Lucene search
K

14 matches found

RedhatCVE
RedhatCVE
added 2026/01/14 12:26 p.m.1 views

CVE-2025-59022

Backend users who had access to the recycler module could delete arbitrary data from any database table defined in the TCA - regardless of whether they had permission to that particular table. This allowed attackers to purge and destroy critical site data, effectively rendering the website...

8.1CVSS6.8AI score0.0002EPSS
Exploits0References1
OSV
OSV
added 2026/01/13 12:15 p.m.2 views

CVE-2025-59022

Backend users who had access to the recycler module could delete arbitrary data from any database table defined in the TCA - regardless of whether they had permission to that particular table. This allowed attackers to purge and destroy critical site data, effectively rendering the website...

8.1CVSS6.8AI score
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/01/13 12:0 a.m.5 views

PT-2026-2476

Backend users who had access to the recycler module could delete arbitrary data from any database table defined in the TCA - regardless of whether they had permission to that particular table. This allowed attackers to purge and destroy critical site data, effectively rendering the website...

7.1CVSS6.8AI score0.0002EPSS
Exploits0References8
CNNVD
CNNVD
added 2025/12/17 12:0 a.m.1 views

Mattermost Desktop App 安全漏洞

Mattermost Desktop App is a messaging desktop application from Mattermost Corporation, USA. A security vulnerability exists in Mattermost Desktop App versions prior to 6.0.0, which stems from failure to clean sensitive information from Mattermost logs and failure to purge data when the server...

3.3CVSS6.1AI score0.00017EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/11/14 12:0 a.m.2 views

Mattermost 安全漏洞

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. A security vulnerability exists in Mattermost versions 10.11.3 and prior to 10.11.x, 10.5.11 and prior to 10.5.x, and 10.12.0 and prior to 10.12.x. The vulnerability stems from failure to purge user...

4.9CVSS6.5AI score0.00044EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-27524

Malicious code in bioql PyPI...

4.3CVSS6.5AI score0.00032EPSS
Exploits0References6
RedhatCVE
RedhatCVE
added 2025/09/12 7:11 a.m.2 views

CVE-2025-9622

The WP Blast | SEO & Performance Booster plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.8.6. This is due to missing or incorrect nonce validation on multiple administrative actions in the Settings class. This makes it possible for...

4.3CVSS5.5AI score0.00032EPSS
Exploits0References1
NVD
NVD
added 2025/09/10 7:15 a.m.1 views

CVE-2025-9622

The WP Blast | SEO & Performance Booster plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.8.6. This is due to missing or incorrect nonce validation on multiple administrative actions in the Settings class. This makes it possible for...

4.3CVSS0.00032EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 2025/09/10 6:38 a.m.1 views

CVE-2025-9622 WP Blast | SEO & Performance Booster <= 1.8.6 - Cross-Site Request Forgery to Cache Clearing

The WP Blast | SEO & Performance Booster plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.8.6. This is due to missing or incorrect nonce validation on multiple administrative actions in the Settings class. This makes it possible for...

4.3CVSS5.1AI score0.00032EPSS
Exploits0References6
CVE
CVE
added 2025/09/10 6:38 a.m.9 views

CVE-2025-9622

The CVE-2025-9622 entry concerns WP Blast | SEO & Performance Booster for WordPress (WPBlast) with Cross-Site Request Forgery in versions up to 1.8.6 due to missing/incorrect nonce validation in the Settings class. Attack scenario: unauthenticated attackers can trigger cache purging, sitemap clea...

4.3CVSS5AI score0.00032EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2025/09/10 12:0 a.m.2 views

PT-2025-37022

Name of the Vulnerable Software and Affected Versions: WP Blast | SEO & Performance Booster plugin for WordPress versions up to and including 1.8.6 Description: The WP Blast | SEO & Performance Booster plugin for WordPress is susceptible to Cross-Site Request Forgery due to missing or incorrect...

4.3CVSS5.8AI score0.00032EPSS
Exploits0References9
CNNVD
CNNVD
added 2025/09/06 12:0 a.m.2 views

AMD Graphics Driver 安全漏洞

AMD Graphics Driver is an integrated graphics driver from UltraMicroelectronics AMD. A security vulnerability exists in AMD Graphics Driver that originates from failure to properly remove sensitive information prior to storage or transmission, which could lead to an attacker obtaining kernel...

3.3CVSS6.1AI score0.00122EPSS
Exploits1References1
The Hacker News
The Hacker News
added 2023/04/06 3:40 a.m.2 views

Google Mandates Android Apps to Offer Easy Account Deletion In-App and Online

Google is enacting a new data deletion policy for Android apps that allow account creation to also offer users with a setting to delete their accounts in an attempt to provide more transparency and control over their data. "For apps that enable app account creation, developers will soon need to...

6.4AI score
Exploits0
Packet Storm
Packet Storm
added 2013/06/21 12:0 a.m.22 views

Packet Storm Advisory 2013-0621 - Facebook Information Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 +------------------------------------------------------------------------------+ | Packet Storm Advisory 2013-0621 | | http://packetstormsecurity.com/ | +------------------------------------------------------------------------------+ | Title: Facebook...

7.4AI score
Exploits0
Rows per page
Query Builder