Lucene search
+L

406 matches found

Positive Technologies
Positive Technologies
added 2025/12/05 12:00 a.m.10 views

PT-2025-49284

Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting XSS vulnerability in the /rmm/v1/plugin-config/dashboards/menus endpoint. When an authenticated user adds or edits a dashboard entry, the label and path values are stored in plugin configuration data and...

5.1CVSS5.4AI score0.00202EPSS
SaveExploits0References4
NVD
NVD
added 2025/12/04 9:16 p.m.14 views

CVE-2025-55948

This vulnerability fundamentally arises from yzcheng90 X-SpringBoot 6.0's implementation of role-based access control RBAC through dual dependency on frontend menu systems and backend permission tables, without enforcing atomic synchronization between these components. The critical flaw manifests...

7.3CVSS0.00285EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2025/11/24 2:22 p.m.37 views

CVE-2025-11921 iStat Menus 7.10.4 - Local Privilege Escalation

iStats contains an insecure XPC service that allows local, unprivileged users to escalate their privileges to root via command injection.This issue affects iStats: 7.10.4...

8.5CVSS0.00617EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/11/24 2:22 p.m.14 views

CVE-2025-11921 iStat Menus 7.10.4 - Local Privilege Escalation

iStats contains an insecure XPC service that allows local, unprivileged users to escalate their privileges to root via command injection.This issue affects iStats: 7.10.4...

8.5CVSS6.9AI score0.00617EPSS
SaveExploits0References3
CVE
CVE
added 2025/11/24 2:22 p.m.47 views

CVE-2025-11921

CVE-2025-11921 affects iStats (iStat Menus) 7.10.4, where an insecure XPC service allows local, unprivileged users to escalate to root via command injection. CVSS indicates local access with high impact on confidentiality, integrity, and availability. Public references identify a patch path; iSta...

8.5CVSS6.9AI score0.00617EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/27 3:30 a.m.14 views

EUVD-2025-36047

Cross-Site Request Forgery CSRF vulnerability in Jory Hogeveen Off-Canvas Sidebars & Menus Slidebars off-canvas-sidebars allows Cross Site Request Forgery.This issue affects Off-Canvas Sidebars & Menus Slidebars: from n/a through = 0.5.8.5...

6.3AI score0.00131EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/10/27 1:33 a.m.5 views

CVE-2025-62891 WordPress Off-Canvas Sidebars & Menus (Slidebars) plugin <= 0.5.8.5 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Jory Hogeveen Off-Canvas Sidebars & Menus Slidebars off-canvas-sidebars allows Cross Site Request Forgery.This issue affects Off-Canvas Sidebars & Menus Slidebars: from n/a through = 0.5.8.5...

4.3CVSS6.5AI score0.00131EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/10/25 12:00 a.m.10 views

Fedora 43 : wordpress (2025-8e71abf396)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-8e71abf396 advisory. WordPress 6.8.3 Release Security updates included in this release: A data exposure issue where authenticated users could access some restricted content...

5.2AI score
SaveExploits0References1
CNVD
CNVD
added 2025/10/13 12:00 a.m.12 views

WordPress BP Direct Menus plugin cross-site scripting vulnerability

WordPress BP Direct Menus plugin is a menu management plugin for WordPress, which is mainly used to realize the quick jump function of menu items. WordPress BP Direct Menus plugin has a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of the bpdmlogi...

6.4CVSS6.2AI score0.00193EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/10/09 12:00 a.m.9 views

Fedora 42 : wordpress (2025-0fe3b1b7fc)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-0fe3b1b7fc advisory. WordPress 6.8.3 Release Security updates included in this release: A data exposure issue where authenticated users could access some restricted content...

5.2AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/10/09 12:00 a.m.2 views

Fedora 41 : wordpress (2025-acd3e11344)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-acd3e11344 advisory. WordPress 6.8.3 Release Security updates included in this release: A data exposure issue where authenticated users could access some restricted content...

5.2AI score
SaveExploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2020-8242

Malware in sbrugna...

7.8CVSS7.6AI score0.00346EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2017-11592

Malware in sbrugna...

7.1CVSS8.1AI score0.00906EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.14 views

EUVD-2012-3783

Malware in sbrugna...

4.3CVSS6.4AI score0.01633EPSS
SaveExploits2References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2021-24774

Malware in sbrugna...

6.1CVSS6.3AI score0.00895EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2015-7988

Malware in sbrugna...

5CVSS6.4AI score0.01196EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2014-5081

Malware in sbrugna...

6.5CVSS6.4AI score0.01594EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.17 views

EUVD-2013-4134

Malware in sbrugna...

6CVSS6.4AI score0.01207EPSS
SaveExploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2012-5275

Malware in sbrugna...

6.8CVSS6AI score0.01678EPSS
SaveExploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2013-4133

Malware in sbrugna...

2.1CVSS6.4AI score0.01099EPSS
SaveExploits1References8
Rows per page
Query Builder