Lucene search
+L

64275 matches found

CNNVD
CNNVD
added 2025/12/18 12:00 a.m.12 views

WordPress plugin Javo Core 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

7.5CVSS6.6AI score0.00372EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2025/12/17 6:03 a.m.15 views

Security Bulletin: Due to use of IBM Java, IBM Sterling Connect:Direct Web Service is affected by multiple vulnerabilities.

Summary IBM Sterling Connect:Direct Web Service uses IBM Java SE, is affected by multiple vulnerabilities CVE-2025-53066, CVE-2025-53057 . This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2025-53066 DESCRIPTION: An unspecified vulnerabilit...

7.5CVSS6.5AI score0.00647EPSS
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/12/17 12:00 a.m.13 views

Gladinet Triofox < 16.7.10368.56560 Improper Access Control

Gladinet Triofox version prior to 16.7.10368.56560 are vulnerable to an Improper Access Control flaw that allows access to initial setup pages even after setup is complete. No source data...

9.1CVSS6.9AI score0.90532EPSS
SaveExploits1References2
CVE
CVE
added 2025/12/16 5:06 p.m.53 views

CVE-2023-53895

PimpMyLog 1.7.14 is affected by an improper access control vulnerability that lets remote attackers create admin accounts via the configuration endpoint (/configuration). The unsanitized username field can be exploited to inject JavaScript, enabling a hidden backdoor and potential access to serve...

9.8CVSS6.3AI score0.00674EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2025/12/16 5:19 a.m.43 views

CVE-2025-14252

An Improper Access Control vulnerability in Advantech SUSI driver susi.sys allows attackers to read/write arbitrary memory, I/O ports, and MSRs, resulting in privilege escalation, arbitrary code execution, and information disclosure. This issue affects Advantech SUSI: 5.0.24335 and prior...

8.5CVSS0.00129EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/16 5:19 a.m.3 views

CVE-2025-14252

An Improper Access Control vulnerability in Advantech SUSI driver susi.sys allows attackers to read/write arbitrary memory, I/O ports, and MSRs, resulting in privilege escalation, arbitrary code execution, and information disclosure. This issue affects Advantech SUSI: 5.0.24335 and prior...

8.5CVSS6.9AI score0.00129EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/16 3:15 a.m.14 views

CVE-2025-14749

A vulnerability was identified in Ningyuanda TC155 57.0.2.0. This impacts an unknown function of the file /onvif/deviceservice of the component ONVIF PTZ Control Interface. The manipulation leads to improper access controls. The attack requires being on the local network. The exploit is publicly...

8.8CVSS5.4AI score0.00789EPSS
SaveExploits1References4
NVD
NVD
added 2025/12/16 3:15 a.m.17 views

CVE-2025-14749

A vulnerability was identified in Ningyuanda TC155 57.0.2.0. This impacts an unknown function of the file /onvif/deviceservice of the component ONVIF PTZ Control Interface. The manipulation leads to improper access controls. The attack requires being on the local network. The exploit is publicly...

8.8CVSS0.00789EPSS
SaveExploits1References4
CVE
CVE
added 2025/12/16 3:02 a.m.32 views

CVE-2025-14749

CVE-2025-14749 affects Ningyuanda TC155, version 57.0.2.0, specifically the ONVIF PTZ Control Interface component via the file /onvif/device_service. Root cause: improper access controls leading to unauthorized access. Attack requires local network access; exploit is publicly available. Implicati...

8.8CVSS5.8AI score0.00789EPSS
SaveExploits1References4Affected Software1
EUVD
EUVD
added 2025/12/16 3:02 a.m.16 views

EUVD-2025-203496

A vulnerability was identified in Ningyuanda TC155 57.0.2.0. This impacts an unknown function of the file /onvif/deviceservice of the component ONVIF PTZ Control Interface. The manipulation leads to improper access controls. The attack requires being on the local network. The exploit is publicly...

6.3CVSS5.7AI score0.00789EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/12/16 12:00 a.m.9 views

WordPress plugin Directory Pro 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

4.3CVSS6.4AI score0.00222EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/16 12:00 a.m.10 views

WordPress plugin Reformer for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

5.4CVSS6.6AI score0.00164EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/16 12:00 a.m.8 views

WordPress plugin Coder for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

5.4CVSS6.5AI score0.00199EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/16 12:00 a.m.10 views

WordPress plugin Huger for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

5.4CVSS6.5AI score0.00164EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/16 12:00 a.m.23 views

PT-2025-51743

Name of the Vulnerable Software and Affected Versions PimpMyLog version 1.7.14 Description The software contains an improper access control issue that allows remote attackers to create administrator accounts without authorization through the configuration endpoint. Attackers can exploit the...

9.8CVSS6.4AI score0.00674EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2025/12/16 12:00 a.m.11 views

WordPress plugin Buttoner for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A security...

5.4CVSS6.5AI score0.00165EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/16 12:00 a.m.11 views

WordPress plugin Lottier for WPBakery 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plug-in. A security...

5.4CVSS6.5AI score0.00199EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/16 12:00 a.m.8 views

WordPress plugin Read More & Accordion 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, with the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an...

4.3CVSS6.4AI score0.00222EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/16 12:00 a.m.11 views

WordPress plugin Ultimate Learning Pro 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

4.9CVSS6.6AI score0.00281EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/16 12:00 a.m.10 views

WordPress plugin Avada 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

5.3CVSS6.4AI score0.00256EPSS
SaveExploits0References1
Rows per page
Query Builder