Lucene search
K

12 matches found

CNNVD
CNNVD
added 2026/02/27 12:0 a.m.8 views

Keycloak 安全漏洞

Keycloak is an open-source identity and access management solution developed by Keycloak. Keycloak has a security vulnerability, which stems from improper access control. This vulnerability could allow administrators with the manage-users permission to bypass settings and modify unmanaged...

4.9CVSS5.8AI score0.00307EPSS
Exploits0References4
NVD
NVD
added 2025/05/18 5:15 a.m.18 views

CVE-2025-4859

A vulnerability was found in D-Link DAP-2695 120b36r137ALLen20210528. It has been rated as problematic. This issue affects some unknown processing of the file /advmacbypass.php of the component MAC Bypass Settings Page. The manipulation of the argument fmac leads to cross site scripting. The atta...

4.8CVSS0.00693EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/05/18 4:31 a.m.8 views

CVE-2025-4859 D-Link DAP-2695 MAC Bypass Settings Page adv_macbypass.php cross site scripting

A vulnerability was found in D-Link DAP-2695 120b36r137ALLen20210528. It has been rated as problematic. This issue affects some unknown processing of the file /advmacbypass.php of the component MAC Bypass Settings Page. The manipulation of the argument fmac leads to cross site scripting. The atta...

4.8CVSS3.5AI score0.00693EPSS
Exploits1References5
CVE
CVE
added 2025/05/18 4:31 a.m.39 views

CVE-2025-4859

CVE-2025-4859 affects D-Link DAP-2695, specifically the MAC Bypass Settings Page file /adv_macbypass.php where the f_mac parameter can be manipulated to trigger cross-site scripting. Publicly disclosed exploitation exists; the issue arises from insufficient input filtering/escaping, and it may be...

4.8CVSS6.4AI score0.00693EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/05/18 4:31 a.m.24 views

CVE-2025-4859 D-Link DAP-2695 MAC Bypass Settings Page adv_macbypass.php cross site scripting

A vulnerability was found in D-Link DAP-2695 120b36r137ALLen20210528. It has been rated as problematic. This issue affects some unknown processing of the file /advmacbypass.php of the component MAC Bypass Settings Page. The manipulation of the argument fmac leads to cross site scripting. The atta...

4.8CVSS0.00693EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/05/18 12:0 a.m.4 views

PT-2025-21829 · D Link · D-Link Dap-2695

Name of the Vulnerable Software and Affected Versions: D-Link DAP-2695 version 120b36r137 ALL en 20210528 Description: A vulnerability was found in the MAC Bypass Settings Page, specifically affecting the file /adv macbypass.php. The manipulation of the argument f mac leads to cross-site scriptin...

4.8CVSS3.3AI score0.00693EPSS
Exploits1References10
Cvelist
Cvelist
added 2024/10/08 8:33 a.m.30 views

CVE-2022-4534 Limit Login Attempts (Spam Protection) <= 5.3 - IP Address Spoofing to Protection Mechanism Bypass

The Limit Login Attempts Spam Protection plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 5.3. This is due to insufficient restrictions on where the IP Address information is being retrieved for request logging and login restrictions. Attackers can suppl...

5.3CVSS0.00332EPSS
Exploits0References3
NVD
NVD
added 2024/08/31 9:15 a.m.15 views

CVE-2022-4536

The IP Vault – WP Firewall plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 1.1. This is due to insufficient restrictions on where the IP Address information is being retrieved for request logging and login restrictions. Attackers can supply the...

5.3CVSS0.00242EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/07/29 12:0 a.m.4 views

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS Monterey versions prior to 12.7.6, which stems from Shortcuts may be able to bypass sensitive Shortcuts application settings...

4.4CVSS6.1AI score0.00253EPSS
Exploits0References4
Cvelist
Cvelist
added 2023/05/09 2:47 a.m.20 views

CVE-2022-4537 Hide My WP Ghost – Security Plugin <= 5.0.18 - IP Address Spoofing to Protection Mechanism Bypass

The Hide My WP Ghost – Security Plugin plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 5.0.18. This is due to insufficient restrictions on where the IP Address information is being retrieved for request logging and login restrictions. Attackers can supp...

6.5CVSS6.5AI score0.0032EPSS
Exploits0References3
OSV
OSV
added 2017/10/23 1:29 a.m.4 views

CVE-2017-7084

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "Application Firewall" component. It allows remote attackers to bypass intended settings in opportunistic circumstances by leveraging incorrect handling of a denied setting after an upgrade...

3.7CVSS5.8AI score0.01153EPSS
Exploits0References3
seebug.org
seebug.org
added 2009/12/30 12:0 a.m.32 views

Diesel Job Site 1.4 Multiple Vulnerabilities

No description provided by source. ======================================================================================== | Title : Diesel Job Site 1.4 Multiple Vulnerabilities | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria...

7.1AI score
Exploits0
Rows per page
Query Builder