Lucene search
+L

953 matches found

Positive Technologies
Positive Technologies
added 2025/12/09 12:00 a.m.13 views

PT-2025-49706

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to Memory Tagging Extension MTE. Specifically, the issue involves incorrectly setting the PG mte tagged bit for pages that were not properly...

7.8CVSS7.2AI score0.00954EPSS
SaveExploits2References894
RedhatCVE
RedhatCVE
added 2025/11/22 5:36 a.m.24 views

CVE-2025-12023

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ehcrmrestoredata function in all versions up to, and including, 3.3.1. This makes it possible for authenticated attackers, with...

4.3CVSS5.1AI score0.00188EPSS
SaveExploits0References1
OSV
OSV
added 2025/11/21 6:15 a.m.12 views

CVE-2025-12022

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ehcrmsettingsrestoretrash' AJAX endpoint in all versions up to, and including, 3.3.1. This makes it possible for authenticated...

4.3CVSS5.8AI score0.00188EPSS
SaveExploits0References2
NVD
NVD
added 2025/11/21 6:15 a.m.14 views

CVE-2025-12023

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ehcrmrestoredata function in all versions up to, and including, 3.3.1. This makes it possible for authenticated attackers, with...

4.3CVSS0.00188EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/11/21 5:32 a.m.18 views

CVE-2025-12023 ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Ticket Restore

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ehcrmrestoredata function in all versions up to, and including, 3.3.1. This makes it possible for authenticated attackers, with...

4.3CVSS0.00188EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/11/21 5:32 a.m.10 views

EUVD-2025-198381

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ehcrmrestoredata function in all versions up to, and including, 3.3.1. This makes it possible for authenticated attackers, with...

4.3CVSS4.6AI score0.00188EPSS
SaveExploits0References3
CVE
CVE
added 2025/11/21 5:32 a.m.23 views

CVE-2025-12023

The CVE concerns the WordPress ELEX HelpDesk & Customer Ticketing System plugin. Multiple connected documents corroborate a vulnerability in all versions up to 3.3.1 where a missing capability check on eh_crm_restore_data() allows authenticated users with Subscriber-level access and above to modi...

4.3CVSS4.7AI score0.00188EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/11/21 5:32 a.m.6 views

CVE-2025-12023 ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Ticket Restore

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ehcrmrestoredata function in all versions up to, and including, 3.3.1. This makes it possible for authenticated attackers, with...

4.3CVSS4.7AI score0.00188EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/11/21 12:00 a.m.12 views

PT-2025-47661

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'eh crm settings restore trash' AJAX endpoint in all versions up to, and including, 3.3.1. This makes it possible for...

4.3CVSS5.1AI score0.00188EPSS
SaveExploits0References3
HackRead
HackRead
added 2025/11/18 5:36 p.m.9 views

Cloudflare Outage Jolts the Internet – What Happened, and Who Was Hit

Cloudflare outage causes slow sites, login trouble and dashboard errors as users report problems even after the company says service is restored...

7AI score
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/11/16 1:01 a.m.10 views

net: lantiq_xrx200: restore buffer if memory allocation failed

...

7.5CVSS7AI score0.00406EPSS
SaveExploits0
CVE
CVE
added 2025/11/13 1:00 p.m.146 views

CVE-2025-12762

CVE-2025-12762 affects pgAdmin 4 up to v9.9 when running in server mode and performing restores from PLAIN-format dumps, enabling remote code execution via injected commands on the host. Public advisories and Nessus/GHSA entries confirm this is a critical RCE with network access, low complexity, ...

9.8CVSS7.3AI score0.1266EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2025/10/31 12:00 a.m.14 views

Veeam Agent for Microsoft Windows 安全漏洞

Veeam Agent for Microsoft Windows is a data protection and disaster recovery solution for physical and virtual machines from Veeam USA. A security vulnerability exists in Veeam Agent for Microsoft Windows that originates when a system administrator restores a malicious file, which could result in...

7.8CVSS7.1AI score0.00164EPSS
SaveExploits0References2
Veeam
Veeam
added 2025/10/23 12:00 a.m.26 views

Files with Microsoft Purview Sensitivity Labels Are Not Accessible After Being Restored

Challenge After restoring a file that was encrypted with a Microsoft Purview Sensitivity Label, attempting to open it results in an error similar to: Word was unable to read this document. It may be corrupt. Try one or more of the following: Open and Repair the file. Open the file with the Text...

5.4AI score
SaveExploits0Affected Software1
EUVD
EUVD
added 2025/10/15 9:31 p.m.14 views

EUVD-2022-55090

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: svm range restore work deadlock when process exit kfdprocessnotifierrelease flush svmrangerestorework which calls svmrangelistlockandflushwork to flush deferredlist work, but if deferredlist work mmput release the las...

5.5CVSS5.2AI score0.00262EPSS
SaveExploits0References4
OSV
OSV
added 2025/10/10 7:15 a.m.9 views

CVE-2025-21062

Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.67.2 allows local attackers to replace the restoring application. User interaction is required for triggering this vulnerability...

7.8CVSS5.8AI score0.00103EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/10/10 12:00 a.m.10 views

PT-2025-41522

Name of the Vulnerable Software and Affected Versions Smart Switch versions prior to 3.7.67.2 Description The software utilizes a broken or risky cryptographic algorithm. This allows a local attacker to replace the restoring application, but requires user interaction to trigger the issue...

7.8CVSS6.3AI score0.00103EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2007-1710

Malware in sbrugna...

3.4CVSS6AI score0.00302EPSS
SaveExploits0References22
EUVD
EUVD
added 2025/10/07 12:30 a.m.21 views

EUVD-2019-13747

Malware in sbrugna...

7.1CVSS6.6AI score0.00309EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2020-12473

Malware in sbrugna...

8.6CVSS8.5AI score0.01405EPSS
SaveExploits0References3
Rows per page
Query Builder