24726 matches found
CVE-2025-55368
CVE-2025-55368 affects jshERP v3.5 in the controller\RoleController.java, where an incorrect access control allows unauthorized attackers to arbitrarily modify the supplier status under any account. Multiple sources (RH, NVD, OSV, CNNVD, CVE list, PT Security) confirm the same description and ver...
CVE-2025-55367
Incorrect access control in the component \controller\SupplierController.java of jshERP v3.5 allows unauthorized attackers to arbitrarily modify the supplier status under any account...
CVE-2025-55368
Incorrect access control in the component \controller\RoleController.java of jshERP v3.5 allows unauthorized attackers to arbitrarily modify the supplier status under any account...
Linux Distros Unpatched Vulnerability : CVE-2021-40574
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The binary MP4Box in Gpac from 0.9.0-preview to 1.0.1 has a double-free vulnerability in the gftextgetutf8line function in loadtext.c, which allows attackers to...
PT-2025-34221 · Jsherp · Jsherp
Name of the Vulnerable Software and Affected Versions: jshERP version 3.5 Description: An incorrect access control issue exists in the controllerRoleController.java component of jshERP version 3.5. This allows unauthorized attackers to arbitrarily modify the supplier status under any account...
PT-2025-34188
Name of the Vulnerable Software and Affected Versions: GiveWP – Donation Plugin and Fundraising Platform versions prior to 4.5.1 Description: The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is susceptible to unauthorized data modification. This is due to the absence of ...
CVE-2025-55368
Incorrect access control in the component \controller\RoleController.java of jshERP v3.5 allows unauthorized attackers to arbitrarily modify the supplier status under any account...
WordPress plugin GiveWP 授权问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An authorization...
Linux Distros Unpatched Vulnerability : CVE-2020-35530
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In LibRaw, there is an out-of-bounds write vulnerability within the newnode function libraw\src\x3f\x3futilspatched.cpp that can be triggered via a crafted X3F...
Linux Distros Unpatched Vulnerability : CVE-2023-26150
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Versions of the package asyncua before 0.9.96 are vulnerable to Improper Authentication such that it is possible to access Address Space without encryption and...
Linux Distros Unpatched Vulnerability : CVE-2018-6113
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper handling of pending navigation entries in Navigation in Google Chrome on iOS prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofin...
CVE-2025-43746
creationtimestamp| type| source ---|---|--- 2025-08-20 20:23:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwuazqo3mu2p...
CVE-2025-1139
creationtimestamp| type| source ---|---|--- 2025-08-20 18:18:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwtzzybp5v2u...
CVE-2025-8309
creationtimestamp| type| source ---|---|--- 2025-08-20 17:23:46+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115062251535912421 2025-08-20 20:33:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwublo5aup25...
CVE-2025-6182
creationtimestamp| type| source ---|---|--- 2025-08-20 17:10:21+00:00| seen| Telegram/VXNPEDM0j51HyijIqY-DfJAZQCpDIvPq7FcxFsrZKRTILiA...
CVE-2025-57732
creationtimestamp| type| source ---|---|--- 2025-08-20 14:37:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwtnoxnaiz27...
CVE-2025-43750
creationtimestamp| type| source ---|---|--- 2025-08-20 14:32:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwtnfz3dt526...
CVE-2025-32010
creationtimestamp| type| source ---|---|--- 2025-08-20 13:30:45+00:00| seen| https://infosec.place/objects/19cbb903-c61a-4242-9dbf-2801249e8b08 2025-08-20 16:23:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwttm6sh5i2e...