Lucene search
+L

3794 matches found

Cvelist
Cvelist
added 2024/08/18 9:36 p.m.53 views

CVE-2024-43239 WordPress Masteriyo LMS plugin <= 1.11.4 - Insecure Direct Object Reference (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through = 1.11.4...

4.3CVSS0.00292EPSS
SaveExploits0References1
NVD
NVD
added 2024/08/16 3:15 a.m.12 views

CVE-2023-7049

The Custom Field For WP Job Manager plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.2 via the the 'cmfieldshow' shortcode due to missing validation on the 'jobid' user controlled key. This makes it possible for authenticated attackers...

4.3CVSS0.00388EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2024/08/16 3:15 a.m.3 views

CVE-2023-7049

The Custom Field For WP Job Manager plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.2 via the the 'cmfieldshow' shortcode due to missing validation on the 'jobid' user controlled key. This makes it possible for authenticated attackers...

4.3CVSS5.4AI score0.00388EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/08/16 1:59 a.m.7 views

CVE-2023-7049 Custom Field For WP Job Manager <= 1.2 - Insecure Direct Object Reference to Sensitive Information Exposure via Shortcode

The Custom Field For WP Job Manager plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.2 via the the 'cmfieldshow' shortcode due to missing validation on the 'jobid' user controlled key. This makes it possible for authenticated attackers...

4.3CVSS6.5AI score0.00388EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/08/16 1:59 a.m.26 views

CVE-2023-7049 Custom Field For WP Job Manager <= 1.2 - Insecure Direct Object Reference to Sensitive Information Exposure via Shortcode

The Custom Field For WP Job Manager plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.2 via the the 'cmfieldshow' shortcode due to missing validation on the 'jobid' user controlled key. This makes it possible for authenticated attackers...

4.3CVSS0.00388EPSS
SaveExploits0References2
CVE
CVE
added 2024/08/16 1:59 a.m.42 views

CVE-2023-7049

CVE-2023-7049 affects the Custom Field For WP Job Manager WordPress plugin. It enables insecure direct object access via the cm_fieldshow shortcode, due to missing validation of the job_id parameter. All versions up to 1.2 are affected. Exploitation requires authenticated access at contributor le...

4.3CVSS4.4AI score0.00388EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2024/08/16 1:31 a.m.11 views

WordPress Custom Field For WP Job Manager plugin <= 1.2 - Insecure Direct Object Reference to Sensitive Information Exposure via Shortcode vulnerability

Insecure Direct Object Reference to Sensitive Information Exposure via Shortcode vulnerability discovered by Francesco Carlucci in WordPress Plugin Custom Field For WP Job Manager versions = 1.2...

4.3CVSS6.9AI score0.00388EPSS
SaveExploits0References1Affected Software1
Packet Storm
Packet Storm
added 2024/08/16 12:00 a.m.308 views

Bhojon Restaurant Management System 3.0 Insecure Direct Object Reference

==================================================================================================================================== | Title : Bhojon restaurant management system v3.0 IDOR Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 125.0.1 64...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2024/08/12 12:00 a.m.200 views

Farmacia Gama 1.0 Insecure Direct Object Reference

============================================================================================================================================= | Title : Farmacia Gama v1.0 IDOR Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 125.0.1 64 bits | |...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2024/08/09 12:00 a.m.289 views

Bhojon Restaurant Management System 2.8 Insecure Direct Object Reference

==================================================================================================================================== | Title : Bhojon restaurant management system v2.9 IDOR Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 125.0.1 64...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2024/08/07 12:00 a.m.320 views

AccPack Buzz 1.0 Insecure Direct Object Reference

============================================================================================================================================= | Title : AccPack Buzz v1.0 IDOR Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 125.0.1 64 bits | | Vend...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2024/08/07 12:00 a.m.298 views

AccPack Cop 1.0 Insecure Direct Object Reference

============================================================================================================================================= | Title : AccPack Cop v1.0 IDOR Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 125.0.1 64 bits | | Vendo...

7.4AI score
SaveExploits0
NVD
NVD
added 2024/08/06 1:15 p.m.28 views

CVE-2024-6357

Insecure Direct Object Reference vulnerability identified in OpenText ArcSight Intelligence...

8.8CVSS0.00276EPSS
SaveExploits0References1
OSV
OSV
added 2024/08/06 1:15 p.m.9 views

CVE-2024-6357

Insecure Direct Object Reference vulnerability identified in OpenText ArcSight Intelligence...

8.8CVSS5.8AI score0.00276EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/08/06 1:08 p.m.28 views

CVE-2024-6357 Insecure Direct Object Reference vulnerability

Insecure Direct Object Reference vulnerability identified in OpenText ArcSight Intelligence...

6.3CVSS0.00276EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/08/06 1:08 p.m.16 views

CVE-2024-6357 Insecure Direct Object Reference vulnerability

Insecure Direct Object Reference vulnerability identified in OpenText ArcSight Intelligence...

6.3CVSS7.2AI score0.00276EPSS
SaveExploits0References1
CVE
CVE
added 2024/08/06 1:08 p.m.46 views

CVE-2024-6357

CVE-2024-6357 is an Insecure Direct Object Reference vulnerability in OpenText ArcSight Intelligence. Public records show CVSS v3.1 metrics with high impact (C/H/I/A all high) and network-based access with low attack complexity and no user interaction required. Some connected sources (e.g., PT-20...

8.8CVSS6.9AI score0.00276EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/08/06 12:00 a.m.14 views

OpenText ArcSight Intelligence 安全漏洞

OpenText ArcSight Intelligence is an advanced threat detection tool from OpenText Canada. A security vulnerability exists in OpenText ArcSight Intelligence that stems from the presence of an unsafe direct object reference vulnerability...

8.8CVSS6.8AI score0.00276EPSS
SaveExploits0References2
Packet Storm
Packet Storm
added 2024/07/31 12:00 a.m.239 views

AccPack Khanepani 1.0 Insecure Direct Object Reference

============================================================================================================================================= | Title : AccPack Khanepani v1.0 IDOR Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 125.0.1 64 bits | |...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2024/07/25 12:00 a.m.291 views

Bhojon Restaurant Management System 2.7 Insecure Direct Object Reference

==================================================================================================================================== | Title : Bhojon restaurant management system v2.7 IDOR Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 125.0.1 64...

7.4AI score
SaveExploits0
Rows per page
Query Builder