Lucene search
+L

5118 matches found

CNNVD
CNNVD
added 2026/05/26 12:0 a.m.12 views

WordPress plugin Woocommerce Envato Affiliates 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

7.1CVSS5.8AI score0.00248EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/05/26 12:0 a.m.21 views

PT-2026-43414

Name of the Vulnerable Software and Affected Versions epa4all-client versions prior to 1.2.5 Description Any network-reachable caller can write arbitrary documents to any patient's electronic health record accessible by the institution's SMC-B card. In misconfigured deployments, such as those...

6.5CVSS5.9AI score0.00162EPSS
SaveExploits0References5
NVD
NVD
added 2026/05/25 10:16 p.m.16 views

CVE-2026-24592

Missing Authorization vulnerability in Lucian Apostol Auto Affiliate Links allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Auto Affiliate Links: from n/a through 6.8.8.3...

5.3CVSS0.00231EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/05/25 9:32 p.m.12 views

EUVD-2026-31747

Missing Authorization vulnerability in Themeansar Newses allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Newses: from n/a through 2.0.0.77...

5.4CVSS5.8AI score0.00255EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/05/25 9:8 p.m.21 views

EUVD-2026-31746

Missing Authorization vulnerability in Nikki Blight QR Redirector allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects QR Redirector: from n/a through 2.0.3...

4.3CVSS5.8AI score0.002EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/05/25 1:50 a.m.18 views

EUVD-2026-31619

NitroSense 3.x before 3.01.3052 contains Local Privilege Escalation LPE vulnerability.The program exposes a Windows Named Pipe that uses a custom protocol to invoke internal functions. However, this Named Pipe is misconfigured, allowing any authenticated local user to execute arbitrary code with ...

8.5CVSS6.3AI score0.0012EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/05/25 1:50 a.m.9 views

CVE-2026-9489 NitroSense V3: Local Privilege Escalation (LPE) vulnerability

NitroSense 3.x before 3.01.3052 contains Local Privilege Escalation LPE vulnerability.The program exposes a Windows Named Pipe that uses a custom protocol to invoke internal functions. However, this Named Pipe is misconfigured, allowing any authenticated local user to execute arbitrary code with ...

8.5CVSS6.3AI score0.0012EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/25 1:50 a.m.12 views

CVE-2026-9489

NitroSense 3.x before 3.01.3052 contains Local Privilege Escalation LPE vulnerability.The program exposes a Windows Named Pipe that uses a custom protocol to invoke internal functions. However, this Named Pipe is misconfigured, allowing any authenticated local user to execute arbitrary code with ...

8.5CVSS6.3AI score0.0012EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2026/05/25 12:0 a.m.12 views

WordPress plugin FlexTable 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

4.3CVSS5.8AI score0.002EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/25 12:0 a.m.12 views

WordPress plugin Auto Affiliate Links 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.3CVSS5.8AI score0.00231EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/25 12:0 a.m.13 views

WordPress plugin Smart Coupons for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

7.5CVSS5.8AI score0.00289EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/25 12:0 a.m.11 views

WordPress plugin Sunshine Photo Cart 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

6.3CVSS5.8AI score0.00202EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/05/25 12:0 a.m.21 views

PT-2026-43139

Name of the Vulnerable Software and Affected Versions B2BKing versions prior to 5.2.10 Description A missing authorization issue allows for the exploitation of incorrectly configured access control security levels. This is a broken access control flaw where the system fails to properly verify if ...

4.9CVSS5.8AI score0.00254EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/05/25 12:0 a.m.24 views

PT-2026-43127

Name of the Vulnerable Software and Affected Versions QR Redirector versions prior to 2.0.3 Description Missing authorization allows the exploitation of incorrectly configured access control security levels. Recommendations Update QR Redirector to a version newer than 2.0.3...

4.3CVSS5.9AI score0.002EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/05/25 12:0 a.m.16 views

PT-2026-43140

Name of the Vulnerable Software and Affected Versions WP Search Analytics versions prior to 1.5.0 Description A missing authorization issue in the plugin allows for the exploitation of incorrectly configured access control security levels, resulting in broken access control. Recommendations Updat...

5.3CVSS5.8AI score0.00231EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/05/25 12:0 a.m.20 views

PT-2026-43135

Name of the Vulnerable Software and Affected Versions Auto Affiliate Links versions prior to 6.8.8.3 Description Missing authorization allows the exploitation of incorrectly configured access control security levels. Recommendations Update Auto Affiliate Links to a version newer than 6.8.8.3...

5.3CVSS5.9AI score0.00231EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/05/25 12:0 a.m.12 views

WordPress plugin RSVP and Event Management 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, with the ability to host personal blog sites on PHP and MySQL based servers.WordPress...

5.3CVSS5.8AI score0.00231EPSS
SaveExploits0References1
CVE
CVE
added 2026/05/22 3:49 a.m.42 views

CVE-2026-44409

Technical details about CVE-2026-44409 are not publicly available in the provided documents. No explicit affected versions, root cause specifics, exploit information, or mitigations are present. Monitor for updates from vendors and security feeds.

7.5CVSS5.8AI score0.00216EPSS
SaveExploits0References1Affected Software1
Debian CVE
Debian CVE
added 2026/05/22 2:31 a.m.9 views

CVE-2026-39835

SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil...

7.5CVSS5.8AI score0.00504EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/05/22 12:0 a.m.23 views

PT-2026-42725

Name of the Vulnerable Software and Affected Versions ZTE MU5250 affected versions not specified Description An information disclosure issue exists due to improper configuration of the access control mechanism, which allows attackers to obtain information without authorization. Recommendations At...

7.5CVSS5.4AI score0.00216EPSS
SaveExploits0References6
Rows per page
Query Builder