Lucene search
+L

2192 matches found

NVD
NVD
•added 2025/11/11 7:15 p.m.•15 views

CVE-2025-61830

Adobe Pass versions 3.7.3 and earlier are affected by an Incorrect Authorization vulnerability. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access. Exploitation of this issue requires user interaction in that a victim must install...

7.1CVSS0.00233EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/11/11 6:28 p.m.•22 views

CVE-2025-61830 Adobe Pass | Incorrect Authorization (CWE-863)

Adobe Pass versions 3.7.3 and earlier are affected by an Incorrect Authorization vulnerability. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access. Exploitation of this issue requires user interaction in that a victim must install...

7.1CVSS0.00233EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/11/11 6:28 p.m.•3 views

CVE-2025-61830 Adobe Pass | Incorrect Authorization (CWE-863)

Adobe Pass versions 3.7.3 and earlier are affected by an Incorrect Authorization vulnerability. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access. Exploitation of this issue requires user interaction in that a victim must install...

7.1CVSS6.2AI score0.00233EPSS
SaveExploits0References1
CVE
CVE
•added 2025/11/11 6:28 p.m.•32 views

CVE-2025-61830

Adobe Pass (Android SDK) versions 3.7.3 and earlier are affected by an Incorrect Authorization vulnerability that allows bypass of security controls to read/write data. Exploitation requires user interaction (victim installs a malicious SDK). The issue is discussed across multiple advisories (CVE...

7.1CVSS6.1AI score0.00233EPSS
SaveExploits0References1Affected Software1
RedHat Linux
RedHat Linux
•added 2025/11/11 9:13 a.m.•12 views

kernel: Input: synaptics - fix crash when enabling pass-through port

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics - fix crash when enabling pass-through port When enabling a pass-through port an interrupt might come before psmouse driver binds to the pass-through port. However synaptics sub-driver tries to access psmouse...

4.7CVSS6.7AI score0.00149EPSS
SaveExploits0References5
Adobe
Adobe
•added 2025/11/11 12:00 a.m.•30 views

APSB25-112 : Security update available for Adobe Pass

Adobe has released a security update for Adobe Pass. This update resolves a critical vulnerability that could lead to security feature bypass...

7.1CVSS6.9AI score0.00233EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2025/11/11 12:00 a.m.•16 views

PT-2025-46518

Name of the Vulnerable Software and Affected Versions Adobe Pass versions 3.7.3 and earlier Description An Incorrect Authorization issue exists in Adobe Pass. An attacker could bypass security measures and gain unauthorized read and write access. Exploitation requires user interaction, specifical...

7.1CVSS6.3AI score0.00233EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/11/11 12:00 a.m.•16 views

Adobe Pass Authentication Android SDK 安全漏洞

Adobe Pass Authentication Android SDK is a Java library for Android applications from the American company Audobee Adobe. The Adobe Pass Authentication Android SDK suffers from an incorrect authorization vulnerability that can be exploited by attackers to bypass security measures and gain...

7.1CVSS6.4AI score0.00233EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/11 12:00 a.m.•2 views

CVE-2025-61830: Incorrect Authorization

Adobe Pass versions 3.7.3 and earlier are affected by an Incorrect Authorization vulnerability. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access. Exploitation of this issue requires user interaction in that a victim must install...

7.1CVSS5.8AI score0.00233EPSS
SaveExploits0References1
OSV
OSV
•added 2025/11/09 7:52 a.m.•84 views

MGASA-2025-0270 Updated xen packages fix security vulnerabilities

Double unlock in x86 guest IRQ handling. CVE-2024-31143 Xapi: Metadata injection attack against backup/restore functionality. CVE-2024-31144 Error handling in x86 IOMMU identity mapping. CVE-2024-31145 PCI device pass-through with shared resources. CVE-2024-31146 x86: Deadlock in vlapicerror...

9.4CVSS6.4AI score0.00723EPSS
SaveExploits0References25
Positive Technologies
Positive Technologies
•added 2025/11/03 12:00 a.m.•16 views

PT-2025-44779

Name of the Vulnerable Software and Affected Versions Car-Booking-System-PHP version 1.0 Description Car-Booking-System-PHP version 1.0 is susceptible to SQL Injection in the /carlux/forgot-pass.php file. The vulnerability exists due to insufficient input validation when handling user-supplied...

9.4CVSS7.6AI score0.00442EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/11/03 12:00 a.m.•22 views

CVE-2025-63452

Car-Booking-System-PHP v.1.0 is vulnerable to SQL Injection in /carlux/forgot-pass.php...

0.00442EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/11/03 12:00 a.m.•9 views

CVE-2025-63452

Car-Booking-System-PHP v.1.0 is vulnerable to SQL Injection in /carlux/forgot-pass.php...

7.6AI score0.00442EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/10/31 12:00 a.m.•22 views

Curfew e-Pass Management System edit-category-detail.php file cross-site scripting vulnerability

Curfew e-Pass Management System is an electronic pass management system. Curfew e-Pass Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameter catname in the file...

4.8CVSS6.2AI score0.00261EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/10/28 7:53 p.m.•14 views

CVE-2025-12312

A flaw has been found in PHPGurukul Curfew e-Pass Management System 1.0. Impacted is an unknown function of the file view-pass-detail.php. This manipulation of the argument Fullname/Category causes cross site scripting. The attack may be initiated remotely. The exploit has been published and may ...

4.8CVSS5.4AI score0.00261EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/10/28 7:53 p.m.•14 views

CVE-2025-12311

A vulnerability was detected in PHPGurukul Curfew e-Pass Management System 1.0. This issue affects some unknown processing of the file edit-category-detail.php. The manipulation of the argument catname results in cross site scripting. The attack can be launched remotely. The exploit is now public...

4.8CVSS5.7AI score0.00261EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/10/28 6:59 a.m.•33 views

CVE-2025-12227

A vulnerability was determined in projectworlds Gate Pass Management System 1.0. The affected element is an unknown function of the file /add-pass.php. Executing a manipulation can lead to cross site scripting. The attack can be executed remotely. The exploit has been publicly disclosed and may b...

5.4CVSS3.3AI score0.00246EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/10/28 12:00 a.m.•14 views

PT-2025-44175

Name of the Vulnerable Software and Affected Versions IPFire versions prior to 2.29 Core Update 198 Description IPFire versions prior to 2.29 Core Update 198 are susceptible to a stored cross-site scripting XSS issue. An authenticated attacker can inject arbitrary JavaScript code through the txt...

5.4CVSS5.9AI score0.00485EPSS
SaveExploits0References6
NVD
NVD
•added 2025/10/27 8:15 p.m.•40 views

CVE-2025-12312

A flaw has been found in PHPGurukul Curfew e-Pass Management System 1.0. Impacted is an unknown function of the file view-pass-detail.php. This manipulation of the argument Fullname/Category causes cross site scripting. The attack may be initiated remotely. The exploit has been published and may ...

4.8CVSS0.00261EPSS
SaveExploits1References5
OSV
OSV
•added 2025/10/27 8:15 p.m.•14 views

CVE-2025-12312

A flaw has been found in PHPGurukul Curfew e-Pass Management System 1.0. Impacted is an unknown function of the file view-pass-detail.php. This manipulation of the argument Fullname/Category causes cross site scripting. The attack may be initiated remotely. The exploit has been published and may ...

4.8CVSS4.2AI score0.00261EPSS
SaveExploits1References5
Rows per page
Query Builder