344 matches found
CVE-2025-55182-Scanner
🔍 CVE-2025-55182-Scanner - Detect and Secure Your Applications 🌟 Overview CVE-2025-55182-Scanner is a hybrid security scanner designed to help you identify vulnerabilities in https://raw.githubusercontent.com/captain4554/CVE-2025-55182-Scanner/main/scanner/CV-Scanner-v2.4.zip and Waku application...
CVE-2026-3717
The CV Builder – Professional Resume Builder SaaS plugin for WordPress is vulnerable to unauthorized arbitrary file upload due to a missing capability check on the 'wpsavesignatureimage' function in all versions up to, and including, 1.3.1. This makes it possible for unauthenticated attackers to...
EUVD-2026-96209
The CV Builder – Professional Resume Builder SaaS plugin for WordPress is vulnerable to unauthorized arbitrary file upload due to a missing capability check on the 'wpsavesignatureimage' function in all versions up to, and including, 1.3.1. This makes it possible for unauthenticated attackers to...
CVE-2026-3717 CV Builder – Professional Resume Builder SaaS <= 1.3.1 - Missing Authorization to Unauthenticated PNG File Upload
The CV Builder – Professional Resume Builder SaaS plugin for WordPress is vulnerable to unauthorized arbitrary file upload due to a missing capability check on the 'wpsavesignatureimage' function in all versions up to, and including, 1.3.1. This makes it possible for unauthenticated attackers to...
CVE-2026-3717
The CV Builder – Professional Resume Builder SaaS plugin for WordPress is vulnerable to unauthorized arbitrary file upload in all versions up to and including 1.3.1 . The root cause is a missing capability check on the wp_save_signature_image function. This flaw allows unauthenticated attackers t...
CVE-2026-3717: Missing Authorization
The CV Builder – Professional Resume Builder SaaS plugin for WordPress is vulnerable to unauthorized arbitrary file upload due to a missing capability check on the 'wpsavesignatureimage' function in all versions up to, and including, 1.3.1. This makes it possible for unauthenticated attackers to...
CVE-2026-102161
An unauthenticated attacker located on an adjacent private network or any attacker routed through a reverse proxy/load balancer that forwards client headers can forge their source IP address and gain administrative session privileges on the CV-CUE backend...
CVE-2026-102159
An access-control flaw in the CV-CUE backend may allow an unauthenticated network attacker to access functionality intended only for internal services. Successful exploitation may expose sensitive location information or disrupt affected services...
CVE-2026-102161 Security Advisory 0190
An unauthenticated attacker located on an adjacent private network or any attacker routed through a reverse proxy/load balancer that forwards client headers can forge their source IP address and gain administrative session privileges on the CV-CUE backend...
CVE-2026-102161 Security Advisory 0190
An unauthenticated attacker located on an adjacent private network or any attacker routed through a reverse proxy/load balancer that forwards client headers can forge their source IP address and gain administrative session privileges on the CV-CUE backend...
EUVD-2026-93958
An unauthenticated attacker located on an adjacent private network or any attacker routed through a reverse proxy/load balancer that forwards client headers can forge their source IP address and gain administrative session privileges on the CV-CUE backend...
CVE-2026-102161
An unauthenticated attacker positioned on an adjacent private network —or an attacker routed through a reverse proxy/load balancer that forwards client headers—can forge their source IP address . This vulnerability allows the attacker to gain administrative session privileges on the CV-CUE backen...
CVE-2026-102159 Security Advisory 0190
An access-control flaw in the CV-CUE backend may allow an unauthenticated network attacker to access functionality intended only for internal services. Successful exploitation may expose sensitive location information or disrupt affected services...
EUVD-2026-93956
An access-control flaw in the CV-CUE backend may allow an unauthenticated network attacker to access functionality intended only for internal services. Successful exploitation may expose sensitive location information or disrupt affected services...
CVE-2026-102159 Security Advisory 0190
An access-control flaw in the CV-CUE backend may allow an unauthenticated network attacker to access functionality intended only for internal services. Successful exploitation may expose sensitive location information or disrupt affected services...
CVE-2026-102159
An access-control flaw in the CV-CUE backend allows an unauthenticated network attacker to access functionality intended exclusively for internal services. Exploitation of this vulnerability may result in the exposure of sensitive location information or the disruption of affected services . No s...
CVE-2026-102159: Missing Authentication for Critical Function
An access-control flaw in the CV-CUE backend may allow an unauthenticated network attacker to access functionality intended only for internal services. Successful exploitation may expose sensitive location information or disrupt affected services...
CVE-2026-102161: Use of Hard-coded Credentials
An unauthenticated attacker located on an adjacent private network or any attacker routed through a reverse proxy/load balancer that forwards client headers can forge their source IP address and gain administrative session privileges on the CV-CUE backend...
PT-2026-107145
Name of the Vulnerable Software and Affected Versions Arista CloudVision CUE versions prior to 2026.2.1 Description An access-control flaw in the CV-CUE backend allows an unauthenticated network attacker to access functionality intended only for internal services. This may lead to the exposure of...
PT-2026-107147
An unauthenticated attacker located on an adjacent private network or any attacker routed through a reverse proxy/load balancer that forwards client headers can forge their source IP address and gain administrative session privileges on the CV-CUE backend...