133 matches found
Navigate CMS 2.9.4 - Server-Side Request Forgery
Navigate CMS 2.9.4 is susceptible to server-side request forgery via feedparser class. This can allow a remote attacker to force the application to make arbitrary requests via injection of arbitrary URLs into the feed parameter, thus enabling possible theft of sensitive information, data...
CVE-2026-110540
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Missing Authorization vulnerability. ...
EUVD-2026-111997
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Missing Authorization vulnerability. ...
CVE-2026-110540
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Missing Authorization vulnerability. ...
CVE-2026-110540
Dell PowerProtect Data Domain Management Center versions 7.7.1.0 through 8.8, LTS2024 (7.13.1.0-7.13.1.80), LTS2025 (8.3.1.0-8.3.1.40), and LTS2026 (8.6.1.0-8.6.1.20) are affected by a Missing Authorization vulnerability. A low privileged attacker with remote access could exploit this issue to pe...
PT-2026-128090
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Missing Authorization vulnerability. ...
CVE-2026-71933
Multiple DrayTek VigorSwitch models contain unauthorized operation vulnerabilities in multiple syslog functions. The vulnerability is caused by missing authorization checks. A remote attacker can trigger these vulnerabilities via crafted requests to modify configuration, restart services, save...
EUVD-2026-64992
Multiple DrayTek VigorSwitch models contain unauthorized operation vulnerabilities in multiple syslog functions. The vulnerability is caused by missing authorization checks. A remote attacker can trigger these vulnerabilities via crafted requests to modify configuration, restart services, save...
PT-2026-80967
Name of the Vulnerable Software and Affected Versions DrayTek VigorSwitch affected versions not specified Description Multiple syslog functions lack proper authorization checks, allowing a remote attacker to perform unauthorized operations. By sending crafted requests, an attacker can modify the...
CVE-2026-73371
Joomla! Core - 20260808 - Improper ACL checks for batch copy actions in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper access check allows unauthorized users to perform copy batch operations on uneditable items...
CVE-2021-22772
A CWE-306: Missing Authentication for Critical Function vulnerability exists in Easergy T200 Modbus SC2-04MOD-07000100 and earlier, Easergy T200 IEC104 SC2-04IEC-07000100 and earlier, and Easergy T200 DNP3 SC2-04DNP-07000102 and earlier that could cause unauthorized operation when authentication ...
WordPress plugin “Hide Category by User Role for WooCommerce” has a security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerability...
IBM App Connect Enterprise security vulnerabilities
IBM App Connect Enterprise is an operating system from International Business Machines IBM.IBM App Connect Enterprise combines existing industry-trusted IBM Integration Bus technology with IBM App Connect Professional and new cloud-native IBM App Connect Enterprise combines existing...
EUVD-2020-11784
Malware in sbrugna...
EUVD-2021-9907
Malicious code in bioql PyPI...
EUVD-2025-18369
Malicious code in bioql PyPI...
Maka GPS Marbella KR8s security vulnerabilities
Maka GPS Marbella KR8s is a car recorder from Maka GPS Singapore. A security vulnerability exists in Maka GPS Marbella KR8s version 2.0.8, which originates from an unauthorized operation on port 7777...
CVE-2025-6172
Permission vulnerability in the mobile application com.afmobi.boomplayer may lead to the risk of unauthorized operation...
CVE-2025-6172
A permission vulnerability exists in the com.afmobi.boomplayer mobile application, which is developed by Transfon (TECNO) . The root cause stems from improper privilege management (CWE-287), which could allow an attacker to perform unauthorized operations . While specific affected versions are no...
