Lucene search
+L

22790 matches found

CNNVD
CNNVD
added 2025/12/24 12:00 a.m.8 views

WordPress plugin Five Star Restaurant Reservations 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

5.4CVSS6.5AI score0.00113EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/24 12:00 a.m.12 views

PT-2025-53324

V-SOL GPON/EPON OLT Platform 2.03 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user consent. Attackers can craft malicious web pages to create admin users, enable SSH, or modify system settings by tricking authenticated...

5.1CVSS6.7AI score0.00168EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2025/12/24 12:00 a.m.17 views

Teradek Cube 安全漏洞

Teradek Cube is a video decoder from Teradek. A security vulnerability exists in Teradek Cube version 7.3.6, which stems from vulnerability to a cross-site request forgery attack that could result in a change of the administrator password...

5.1CVSS6.7AI score0.00203EPSS
SaveExploits2References3
Positive Technologies
Positive Technologies
added 2025/12/24 12:00 a.m.12 views

PT-2025-53261

Cross-Site Request Forgery CSRF vulnerability in Alessandro Piconi Simple Keyword to Link simple-keyword-to-link allows Cross Site Request Forgery.This issue affects Simple Keyword to Link: from n/a through = 1.5...

8.8CVSS6.8AI score0.00124EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/24 12:00 a.m.9 views

PT-2025-53330

Name of the Vulnerable Software and Affected Versions Legrand BTicino Driver Manager F454 version 1.0.51 Description The software contains web vulnerabilities that permit attackers to carry out administrative tasks without sufficient request validation. An attacker can leverage cross-site request...

5.3CVSS6.1AI score0.00251EPSS
SaveExploits2References6
Positive Technologies
Positive Technologies
added 2025/12/24 12:00 a.m.14 views

PT-2025-53333

Name of the Vulnerable Software and Affected Versions Beward N100 H.264 VGA IP Camera version M2.1.6 Description The Beward N100 H.264 VGA IP Camera version M2.1.6 contains a cross-site request forgery issue. This allows attackers to perform administrative actions without proper validation of...

5.3CVSS6.4AI score0.00161EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/12/24 12:00 a.m.7 views

PT-2025-53341

Name of the Vulnerable Software and Affected Versions VideoFlow Digital Video Protection DVP version 2.10 Description The software contains an authenticated remote code execution issue that enables attackers to execute system commands with root privileges. Exploitation occurs through a cross-site...

8.7CVSS7.9AI score0.00433EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/12/24 12:00 a.m.37 views

WordPress plugin Fast User Switching 安全漏洞

Fast User Switching is a plugin that allows site administrators to quickly switch between different user accounts, operating directly from the WordPress admin toolbar. WordPress Fast User Switching suffers from a cross-site request forgery vulnerability, and no details of the vulnerability are...

4.3CVSS5.7AI score0.00128EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/24 12:00 a.m.10 views

WordPress plugin Trade Runner 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

4.3CVSS6.6AI score0.00129EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/24 12:00 a.m.9 views

PT-2025-53428

CVE-2025-68695 - Apache HTTP Server Cross-Site Request Forgery CSRF CVE ID : CVE-2025-68695 Published : Dec. 24, 2025, 4:15 a.m. | 50 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

7AI score
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/24 12:00 a.m.9 views

V-SOL GPON/EPON OLT Platform 安全漏洞

V-SOL GPON/EPON OLT Platform is an optical line terminal management platform from China Semiconductor V-SOL. A security vulnerability exists in V-SOL GPON/EPON OLT Platform version 2.03, which stems from susceptibility to cross-site request forgery attacks and could lead to the execution of...

5.1CVSS6.8AI score0.00168EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2025/12/24 12:00 a.m.13 views

PT-2025-53328

Name of the Vulnerable Software and Affected Versions FaceSentry Access Control System version 6.4.8 Description The FaceSentry Access Control System is susceptible to a cross-site request forgery condition. This allows attackers to execute administrative actions without explicit user permission...

5.1CVSS6.5AI score0.00232EPSS
SaveExploits2References5
Positive Technologies
Positive Technologies
added 2025/12/24 12:00 a.m.19 views

PT-2025-53340

Name of the Vulnerable Software and Affected Versions KYOCERA Net Admin version 3.4.0906 Description The software contains a cross-site request forgery condition that permits attackers to create administrative users without sufficient request validation. An attacker can construct malicious web...

5.3CVSS6.4AI score0.00317EPSS
SaveExploits2References5
Positive Technologies
Positive Technologies
added 2025/12/24 12:00 a.m.13 views

PT-2025-53255

Cross-Site Request Forgery CSRF vulnerability in wphocus My auctions allegro my-auctions-allegro-free-edition allows Cross Site Request Forgery.This issue affects My auctions allegro: from n/a through = 3.6.32...

8.8CVSS6.9AI score0.00124EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/24 12:00 a.m.23 views

PT-2025-53240

Name of the Vulnerable Software and Affected Versions titopandub Evergreen Post Tweeter versions through 1.8.9 Description A Cross-Site Request Forgery CSRF issue exists in titopandub Evergreen Post Tweeter, potentially allowing for Stored Cross-Site Scripting XSS. The issue affects the...

8.8CVSS5.6AI score0.00117EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/12/24 12:00 a.m.9 views

WordPress plugin Simple Keyword to Link 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.4CVSS6.6AI score0.00124EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/24 12:00 a.m.8 views

Synaccess netBooter NP-0801DU 安全漏洞

Synaccess netBooter NP-0801DU is an intelligent power controller from Synaccess, Inc. A security vulnerability exists in Synaccess netBooter NP-0801DU version 7.4, which stems from a lack of request validation and could lead to cross-site request forgery attacks...

5.1CVSS6.6AI score0.00168EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2025/12/24 12:00 a.m.9 views

PT-2025-53094

Name of the Vulnerable Software and Affected Versions WP Email Capture versions through 3.12.5 Description The software contains a Cross-Site Request Forgery CSRF flaw. This allows attackers to potentially perform actions on behalf of authenticated users without their knowledge. Recommendations...

8.8CVSS6.5AI score0.00124EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/12/24 12:00 a.m.12 views

PT-2025-53372

Ecessa Edge EV150 10.7.4 contains a cross-site request forgery vulnerability that allows attackers to create administrative user accounts without authentication. Attackers can craft a malicious web page with a form that submits requests to the /cgi-bin/pl web.cgi/util configlogin act endpoint to...

5.3CVSS6.9AI score0.00158EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2025/12/24 12:00 a.m.9 views

WordPress plugin My auctions allegro 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin... A security...

5.4CVSS6.6AI score0.00124EPSS
SaveExploits0References1
Rows per page
Query Builder