CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

7019 matches found

Cvelist•added 2025/10/06 7:01 a.m.•21 views

CVE-2025-58585 Sensitive Information Disclosure Through Missing Authentication

Multiple endpoints with sensitive information do not require authentication, making the application susceptible to information gathering...

5.3CVSS0.00425EPSS

SaveExploits0References6

Vulnrichment•added 2025/10/06 7:01 a.m.•9 views

CVE-2025-58585 Sensitive Information Disclosure Through Missing Authentication

Multiple endpoints with sensitive information do not require authentication, making the application susceptible to information gathering...

5.3CVSS5.8AI score0.00425EPSS

SaveExploits0References6

CVE•added 2025/10/06 7:01 a.m.•46 views

CVE-2025-58585

CVE-2025-58585 concerns multiple endpoints in SICK analytics products that expose sensitive information without authentication, enabling information gathering. Public documentation references include: (1) SICK Enterprise Analytics / SICK Logistic Analytics and related products (connected CVE entr...

7.5CVSS5.8AI score0.00425EPSS

SaveExploits0References6Affected Software4

EUVD•added 2025/10/06 7:01 a.m.•26 views

EUVD-2025-32510

Multiple endpoints with sensitive information do not require authentication, making the application susceptible to information gathering...

5.3CVSS6.1AI score0.00425EPSS

SaveExploits0References7

CVE•added 2025/10/04 2:24 a.m.•58 views

CVE-2025-9029

CVE-2025-9029 concerns the WordPress plugin WDesignKit (Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder). The vulnerability is a missing authorization flaw in the function wdkit_handle_review_submission for versions

4.3CVSS5.8AI score0.00208EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2025/10/04 12:00 a.m.•6 views

CVE-2025-10746: Missing Authentication for Critical Function

The Integrate Dynamics 365 CRM plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 1.0.9. This is due to missing capability checks and nonce verification on functions hooked to 'init'. This makes it possible for unauthenticated attackers to deactivate t...

6.5CVSS5.8AI score0.00273EPSS

SaveExploits0References2

EUVD•added 2025/10/03 8:07 p.m.•15 views

EUVD-2022-24688