103 matches found
EUVD-2019-6205
Malware in sbrugna...
EUVD-2024-16752
Malicious code in bioql PyPI...
EUVD-2025-3949
Malicious code in bioql PyPI...
EUVD-2024-16408
Malicious code in bioql PyPI...
EUVD-2022-25041
Malicious code in bioql PyPI...
EUVD-2023-43842
Malicious code in bioql PyPI...
EUVD-2022-51850
Malicious code in bioql PyPI...
EUVD-2024-54000
Malicious code in bioql PyPI...
CVE-2022-4509
The Content Control WordPress plugin before 1.1.10 does not validate and escapes some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as a contributor to perform Stored Cross-Site Scripting attacks, which could be used against high...
CVE-2022-1760
The Core Control WordPress plugin through 1.2.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...
CVE-2021-2008
Vulnerability in the Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager component: FMW Control Plugin. The supported version that is affected are 11.1.1.9 and 12.2.1.3 Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...
CVE-2019-15136
The Access Control plugin in eProsima Fast RTPS through 1.9.0 does not check partition permissions from remote participant connections, which can lead to policy bypass for a secure Data Distribution Service DDS partition...
WordPress Majestic Support plugin <= 1.1.0 - Broken Access Control Vulnerability
Broken Access Control Vulnerability discovered by LVT-tholv2k in WordPress Plugin Majestic Support versions = 1.1.0...
CVE-2025-31872 WordPress WP Clone any post type Plugin <= 3.6 - Broken Access Control vulnerability
Missing Authorization vulnerability in Galaxy Weblinks WP Clone any post type wp-clone-any-post-type allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Clone any post type: from n/a through = 3.6...
CVE-2024-13836
The WP Login Control WordPress plugin through 2.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
CVE-2024-11153
The WordPress plugin Content Control (The Ultimate Content Restriction Plugin) is affected by CVE-2024-11153: an unauthenticated bypass that allows sensitive information exposure via the WordPress core search feature in all versions up to and including 2.5.0. Wordfence and CVE records describe th...
CVE-2025-24807
eprosima Fast DDS is a C++ implementation of the DDS Data Distribution Service standard of the OMG Object Management Group. Prior to versions 2.6.10, 2.10.7, 2.14.5, 3.0.2, 3.1.2, and 3.2.0, per design, PermissionsCA is not full chain validated, nor is the expiration date validated. Access contro...
CVE-2025-24807
eprosima Fast DDS is a C++ implementation of the DDS Data Distribution Service standard of the OMG Object Management Group. Prior to versions 2.6.10, 2.10.7, 2.14.5, 3.0.2, 3.1.2, and 3.2.0, per design, PermissionsCA is not full chain validated, nor is the expiration date validated. Access contro...
CVE-2024-8672: Improper Control of Generation of Code
The Widget Options – The 1 WordPress Widget & Block Control Plugin plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.0.7 via the display logic functionality that extends several page builders. This is due to the plugin allowing users to supply inp...
CVE-2024-21191: Undefined Security Weakness
Vulnerability in the Oracle Enterprise Manager Fusion Middleware Control product of Oracle Fusion Middleware component: FMW Control Plugin. The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...