Lucene search
+L

301 matches found

CNNVD
CNNVD
added 2025/12/12 12:0 a.m.6 views

WordPress plugin WP User Manager 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

6.8CVSS6.5AI score0.00729EPSS
SaveExploits0References7
EUVD
EUVD
added 2025/12/10 9:31 p.m.9 views

EUVD-2023-60186

Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to change the admin password without providing the current credentials. Attackers can exploit the userManager.cgx endpoint by sending a crafted JSON request with a new MD5-hashed password to directly modify...

8.6CVSS6.7AI score0.00801EPSS
SaveExploits1References7
Cvelist
Cvelist
added 2025/12/10 9:8 p.m.24 views

CVE-2023-53775 Screen SFT DAB 1.9.3 Authentication Bypass via Session Management Weakness

Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to change user passwords by exploiting weak session management controls. Attackers can reuse IP-bound session identifiers to issue unauthorized requests to the userManager API and modify user credentials...

7.1CVSS0.00424EPSS
SaveExploits1References6
CVE
CVE
added 2025/12/10 9:8 p.m.24 views

CVE-2023-53775

Screen SFT DAB 1.9.3 contains an authentication bypass due to weak session management, enabling reuse of IP-bound session identifiers to issue unauthorized requests to the userManager API and change user credentials. Concrete details from PT-2025-50526: affected version 1.9.3; attack involves byp...

7.1CVSS6.7AI score0.00424EPSS
SaveExploits1References6Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/10 9:6 p.m.5 views

CVE-2023-53740 Screen SFT DAB 1.9.3 Authentication Bypass via Admin Password Change

Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to change the admin password without providing the current credentials. Attackers can exploit the userManager.cgx endpoint by sending a crafted JSON request with a new MD5-hashed password to directly modify...

8.6CVSS6.8AI score0.00801EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/12/10 12:0 a.m.6 views

DB Elettronica Screen SFT DAB 安全漏洞

DB Elettronica Screen SFT DAB is a series of digital audio broadcast transmitters from DB Elettronica, Italy. A security vulnerability exists in DB Elettronica Screen SFT DAB version 1.9.3, which originates from an authentication bypass in the userManager.cgx endpoint, which could lead to passwor...

9.8CVSS7AI score0.00801EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/12/10 12:0 a.m.12 views

PT-2025-50526

Name of the Vulnerable Software and Affected Versions Screen SFT DAB version 1.9.3 Description Screen SFT DAB 1.9.3 has a flaw in its authentication process, allowing unauthorized modification of user passwords. This is due to weak session management controls, specifically the reuse of IP-bound...

7.1CVSS6.8AI score0.00424EPSS
SaveExploits1References10
RedhatCVE
RedhatCVE
added 2025/11/07 5:33 p.m.8 views

CVE-2025-60245

Deserialization of Untrusted Data vulnerability in WP User Manager WP User Manager wp-user-manager allows Object Injection.This issue affects WP User Manager: from n/a through = 2.9.12...

9.8CVSS7AI score0.00487EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/11/06 6:32 p.m.9 views

EUVD-2025-38102

Deserialization of Untrusted Data vulnerability in WP User Manager WP User Manager wp-user-manager allows Object Injection.This issue affects WP User Manager: from n/a through = 2.9.12...

6.5AI score0.00487EPSS
SaveExploits0References2
NVD
NVD
added 2025/11/06 4:16 p.m.8 views

CVE-2025-60245

Deserialization of Untrusted Data vulnerability in WP User Manager WP User Manager wp-user-manager allows Object Injection.This issue affects WP User Manager: from n/a through = 2.9.12...

9.8CVSS0.00487EPSS
SaveExploits0References1
CVE
CVE
added 2025/11/06 3:55 p.m.25 views

CVE-2025-60245

CVE-2025-60245 describes a Deserialization of Untrusted Data vulnerability in the WP User Manager WordPress plugin (versions

9.8CVSS6.6AI score0.00487EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/11/06 3:55 p.m.5 views

CVE-2025-60245 WordPress WP User Manager plugin <= 2.9.12 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in WP User Manager WP User Manager wp-user-manager allows Object Injection.This issue affects WP User Manager: from n/a through = 2.9.12...

9.8CVSS6.6AI score0.00487EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/11/06 3:55 p.m.15 views

CVE-2025-60245 WordPress WP User Manager plugin <= 2.9.12 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in WP User Manager WP User Manager wp-user-manager allows Object Injection.This issue affects WP User Manager: from n/a through = 2.9.12...

9.8CVSS0.00487EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/11/06 12:0 a.m.8 views

WordPress plugin WP User Manager 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A code issue...

9.8CVSS7AI score0.00487EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/11/06 12:0 a.m.9 views

PT-2025-45286

Deserialization of Untrusted Data vulnerability in WP User Manager WP User Manager wp-user-manager allows Object Injection.This issue affects WP User Manager: from n/a through = 2.9.12...

7AI score0.00487EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2012-5804

Malware in sbrugna...

6.4CVSS6.3AI score0.07374EPSS
SaveExploits2References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2012-5805

Malware in sbrugna...

5.5CVSS6.4AI score0.07278EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2019-17084

Malware in sbrugna...

5.4CVSS6AI score0.00667EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2006-6565

Malware in sbrugna...

6.8CVSS6.4AI score0.01365EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2006-6577

Malware in sbrugna...

7.5CVSS6.4AI score0.01233EPSS
SaveExploits1References6
Rows per page
Query Builder