Lucene search
+L

62150 matches found

CNNVD
CNNVD
added 2025/04/24 12:00 a.m.8 views

WordPress plugin Sirat 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

4.3CVSS6AI score0.00308EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/04/24 12:00 a.m.11 views

WordPress plugin hashtagger 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

4.3CVSS6AI score0.00283EPSS
SaveExploits0References2
CVE
CVE
added 2025/04/23 10:51 a.m.69 views

CVE-2025-42605

CVE-2025-42605 affects Meon Bidding Solutions. Improper authorization controls on specific API endpoints used for initiation, modification, or cancellation allow an authenticated remote attacker to manipulate request body parameters and gain unauthorized access to other user accounts. Successful ...

9.3CVSS6.7AI score0.00461EPSS
SaveExploits0References1
Openbugbounty
Openbugbounty
added 2025/04/22 2:07 p.m.19 views

simasehutner.adv.br Improper Access Control vulnerability OBB-4048318

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

7AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2025/04/22 1:57 p.m.16 views

penielrioclaro.com.br Improper Access Control vulnerability OBB-4048315

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

7AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2025/04/22 1:42 p.m.17 views

yellowslanches.com Improper Access Control vulnerability OBB-4048313

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

7AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2025/04/22 1:38 p.m.23 views

aymsyntex.com Improper Access Control vulnerability OBB-4048309

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

7AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2025/04/22 1:31 p.m.21 views

80.244.187.186.srvlist.ukfast.net Improper Access Control vulnerability OBB-4048308

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

7AI score
SaveExploits0
CNVD
CNVD
added 2025/04/22 12:00 a.m.3 views

TOTOLINK A3700R Access Control Error Vulnerability (CNVD-2025-12020)

The TOTOLINK A3700R is a wireless router that provides wireless network connectivity and management. The TOTOLINK A3700R suffers from an access control error vulnerability that originates from improper access control of the setUrlFilterRules function in the /cgi-bin/cstecgi.cgi file. No detailed...

6.9CVSS5.3AI score0.00557EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/04/22 12:00 a.m.10 views

WordPress plugin Appointment Booking Calendar 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

9.8CVSS8.5AI score0.00377EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/04/22 12:00 a.m.8 views

TOTOLINK A3700R cstecgi.cgi setScheduleCfg Improper Access Control Vulnerability

The TOTOLINK A3700R is a wireless router that provides wireless network connectivity. The TOTOLINK A3700R suffers from an improper access control vulnerability that stems from mishandling of specific requests. No detailed vulnerability details are provided at this time...

6.9CVSS5.2AI score0.01261EPSS
SaveExploits1References1
Veracode
Veracode
added 2025/04/21 3:54 a.m.11 views

Improper Access Control

github.com/mattermost/mattermost-server is vulnerable to Improper Access Control. The vulnerability is due to insufficient enforcement of access restrictions on the /api/v4/audits endpoint, allowing users with delegated granular administration roles to access User Activity Logs without Compliance...

2.7CVSS7AI score0.00278EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2025/04/21 12:00 a.m.9 views

FlaskBlog 安全漏洞

FlaskBlog is a simple blogging application built using Flask by Doğukan Ürker Personal Developer. A security vulnerability exists in FlaskBlog version 2.6.1, which stems from improper access control and could lead to obtaining all usernames...

9.1CVSS6.5AI score0.00382EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/04/21 12:00 a.m.10 views

FlaskBlog 安全漏洞

FlaskBlog is a simple blogging application built using Flask by Doğukan Ürker, an individual developer. A security vulnerability exists in FlaskBlog version 2.6.1, which stems from improper access control and could lead to arbitrary deletion of user accounts...

6.4CVSS6.6AI score0.00212EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2025/04/19 6:06 a.m.291 views

Exploit for Improper Access Control in Rejetto Http_File_Server

Node.js HFS 명령어 실행 취약점 CVE-2024-39943 화이트햇 스쿨 3기 – 노정민 @...

9.9CVSS6.7AI score0.37493EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/04/18 2:22 a.m.12 views

CVE-2025-30100

Dell Alienware Command Center 6.x, versions prior to 6.7.37.0 contain an Improper Access Control Vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

6.7CVSS6.7AI score0.00128EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/04/18 12:00 a.m.12 views

BW Broadcast Transmitter Management System 安全漏洞

BW Broadcast Transmitter Management System is a transmitter network management system from BW Broadcast. A security vulnerability exists in the BW Broadcast Transmitter Management System that stems from improper access control and could lead to a session hijacking attack...

9.1CVSS6.6AI score0.00347EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/18 12:00 a.m.8 views

Orban OPTIMOD 5950 Firmware和Orban OPTIMOD 5950 System 安全漏洞

The Orban OPTIMOD 5950 Firmware and the Orban OPTIMOD 5950 System are both products of Orban Corporation.The Orban OPTIMOD 5950 Firmware is an audio processor firmware.The Orban OPTIMOD 5950 System is an audio processor system. A security vulnerability exists in the Orban OPTIMOD 5950 Firmware an...

9.8CVSS7.1AI score0.00747EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/04/18 12:00 a.m.13 views

Samsung Galaxy Watch Improper Access Control Vulnerability

The Samsung Galaxy Watch is a smartwatch that offers a variety of features, including fitness tracking, notifications, and mobile payments. An Improper Access Control vulnerability exists in Samsung Galaxy Watch. The vulnerability stems from improper access control. An attacker could exploit the...

4CVSS6AI score0.00156EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/18 12:00 a.m.9 views

JMBroadcast JMB0150 Firmware 安全漏洞

JMBroadcast JMB0150 Firmware is a firmware from JMBroadcast. A security vulnerability exists in JMBroadcast JMB0150 Firmware version v1.0, which stems from improper access control and could lead to the acquisition of hard-coded administrator credentials...

9.1CVSS6.7AI score0.00521EPSS
SaveExploits1References1
Rows per page
Query Builder