Lucene search
+L

19149 matches found

Vulnrichment
Vulnrichment
added 2025/09/22 6:26 p.m.5 views

CVE-2025-59559 WordPress Payrexx Payment Gateway for WooCommerce Plugin <= 3.1.5 - Broken Access Control Vulnerability

Missing Authorization vulnerability in payrexx Payrexx Payment Gateway for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Payrexx Payment Gateway for WooCommerce: from n/a through 3.1.5...

4.3CVSS6.6AI score0.00246EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/09/22 6:24 p.m.23 views

CVE-2025-57976 WordPress CardCom Payment Gateway plugin <= 3.5.0.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in CardCom CardCom Payment Gateway woo-cardcom-payment-gateway allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CardCom Payment Gateway: from n/a through = 3.5.0.7...

5.3CVSS0.00277EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/22 6:24 p.m.18 views

CVE-2025-57976

CVE-2025-57976 is a Missing Authorization vulnerability in CardCom Payment Gateway (

5.3CVSS5.1AI score0.00277EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2025/09/22 6:24 p.m.10 views

CVE-2025-57976

Missing Authorization vulnerability in CardCom CardCom Payment Gateway woo-cardcom-payment-gateway allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CardCom Payment Gateway: from n/a through = 3.5.0.8...

5.3CVSS5.7AI score0.00277EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/09/22 6:24 p.m.6 views

CVE-2025-57976 WordPress CardCom Payment Gateway plugin <= 3.5.0.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in CardCom CardCom Payment Gateway woo-cardcom-payment-gateway allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CardCom Payment Gateway: from n/a through = 3.5.0.8...

5.3CVSS5.1AI score0.00277EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/09/22 12:00 a.m.11 views

PT-2025-38826

Name of the Vulnerable Software and Affected Versions CardCom Payment Gateway versions through 3.5.0.4 Description An authorization issue exists in CardCom Payment Gateway due to incorrectly configured access control security levels. This allows for potential exploitation. Recommendations Update ...

5.3CVSS6.6AI score0.00277EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/09/22 12:00 a.m.12 views

WordPress plugin CardCom Payment Gateway 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.3CVSS6.5AI score0.00277EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/09/22 12:00 a.m.18 views

WordPress plugin Payrexx Payment Gateway for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

4.3CVSS6.5AI score0.00246EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/09/22 12:00 a.m.12 views

PT-2025-39038

Name of the Vulnerable Software and Affected Versions Payrexx Payment Gateway for WooCommerce versions through 3.1.5 Description A missing authorization issue exists in Payrexx Payment Gateway for WooCommerce, allowing exploitation due to incorrectly configured access control security levels...

4.3CVSS6.6AI score0.00246EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/09/21 12:00 a.m.10 views

Libraesva Email Security Gateway 安全漏洞

Libraesva Email Security Gateway is an email security gateway from Libraesva Italy. A security vulnerability exists in Libraesva Email Security Gateway versions prior to 4.5 to 5.5.7, which stems from improper handling of compressed email attachments and can lead to command injection attacks...

6.1CVSS9.6AI score0.01864EPSS
SaveExploits0References1
OSV
OSV
added 2025/09/19 7:15 p.m.15 views

CVE-2025-34202

Vasion Print formerly PrinterLogic Virtual Appliance Host prior to 25.2.169 and Application prior to 25.2.1518 VA and SaaS deployments expose Docker internal networks in a way that allows an attacker on the same external L2 segment — or an attacker able to add routes using the appliance as a...

8.8CVSS6AI score0.00976EPSS
SaveExploits1References4
CVE
CVE
added 2025/09/19 6:50 p.m.43 views

CVE-2025-34202

CVE-2025-34202 affects Vasion Print (Virtual Appliance Host prior to 25.2.169 and Application prior to 25.2.1518). The issue stems from exposing Docker internal networks, enabling an attacker on the same external L2 segment or one who can route via the appliance to reach container IPs directly. T...

8.8CVSS7.4AI score0.00976EPSS
SaveExploits1References4Affected Software2
RedhatCVE
RedhatCVE
added 2025/09/19 8:21 a.m.11 views

CVE-2025-9242

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to execute arbitrary code. This vulnerability affects both the Mobile User VPN with IKEv2 and the Branch Office VPN using IKEv2 when configured with a dynamic gateway peer.This vulnerability...

9.3CVSS7.7AI score0.913EPSS
SaveExploits5References1
RedhatCVE
RedhatCVE
added 2025/09/19 7:18 a.m.27 views

CVE-2025-9971

Certain models of Industrial Cellular Gateway developed by Planet Technology have a Missing Authentication vulnerability, allowing unauthenticated remote attackers to manipulate the device via a specific functionality...

9.8CVSS7.1AI score0.00831EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/09/18 11:28 p.m.18 views

CVE-2025-37124

A vulnerability in the HPE Aruba Networking SD-WAN Gateways could allow an unauthenticated remote attacker to bypass firewall protections. Successful exploitation could allow an attacker to route potentially harmful traffic through the internal network, leading to unauthorized access or disruptio...

8.6CVSS7AI score0.00401EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/09/18 10:28 p.m.26 views

CVE-2025-37126

A vulnerability exists in the HPE Aruba Networking EdgeConnect SD-WAN Gateways Command Line Interface that allows remote authenticated users to run arbitrary commands on the underlying host. Successful exploitation of this vulnerability will result in the ability to execute arbitrary commands as...

7.2CVSS7.6AI score0.00642EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/09/18 10:28 p.m.25 views

CVE-2025-37128

A vulnerability in the web API of HPE Aruba Networking EdgeConnect SD-WAN Gateways could allow an authenticated remote attacker to terminate arbitrary running processes. Successful exploitation could allow an attacker to disrupt system operations, potentially resulting in an unstable system state...

6.8CVSS6.9AI score0.00315EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/09/18 3:27 p.m.8 views

CVE-2025-41243

Spring Cloud Gateway Server Webflux may be vulnerable to Spring Environment property modification. An application should be considered vulnerable when all the following are true: The application is using Spring Cloud Gateway Server Webflux Spring Cloud Gateway Server WebMVC is not vulnerable...

10CVSS6.8AI score0.03548EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/09/18 12:29 p.m.28 views

CVE-2025-10546

This vulnerability exist in PPC 2K15X Router, due to improper input validation for the Common Gateway Interface CGI parameters at its web management portal. A remote attacker could exploit this vulnerability by injecting malicious JavaScript into the vulnerable parameter, leading to a reflected...

5.1CVSS6AI score0.00493EPSS
SaveExploits0References1
OSV
OSV
added 2025/09/17 8:15 a.m.11 views

CVE-2025-9242

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to execute arbitrary code. This vulnerability affects both the Mobile User VPN with IKEv2 and the Branch Office VPN using IKEv2 when configured with a dynamic gateway peer.This vulnerability...

9.8CVSS6.1AI score0.913EPSS
SaveExploits5References3
Rows per page
Query Builder