Lucene search
+L

40 matches found

Patchstack
Patchstack
•added 2026/04/23 10:03 a.m.•17 views

WordPress Roam theme <= 2.1 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Bonds in WordPress Theme Roam versions = 2.1...

9.8CVSS7.6AI score0.006EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2026/01/23 9:15 p.m.•21 views

CVE-2026-22407

Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Roam roam allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Roam: from n/a through = 2.1.1...

3.8CVSS5.4AI score0.00239EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/22 5:16 p.m.•18 views

CVE-2026-22407

Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Roam roam allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Roam: from n/a through = 2.1.1...

3.8CVSS0.00239EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/01/22 4:52 p.m.•46 views

CVE-2026-22407 WordPress Roam theme <= 2.1.1 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Roam roam allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Roam: from n/a through = 2.1.1...

3.8CVSS0.00239EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/22 4:52 p.m.•31 views

CVE-2026-22407

CVE-2026-22407 describes an IDOR-style Authorization Bypass in Mikado-Themes Roam (Roam) WordPress theme. Affected: Roam versions up to 2.1.1. Root cause: access control levels misconfigured, with a user-controlled key allowing bypass to restricted resources. Impact: authorisation bypass could ex...

3.8CVSS6AI score0.00239EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/22 4:52 p.m.•11 views

CVE-2026-22407 WordPress Roam theme <= 2.1.1 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Roam roam allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Roam: from n/a through = 2.1.1...

3.8CVSS6AI score0.00239EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/01/22 4:52 p.m.•8 views

CVE-2026-22407

Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Roam roam allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Roam: from n/a through = 2.1.1...

5.4CVSS5.3AI score0.00239EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/22 12:00 a.m.•9 views

CVE-2026-22407: Authorization Bypass Through User-Controlled Key

Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Roam roam allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Roam: from n/a through = 2.1.1...

3.8CVSS6AI score0.00239EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/22 12:00 a.m.•26 views

WordPress plugin Roam has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

3.8CVSS5.8AI score0.00239EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/22 12:00 a.m.•20 views

PT-2026-4224

Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Roam roam allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Roam: from n/a through = 2.1.1...

5.4AI score0.00239EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2026/01/02 1:15 p.m.•21 views

WordPress Roam theme <= 2.1.1 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Roam versions = 2.1.1...

5.4CVSS7AI score0.00239EPSS
SaveExploits0Affected Software1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2018-3855

Malware in sbrugna...

7.8CVSS7.3AI score0.00177EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2018-3819

Malware in sbrugna...

7.8CVSS7.4AI score0.00192EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2017-2651

Malware in sbrugna...

9.3CVSS7.3AI score0.00601EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/05/23 6:06 a.m.•16 views

CVE-2023-21070

In addroamcachelist of wlroam.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

6.7CVSS6.6AI score0.00095EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/03/24 12:00 a.m.•14 views

PT-2023-17863 · Unknown · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel versions affected versions not specified Description: The issue is related to a missing bounds check in the add roam cache list function of wl roam.c, which could lead to a possible out of bounds write. This might result in loc...

6.7CVSS6.3AI score0.00095EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2022/03/11 11:15 p.m.•18 views

CVE-2021-41849

An issue was discovered in Luna Simo PPR1.180610.011/202001031830. It sends the following Personally Identifiable Information PII in plaintext using HTTP to servers located in China: user's list of installed apps and device International Mobile Equipment Identity IMEI. This PII is transmitted to...

5.5CVSS6.1AI score0.00251EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/10/17 12:00 a.m.•14 views

CVE-2018-15395: Improper Access Control

A vulnerability in the authentication and authorization checking mechanisms of Cisco Wireless LAN Controller WLC Software could allow an authenticated, adjacent attacker to gain network access to a Cisco TrustSec domain. Under normal circumstances, this access should be prohibited. The...

5.4CVSS6AI score0.00583EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2018/10/17 12:00 a.m.•6 views

PT-2018-2131

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller WLC Software affected versions not specified Description A vulnerability in the authentication and authorization checking mechanisms could allow an authenticated, adjacent attacker to gain network access to a Cisc...

5.4CVSS0.00583EPSS
SaveExploits0References7
CNVD
CNVD
•added 2018/09/20 12:00 a.m.•21 views

Google Android Buffer Overflow Vulnerability (CNVD-2018-19581)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A buffer overflow vulnerability exists in wmafillroamsynchbuffer in Android. An attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service...

7.8CVSS8.1AI score0.00177EPSS
SaveExploits0References1
Rows per page
Query Builder