Lucene search
K

15 matches found

OSV
OSV
added 2025/12/18 3:16 p.m.0 views

CVE-2025-7047

Missing Authorization vulnerability in Utarit Informatics Services Inc. SoliClub allows Privilege Abuse.This issue affects SoliClub: before 5.3.7...

5.4CVSS5.8AI score
Exploits0References1
Cvelist
Cvelist
added 2025/12/18 2:43 p.m.19 views

CVE-2025-7047 Missing Authorization in Utarit Informatics' SoliClub

Missing Authorization vulnerability in Utarit Informatics Services Inc. SoliClub allows Privilege Abuse.This issue affects SoliClub: before 5.3.7...

4.3CVSS0.00034EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.1 views

PT-2025-52238

Missing Authorization vulnerability in Utarit Informatics Services Inc. SoliClub allows Privilege Abuse.This issue affects SoliClub: before 5.3.7...

4.3CVSS7AI score0.00034EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.1 views

PT-2025-52254

Use of Hard-coded Credentials vulnerability in Utarit Informatics Services Inc. SoliClub allows Authentication Abuse.This issue affects SoliClub: before 5.3.7...

7.5CVSS7AI score0.00055EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2011-2192

Malware in sbrugna...

6.4CVSS9.3AI score0.11671EPSS
Exploits1References29
CNNVD
CNNVD
added 2025/09/09 12:0 a.m.1 views

WordPress plugin AutomatorWP 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

5.4CVSS6.4AI score0.00061EPSS
Exploits0References2
OSV
OSV
added 2024/10/25 7:15 a.m.0 views

CVE-2024-9302

The App Builder – Create Native Android & iOS Apps On The Flight plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.3.7. This is due to the verifyotpforgotpassword and updatepassword functions not having enough controls to preve...

9.8CVSS5.8AI score
Exploits0References4
Positive Technologies
Positive Technologies
added 2024/10/25 12:0 a.m.2 views

PT-2024-39557 · WordPress · The App Builder – Create Native Android & Ios Apps On The Flight

Name of the Vulnerable Software and Affected Versions: The App Builder – Create Native Android & iOS Apps On The Flight plugin for WordPress versions up to, and including, 5.3.7 Description: The issue is related to privilege escalation via account takeover. This is due to the verify otp forgot...

9.8CVSS6.9AI score0.00715EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2024/10/08 12:0 a.m.2 views

PT-2024-39143 · WordPress · Woocommerce Multilingual & Multicurrency With Wpml

Name of the Vulnerable Software and Affected Versions: WooCommerce Multilingual & Multicurrency with WPML plugin for WordPress versions up to, and including, 5.3.7 Description: The issue is related to Reflected Cross-Site Scripting due to the use of add query arg without appropriate escaping on t...

6.1CVSS6.5AI score0.01837EPSS
Exploits0References7
Patchstack
Patchstack
added 2023/04/07 12:0 a.m.14 views

WordPress WP Data Access Plugin <= 5.3.7 is vulnerable to Broken Access Control

Software WP Data Access Type Plugin Vulnerable versions = 5.3.7 Fixed in 5.3.8 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-1874 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID d34193572ac0 Credits Chloe Chamberland Required...

8.8CVSS6.8AI score0.05712EPSS
Exploits3References3Affected Software1
Prion
Prion
added 2018/02/15 1:29 p.m.17 views

Code injection

Various plugin servlet resources in Atlassian Bitbucket Server before version 5.3.7 the fixed version for 5.3.x, from version 5.4.0 before 5.4.6 the fixed version for 5.4.x, from version 5.5.0 before 5.5.6 the fixed version for 5.5.x, from version 5.6.0 before 5.6.3 the fixed version for 5.6.x,...

4.3CVSS4.8AI score0.00205EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2017/09/09 8:29 a.m.2 views

DEBIAN-CVE-2017-14226

WP1StylesListener.cpp, WP5StylesListener.cpp, and WP42StylesListener.cpp in libwpd 0.10.1 mishandle iterators, which allows remote attackers to cause a denial of service heap-based buffer over-read in the WPXTableList class in WPXTable.cpp. This vulnerability can be triggered in LibreOffice befor...

7.5CVSS7AI score0.01612EPSS
Exploits0References1
OSV
OSV
added 2011/11/03 3:55 p.m.0 views

UBUNTU-CVE-2011-4078

include/iniset.php in Roundcube Webmail 0.5.4 and earlier, when PHP 5.3.7 or 5.3.8 is used, allows remote attackers to trigger a GET request for an arbitrary URL, and cause a denial of service resource consumption and inbox outage, via a Subject header containing only a URL, a related issue to...

5CVSS5.9AI score0.00859EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2011/08/25 12:0 a.m.69 views

PHP 5.3.7 Cryptographic Vulnerability

PHP is prone to a cryptographic vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; ifdescription...

4.3CVSS6.7AI score0.01272EPSS
Exploits2References3
OpenVAS
OpenVAS
added 2011/06/02 12:0 a.m.63 views

PHP 'socket_connect()' Buffer Overflow Vulnerability - Windows

PHP is prone to a stack buffer overflow vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; if description...

7.5CVSS7.1AI score0.36532EPSS
Exploits13References4
Rows per page
Query Builder