Lucene search
+L

5277 matches found

osv_cve
osv_cve
•added 2025/10/14 3:16 p.m.•19 views

CVE-2025-56747

Creativeitem Academy LMS up to and including 5.13 contains a privilege escalation vulnerability in the Apiinstructor controller where regular authenticated users can access instructor-only functions without proper role validation, allowing unauthorized course creation and management...

6.5CVSS5.7AI score0.00288EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/10/14 12:00 a.m.•20 views

PT-2025-41934

Name of the Vulnerable Software and Affected Versions Creativeitem Academy LMS versions up to and including 5.13 Description A privilege escalation issue exists in the Api instructor controller. Authenticated users without the necessary permissions can access functions intended only for...

6.5CVSS6.6AI score0.00288EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2025/10/14 12:00 a.m.•33 views

CVE-2025-56747

Creativeitem Academy LMS up to and including 5.13 contains a privilege escalation vulnerability in the Apiinstructor controller where regular authenticated users can access instructor-only functions without proper role validation, allowing unauthorized course creation and management...

0.00288EPSS
SaveExploits1References1
CVE
CVE
•added 2025/10/14 12:00 a.m.•29 views

CVE-2025-56747

Creativeitem Academy LMS (versions up to and including 5.13 ) contains a privilege escalation vulnerability within the Api_instructor controller. The root cause is a lack of proper role validation , which allows regular authenticated users to access functions reserved exclusively for instructors....

6.5CVSS5.7AI score0.00288EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/10/14 12:00 a.m.•11 views

CVE-2025-56747

Creativeitem Academy LMS up to and including 5.13 contains a privilege escalation vulnerability in the Apiinstructor controller where regular authenticated users can access instructor-only functions without proper role validation, allowing unauthorized course creation and management...

5.7AI score0.00288EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/14 12:00 a.m.•8 views

CVE-2025-56747: Improper Privilege Management

Creativeitem Academy LMS up to and including 5.13 contains a privilege escalation vulnerability in the Apiinstructor controller where regular authenticated users can access instructor-only functions without proper role validation, allowing unauthorized course creation and management...

6.5CVSS5.7AI score0.00288EPSS
SaveExploits1References1
Patchstack
Patchstack
•added 2025/10/12 9:11 a.m.•19 views

WordPress MasterStudy LMS Pro plugin < 4.7.16 - Arbitrary Content Deletion vulnerability

Arbitrary Content Deletion vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin MasterStudy LMS Pro versions 4.7.16...

7.5CVSS7AI score0.00356EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2025/10/12 9:09 a.m.•21 views

WordPress MasterStudy LMS Pro plugin < 4.7.16 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin MasterStudy LMS Pro versions 4.7.16...

7.5CVSS7AI score0.00359EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2025/10/12 9:08 a.m.•19 views

WordPress MasterStudy LMS Pro plugin < 4.7.16 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin MasterStudy LMS Pro versions 4.7.16...

5.4CVSS7AI score0.00216EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2025/10/09 9:15 p.m.•17 views

CVE-2025-11555

A vulnerability was detected in Campcodes Online Learning Management System 1.0. This affects an unknown part of the file /admin/calendarofevents.php. The manipulation of the argument datestart results in sql injection. The attack may be launched remotely. The exploit is now public and may be use...

9.8CVSS0.00421EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2025/10/07 6:09 a.m.•39 views

CVE-2025-11304

A flaw has been found in CodeCanyon/ui-lib Mentor LMS up to 1.1.1. Affected by this vulnerability is an unknown functionality of the component API. Executing manipulation can lead to permissive cross-domain policy with untrusted domains. The attack may be launched remotely. The exploit has been...

7.5CVSS6AI score0.00183EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2013-3538

Malware in sbrugna...

4.3CVSS5.8AI score0.01012EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2013-6589

Malware in sbrugna...

6CVSS5.8AI score0.02739EPSS
SaveExploits6References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2009-2145

Malware in sbrugna...

4.3CVSS6.4AI score0.01271EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2006-2667

Malware in sbrugna...

7.5CVSS6.4AI score0.03912EPSS
SaveExploits1References8
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2018-1926

Malware in sbrugna...

7.5CVSS7.3AI score0.01756EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•24 views

EUVD-2018-12886

Malware in sbrugna...

5.4CVSS6AI score0.00665EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2020-15880

Malware in sbrugna...

6.1CVSS6.3AI score0.00581EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2020-15881

Malware in sbrugna...

8.8CVSS7.8AI score0.00784EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2006-6840

Malware in sbrugna...

4.3CVSS6.4AI score0.00923EPSS
SaveExploits0References3
Rows per page
Query Builder