Lucene search
+L

3342 matches found

Vulnrichment
Vulnrichment
•added 2025/12/30 4:10 p.m.•9 views

CVE-2025-66080 WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.0.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Cookie Notice for GDPR, CCPA & ePrivacy Consent: from n/a through 4.0.3...

5.3CVSS6AI score0.00279EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/30 4:10 p.m.•24 views

EUVD-2025-205816

Missing Authorization vulnerability in WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Cookie Notice for GDPR, CCPA & ePrivacy Consent: from n/a through 4.0.3...

5.3CVSS6.5AI score0.00279EPSS
SaveExploits0References2
CVE
CVE
•added 2025/12/30 4:10 p.m.•29 views

CVE-2025-66080

CVE-2025-66080 affects Cookie Banner for GDPR / CCPA – WPLP Cookie Consent (WordPress plugin) and is a Missing Authorization vulnerability. Wordfence reports affected versions up to 4.0.3 with Patched status in later updates; exploitation would involve access-control bypass via misconfigured secu...

5.3CVSS6AI score0.00279EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/12/30 4:09 p.m.•21 views

WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.0.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin WP Cookie Notice for GDPR, CCPA & ePrivacy Consent versions = 4.0.3...

5.3CVSS6.8AI score0.00279EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2025/12/30 12:00 a.m.•25 views

PT-2025-54190

Missing Authorization vulnerability in WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Cookie Notice for GDPR, CCPA & ePrivacy Consent: from n/a through 4.0.3...

5.3CVSS7AI score0.00279EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/30 12:00 a.m.•9 views

CVE-2025-66080: Missing Authorization

Missing Authorization vulnerability in WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent gdpr-cookie-consent allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Cookie Notice for GDPR, CCPA & ePrivacy Consent: from n/a through = 4.0.3...

5.3CVSS5.9AI score0.00279EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/12/30 12:00 a.m.•21 views

WordPress plugin WP Cookie Notice for GDPR, CCPA & ePrivacy Consent 安全漏洞

...

5.3CVSS5.8AI score0.00279EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/29 2:03 p.m.•14 views

CVE-2025-15138

A flaw has been found in prasathmani TinyFileManager up to 2.6. Affected by this issue is some unknown functionality of the file tinyfilemanager.php. This manipulation of the argument fullpath causes path traversal. Remote exploitation of the attack is possible. The exploit has been published and...

7.2CVSS4.7AI score0.00662EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/12/29 12:00 a.m.•21 views

UTT aggressive 512W buffer overflow vulnerability (CNVD-2026-0079277)

The UTT Progressive 512W is an enterprise-grade wireless router from Atech UTT designed for small and medium-sized businesses SOHO and similarly sized network environments for access scenarios of 30 to 50 users. UTT Progressive 512W suffers from a buffer overflow vulnerability that originates fro...

9.8CVSS7.3AI score0.0077EPSS
SaveExploits1References1
Circl
Circl
•added 2025/12/28 9:04 p.m.•13 views

CVE-2025-15148

creationtimestamp| type| source ---|---|--- 2025-12-28 21:04:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb37w6hykp2r...

7.2CVSS5.6AI score0.00481EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/12/26 12:30 a.m.•19 views

EUVD-2025-205403

A vulnerability was found in UTT 进取 512W up to 1.7.7-171114. This vulnerability affects the function strcpy of the file /goform/formConfigNoticeConfig. The manipulation of the argument timestart results in buffer overflow. The attack may be performed from remote. The exploit has been made public...

9CVSS6.3AI score0.0077EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/12/25 12:00 a.m.•17 views

PT-2025-53418

Name of the Vulnerable Software and Affected Versions UTT 进取 512W versions through 1.7.7-171114 Description A buffer overflow issue exists in UTT 进取 512W. The issue is related to the strcpy function within the /goform/formConfigNoticeConfig file. Manipulation of the timestart argument can trigger...

9CVSS6.8AI score0.0077EPSS
SaveExploits1References11
EUVD
EUVD
•added 2025/12/24 9:30 p.m.•15 views

EUVD-2025-205328

Teradek Cube 7.3.6 contains a cross-site request forgery vulnerability that allows attackers to change administrative passwords without proper request validation. Attackers can craft a malicious web page with a hidden form to submit password change requests to the device's system configuration...

5.3CVSS6.5AI score0.002EPSS
SaveExploits2References4
Debian CVE
Debian CVE
•added 2025/12/24 1:06 p.m.•26 views

CVE-2023-54095

In the Linux kernel, the following vulnerability has been resolved: powerpc/iommu: Fix notifiers being shared by PCI and VIO buses failiommusetup registers the failiommubusnotifier struct to both PCI and VIO buses. struct notifierblock is a linked list node, so this causes any notifiers later...

7CVSS6.4AI score0.00163EPSS
SaveExploits0
EUVD
EUVD
•added 2025/12/24 12:30 p.m.•19 views

EUVD-2025-205149

In the Linux kernel, the following vulnerability has been resolved: virtiovdpa: build affinity masks conditionally We try to build affinity mask via createaffinitymasks unconditionally which may lead several issues: - the affinity mask is not used for parent without affinity support only VDUSE...

5.8AI score0.00198EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/12/24 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2025-68735

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/panthor: Prevent potential UAF in group creation This commit prevents the possibility of a use after free issue in the GROUPCREATE ioctl function, which aro...

7.8CVSS7.5AI score0.00178EPSS
SaveExploits0References3
Snyk
Snyk
•added 2025/12/23 5:29 p.m.•13 views

Malicious Package

Overview @aa-techops-ui/ping-authentication is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

9.8CVSS6.8AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/12/21 12:00 a.m.•17 views

PT-2025-52647

CVE-2025-12700 - Apache Struts Remote Code Execution CVE ID : CVE-2025-12700 Published : Dec. 20, 2025, 11:15 p.m. | 3 hours, 20 minutes ago Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 | NA Visit the link for more details...

6.3AI score
SaveExploits0References1
attackerkb
attackerkb
•added 2025/12/18 8:35 p.m.•11 views

CVE-2025-62003

BullWall Server Intrusion Protection has a noticeable configuration-dependent delay before the MFA check for RDP connections. A remote, authenticated attacker can potentially bypass detection during this delay. Versions 4.6.0.0, 4.6.0.6, 4.6.0.7, and 4.6.1.4 are affected. Other versions may also ...

7.7CVSS5.5AI score0.00338EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2025/12/18 12:59 a.m.•3 views

CGA-2H7R-V9P6-HMMW

Bulletin has no description...

4.8CVSS6.6AI score0.10549EPSS
SaveExploits1References47
Rows per page
Query Builder