Lucene search
+L

9205 matches found

RedhatCVE
RedhatCVE
•added 2026/01/01 5:33 p.m.•17 views

CVE-2025-62115

Missing Authorization vulnerability in ThemeBoy Hide Plugins hide-plugins allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hide Plugins: from n/a through = 1.0.4...

4.3CVSS5.9AI score0.0022EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/01 3:32 p.m.•20 views

CVE-2025-49334

Authorization Bypass Through User-Controlled Key vulnerability in Eduardo Villão MyD Delivery myd-delivery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MyD Delivery: from n/a through = 1.9...

5.3CVSS5.7AI score0.00241EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/01 12:00 a.m.•12 views

PT-2026-6159

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the ALSA subsystem, specifically in the snd usb mixer free function. When snd usb create mixer fails, the function frees mixer-id elems but the...

7.8CVSS7.1AI score0.00158EPSS
SaveExploits0
CNNVD
CNNVD
•added 2025/12/31 12:00 a.m.•17 views

WordPress plugin Questionar for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

5.4CVSS6.6AI score0.00245EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/12/31 12:00 a.m.•16 views

WordPress plugin Reuters Direct 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.3CVSS6.6AI score0.00254EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/12/31 12:00 a.m.•13 views

WordPress plugin Core Web Vitals & PageSpeed Booster 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.4CVSS6.5AI score0.00178EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/31 12:00 a.m.•13 views

PT-2025-54432

Name of the Vulnerable Software and Affected Versions merkulove Appender versions through 1.1.1 Description A missing authorization issue exists in merkulove Appender, allowing exploitation due to incorrectly configured access control security levels. Recommendations At the moment, there is no...

5.4CVSS5.7AI score0.00202EPSS
SaveExploits0References10
CNNVD
CNNVD
•added 2025/12/31 12:00 a.m.•22 views

WordPress plugin Couponer for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin... A security...

5.4CVSS6.6AI score0.00245EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/30 6:30 p.m.•13 views

EUVD-2025-205808

An issue was discovered in Zeroheight SaaS prior to 2025-06-13. A legacy user creation API pathway allowed accounts to be created without completing the intended email verification step. While unverified accounts could not access product functionality, the behavior bypassed intended verification...

6.2AI score0.00255EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/12/30 3:30 p.m.•21 views

EUVD-2023-60433

In the Linux kernel, the following vulnerability has been resolved: media: ov5675: Fix memleak in ov5675initcontrols There is a kmemleak when testing the media/i2c/ov5675.c with bpf mock device: AssertionError: unreferenced object 0xffff888107362160 size 16: comm "python3", pid 277, jiffies...

5.8AI score0.00205EPSS
SaveExploits0References7
EUVD
EUVD
•added 2025/12/30 12:30 p.m.•15 views

EUVD-2025-205721

Missing Authorization vulnerability in Marketing Fire Discussion Board wp-discussion-board allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Discussion Board: from n/a through = 2.5.7...

6.5AI score0.00181EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2025/12/30 12:11 p.m.•21 views

CVE-2023-54208

In the Linux kernel, the following vulnerability has been resolved: media: ov5675: Fix memleak in ov5675initcontrols There is a kmemleak when testing the media/i2c/ov5675.c with bpf mock device: AssertionError: unreferenced object 0xffff888107362160 size 16: comm "python3", pid 277, jiffies...

5.8AI score0.00205EPSS
SaveExploits0
Cvelist
Cvelist
•added 2025/12/30 12:11 p.m.•45 views

CVE-2023-54208 media: ov5675: Fix memleak in ov5675_init_controls()

In the Linux kernel, the following vulnerability has been resolved: media: ov5675: Fix memleak in ov5675initcontrols There is a kmemleak when testing the media/i2c/ov5675.c with bpf mock device: AssertionError: unreferenced object 0xffff888107362160 size 16: comm "python3", pid 277, jiffies...

0.00205EPSS
SaveExploits0References6
CVE
CVE
•added 2025/12/30 12:11 p.m.•41 views

CVE-2023-54208

CVE-2023-54208 affects the Linux kernel media driver for ov5675, where ov5675_init_controls() leaks memory on failure paths. The full stack trace and memleak scenario involve v4l2_ctrl_handler_init_class and i2c/ov5675 probing, leading to a kmemleak when running tests with a BPF mock device. The ...

5.8AI score0.00205EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2025/12/30 12:00 a.m.•26 views

PT-2025-54194

Name of the Vulnerable Software and Affected Versions SiteLock versions through 5.0.1 Description A missing authorization issue exists in SiteLock Security, allowing exploitation of incorrectly configured access control security levels. Recommendations Update SiteLock to a version later than 5.0....

4.3CVSS6.5AI score0.00331EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/12/30 12:00 a.m.•10 views

PT-2025-53870

Name of the Vulnerable Software and Affected Versions WeDesignTech Portfolio versions through 1.0.2 Description An authorization issue exists in WeDesignTech Portfolio, allowing exploitation of incorrectly configured access control security levels. Recommendations Update WeDesignTech Portfolio to...

8.1CVSS6.6AI score0.00254EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/12/30 12:00 a.m.•11 views

WordPress plugin Discussion Board 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in PHP. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPress plugi...

4.3CVSS5.8AI score0.00181EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/12/30 12:00 a.m.•11 views

WordPress plugin Medicalequipment 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.3CVSS5.8AI score0.0027EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/12/30 12:00 a.m.•54 views

WordPress plugin Stratum 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

4.3CVSS5.8AI score0.0022EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/26 7:02 p.m.•24 views

CVE-2025-15084

A vulnerability was identified in youlaitech youlai-mall 1.0.0/2.0.0. The impacted element is the function orderService.payOrder of the file mall-oms/oms-boot/src/main/java/com/youlai/mall/oms/controller/app/OrderController.java of the component Order Payment Handler. The manipulation leads to...

3.1CVSS6.5AI score0.00287EPSS
SaveExploits1References1
Rows per page
Query Builder