Lucene search
+L

34 matches found

Patchstack
Patchstack
•added 2026/04/23 10:03 a.m.•14 views

WordPress Roam theme <= 2.1 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Bonds in WordPress Theme Roam versions = 2.1...

9.8CVSS7.8AI score0.006EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2026/01/23 9:15 p.m.•14 views

CVE-2026-22407

Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Roam roam allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Roam: from n/a through = 2.1.1...

3.8CVSS5.4AI score0.00234EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/22 5:16 p.m.•13 views

CVE-2026-22407

Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Roam roam allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Roam: from n/a through = 2.1.1...

3.8CVSS0.00234EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/22 4:52 p.m.•10 views

CVE-2026-22407 WordPress Roam theme <= 2.1.1 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Roam roam allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Roam: from n/a through = 2.1.1...

3.8CVSS5.9AI score0.00234EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/01/22 4:52 p.m.•40 views

CVE-2026-22407 WordPress Roam theme <= 2.1.1 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Roam roam allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Roam: from n/a through = 2.1.1...

3.8CVSS0.00234EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/01/22 4:52 p.m.•4 views

CVE-2026-22407

Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Roam roam allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Roam: from n/a through = 2.1.1...

5.4CVSS5.3AI score0.00234EPSS
SaveExploits0References2
CVE
CVE
•added 2026/01/22 4:52 p.m.•24 views

CVE-2026-22407

CVE-2026-22407 describes an IDOR-style Authorization Bypass in Mikado-Themes Roam (Roam) WordPress theme. Affected: Roam versions up to 2.1.1. Root cause: access control levels misconfigured, with a user-controlled key allowing bypass to restricted resources. Impact: authorisation bypass could ex...

3.8CVSS5.4AI score0.00234EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/22 12:00 a.m.•2 views

CVE-2026-22407: Authorization Bypass Through User-Controlled Key

Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Roam roam allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Roam: from n/a through = 2.1.1...

3.8CVSS5.9AI score0.00234EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/22 12:00 a.m.•14 views

PT-2026-4224

Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Roam roam allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Roam: from n/a through = 2.1.1...

5.4AI score0.00234EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/01/22 12:00 a.m.•19 views

WordPress plugin Roam has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

3.8CVSS5.8AI score0.00234EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/01/02 1:15 p.m.•18 views

WordPress Roam theme <= 2.1.1 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Roam versions = 2.1.1...

5.4CVSS7AI score0.00234EPSS
SaveExploits0Affected Software1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2017-2651

Malware in sbrugna...

9.3CVSS7.7AI score0.00601EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2018-3855

Malware in sbrugna...

7.8CVSS7.7AI score0.00177EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•10 views

EUVD-2018-3819

Malware in sbrugna...

7.8CVSS7.7AI score0.00192EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/05/23 6:06 a.m.•13 views

CVE-2023-21070

In addroamcachelist of wlroam.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

6.7CVSS6.6AI score0.00095EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/03/24 12:00 a.m.•12 views

PT-2023-17863 · Unknown · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel versions affected versions not specified Description: The issue is related to a missing bounds check in the add roam cache list function of wl roam.c, which could lead to a possible out of bounds write. This might result in loc...

6.7CVSS6.3AI score0.00095EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2022/03/11 11:15 p.m.•13 views

CVE-2021-41849

An issue was discovered in Luna Simo PPR1.180610.011/202001031830. It sends the following Personally Identifiable Information PII in plaintext using HTTP to servers located in China: user's list of installed apps and device International Mobile Equipment Identity IMEI. This PII is transmitted to...

5.5CVSS6.1AI score0.00251EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/10/17 12:00 a.m.•4 views

CVE-2018-15395: Improper Access Control

A vulnerability in the authentication and authorization checking mechanisms of Cisco Wireless LAN Controller WLC Software could allow an authenticated, adjacent attacker to gain network access to a Cisco TrustSec domain. Under normal circumstances, this access should be prohibited. The...

5.4CVSS6AI score0.00583EPSS
SaveExploits0References2
CNVD
CNVD
•added 2018/09/20 12:00 a.m.•16 views

Google Android Buffer Overflow Vulnerability (CNVD-2018-19581)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A buffer overflow vulnerability exists in wmafillroamsynchbuffer in Android. An attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service...

7.8CVSS8.1AI score0.00177EPSS
SaveExploits0References1
NVD
NVD
•added 2018/09/18 6:29 p.m.•28 views

CVE-2018-11863

In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, lack of check of input received from firmware to calculate the length of WMA roam synch buffer can lead to buffer overwrite during memcpy...

7.8CVSS7.6AI score0.00177EPSS
SaveExploits0References2
Rows per page
Query Builder