Lucene search
+L

8338 matches found

RedhatCVE
RedhatCVE
added 2026/01/01 5:33 p.m.7 views

CVE-2025-62115

Missing Authorization vulnerability in ThemeBoy Hide Plugins hide-plugins allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hide Plugins: from n/a through = 1.0.4...

4.3CVSS5.9AI score0.00206EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/01 3:32 p.m.8 views

CVE-2025-49334

Authorization Bypass Through User-Controlled Key vulnerability in Eduardo Villão MyD Delivery myd-delivery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MyD Delivery: from n/a through = 1.9...

5.3CVSS5.7AI score0.00211EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.5 views

PT-2026-6159

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the ALSA subsystem, specifically in the snd usb mixer free function. When snd usb create mixer fails, the function frees mixer-id elems but the...

7.8CVSS6AI score0.00135EPSS
SaveExploits0
CNNVD
CNNVD
added 2025/12/31 12:0 a.m.5 views

WordPress plugin Core Web Vitals & PageSpeed Booster 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.4CVSS6.5AI score0.00156EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/31 12:0 a.m.5 views

PT-2025-54432

Name of the Vulnerable Software and Affected Versions merkulove Appender versions through 1.1.1 Description A missing authorization issue exists in merkulove Appender, allowing exploitation due to incorrectly configured access control security levels. Recommendations At the moment, there is no...

5.4CVSS6.3AI score0.00176EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/12/31 12:0 a.m.8 views

WordPress plugin Reuters Direct 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.3CVSS6.6AI score0.00222EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/31 12:0 a.m.7 views

WordPress plugin Questionar for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

5.4CVSS6.6AI score0.00229EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/31 12:0 a.m.13 views

WordPress plugin Couponer for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin... A security...

5.4CVSS6.6AI score0.00229EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/30 6:30 p.m.5 views

EUVD-2025-205808

An issue was discovered in Zeroheight SaaS prior to 2025-06-13. A legacy user creation API pathway allowed accounts to be created without completing the intended email verification step. While unverified accounts could not access product functionality, the behavior bypassed intended verification...

6.2AI score0.00223EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/12/30 3:30 p.m.7 views

EUVD-2023-60433

In the Linux kernel, the following vulnerability has been resolved: media: ov5675: Fix memleak in ov5675initcontrols There is a kmemleak when testing the media/i2c/ov5675.c with bpf mock device: AssertionError: unreferenced object 0xffff888107362160 size 16: comm "python3", pid 277, jiffies...

5.9AI score0.00179EPSS
SaveExploits0References7
EUVD
EUVD
added 2025/12/30 12:30 p.m.5 views

EUVD-2025-205721

Missing Authorization vulnerability in Marketing Fire Discussion Board wp-discussion-board allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Discussion Board: from n/a through = 2.5.7...

6.5AI score0.00158EPSS
SaveExploits0References2
CVE
CVE
added 2025/12/30 12:11 p.m.18 views

CVE-2023-54208

CVE-2023-54208 affects the Linux kernel media driver for ov5675, where ov5675_init_controls() leaks memory on failure paths. The full stack trace and memleak scenario involve v4l2_ctrl_handler_init_class and i2c/ov5675 probing, leading to a kmemleak when running tests with a BPF mock device. The ...

6.1AI score0.00179EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2025/12/30 12:11 p.m.26 views

CVE-2023-54208 media: ov5675: Fix memleak in ov5675_init_controls()

In the Linux kernel, the following vulnerability has been resolved: media: ov5675: Fix memleak in ov5675initcontrols There is a kmemleak when testing the media/i2c/ov5675.c with bpf mock device: AssertionError: unreferenced object 0xffff888107362160 size 16: comm "python3", pid 277, jiffies...

0.00179EPSS
SaveExploits0References6
Debian CVE
Debian CVE
added 2025/12/30 12:11 p.m.7 views

CVE-2023-54208

In the Linux kernel, the following vulnerability has been resolved: media: ov5675: Fix memleak in ov5675initcontrols There is a kmemleak when testing the media/i2c/ov5675.c with bpf mock device: AssertionError: unreferenced object 0xffff888107362160 size 16: comm "python3", pid 277, jiffies...

5.3AI score0.00179EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/12/30 12:0 a.m.18 views

PT-2025-54194

Name of the Vulnerable Software and Affected Versions SiteLock versions through 5.0.1 Description A missing authorization issue exists in SiteLock Security, allowing exploitation of incorrectly configured access control security levels. Recommendations Update SiteLock to a version later than 5.0....

4.3CVSS6.5AI score0.00278EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/12/30 12:0 a.m.5 views

PT-2025-53870

Name of the Vulnerable Software and Affected Versions WeDesignTech Portfolio versions through 1.0.2 Description An authorization issue exists in WeDesignTech Portfolio, allowing exploitation of incorrectly configured access control security levels. Recommendations Update WeDesignTech Portfolio to...

8.1CVSS6.6AI score0.00222EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/12/30 12:0 a.m.5 views

WordPress plugin Medicalequipment 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.3CVSS5.8AI score0.00236EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/30 12:0 a.m.44 views

WordPress plugin Stratum 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

4.3CVSS5.8AI score0.00192EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/30 12:0 a.m.5 views

WordPress plugin Discussion Board 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in PHP. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPress plugi...

4.3CVSS5.8AI score0.00158EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/26 7:2 p.m.17 views

CVE-2025-15084

A vulnerability was identified in youlaitech youlai-mall 1.0.0/2.0.0. The impacted element is the function orderService.payOrder of the file mall-oms/oms-boot/src/main/java/com/youlai/mall/oms/controller/app/OrderController.java of the component Order Payment Handler. The manipulation leads to...

3.1CVSS6.5AI score0.00249EPSS
SaveExploits1References1
Rows per page
Query Builder