVSS5.8AI score0.00196EPSS
SaveExploits0References2
NVD
NVD
•added 2025/08/12 3:15 a.m.•10 views

CVE-2025-42936

The SAP NetWeaver Application Server for ABAP does not enable an administrator to assign distinguished authorizations for different user roles, this issue allows authenticated users to access restricted objects in the barcode interface, leading to privilege escalation. This results in a low impac...

5.4CVSS0.00196EPSS
SaveExploits0References2
CVE
CVE
•added 2025/08/12 2:05 a.m.•48 views

CVE-2025-42936

CVE-2025-42936 affects SAP NetWeaver Application Server for ABAP. The root cause is missing support for distinguishing authorizations across roles, allowing authenticated users to access restricted objects in the barcode interface and causing privilege escalation. Impact is described as low for c...

5.4CVSS7AI score0.00196EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2025/08/12 2:05 a.m.•27 views

CVE-2025-42936 Missing Authorization check in SAP NetWeaver Application Server for ABAP

The SAP NetWeaver Application Server for ABAP does not enable an administrator to assign distinguished authorizations for different user roles, this issue allows authenticated users to access restricted objects in the barcode interface, leading to privilege escalation. This results in a low impac...

5.4CVSS0.00196EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/08/12 2:05 a.m.•5 views

CVE-2025-42936 Missing Authorization check in SAP NetWeaver Application Server for ABAP

The SAP NetWeaver Application Server for ABAP does not enable an administrator to assign distinguished authorizations for different user roles, this issue allows authenticated users to access restricted objects in the barcode interface, leading to privilege escalation. This results in a low impac...

5.4CVSS7AI score0.00196EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/12 12:00 a.m.•1 views

CVE-2025-42936: Incorrect Privilege Assignment

The SAP NetWeaver Application Server for ABAP does not enable an administrator to assign distinguished authorizations for different user roles, this issue allows authenticated users to access restricted objects in the barcode interface, leading to privilege escalation. This results in a low impac...

5.4CVSS5.8AI score0.00196EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/08/12 12:00 a.m.•12 views

PT-2025-32602 · Sap · Sap Netweaver Application Server Abap

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server for ABAP affected versions not specified Description: The application server does not allow administrators to assign distinguished authorizations for different user roles. This allows authenticated users to...

5.4CVSS6.8AI score0.00196EPSS
SaveExploits0References6
Rows per page
Query Builder