Lucene search
K

9 matches found

Cvelist
Cvelist
added 2026/05/25 10:42 p.m.17 views

CVE-2026-32389 WordPress NanoCare theme < 1.2.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Linethemes NanoCare allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects NanoCare: from n/a before 1.2.2...

5.4CVSS0.00223EPSS
Exploits0References1
CVE
CVE
added 2025/09/27 5:0 a.m.14 views

CVE-2025-10954

The CVE-2025-10954 entry concerns the Go package github.com/nyaruka/phonenumbers prior to version 1.2.2, where the phonenumbers.Parse() function may panic due to improper validation of input syntax, causing a runtime slice bounds error. Affected component: phonenumbers.Parse() in the library; roo...

7.5CVSS6.5AI score0.00412EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2025/09/27 5:0 a.m.7 views

CVE-2025-10954

Versions of the package github.com/nyaruka/phonenumbers before 1.2.2 are vulnerable to Improper Validation of Syntactic Correctness of Input in the phonenumbers.Parse function. An attacker can cause a panic by providing crafted input causing a "runtime error: slice bounds out of range"...

6.9CVSS0.00412EPSS
Exploits1References3
CNNVD
CNNVD
added 2022/05/21 12:0 a.m.3 views

Trudesk代码问题漏洞

Chris Brame Trudesk is an open source helpdesk/ticketing solution from Chris Brame USA. A security vulnerability exists in versions prior to Trudesk 1.2.2 that stems from the unrestricted upload of dangerous files...

9CVSS8.1AI score0.02205EPSS
Exploits1References3
CNNVD
CNNVD
added 2022/05/16 12:0 a.m.4 views

Trudesk 输入验证错误漏洞

trudesk is an open source helpdesk/ticketing solution. A denial of service vulnerability exists in trudesk versions prior to 1.2.2, which stems from a lack of validation for password length and can be exploited by an attacker to cause a denial of service via a long password...

7.6CVSS6.8AI score0.00907EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2022/04/01 11:15 p.m.0 views

CVE-2022-27177

A Python format string issue leading to information disclosure and potentially remote code execution in ConsoleMe for all versions prior to 1.2.2...

9.8CVSS7.8AI score0.02121EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/01/19 12:0 a.m.3 views

Orchard Core 跨站脚本漏洞

Orchard Core is an open source modular and multi-tenant application framework built with Asp.Net Core and a content management system Cms built on top of the framework from Orchard Core, Inc. A cross-site scripting vulnerability exists in Orchard Core versions prior to 1.2.2, which can be exploit...

6.8CVSS6AI score0.00573EPSS
Exploits1References3
CNNVD
CNNVD
added 2021/09/13 12:0 a.m.3 views

Element Android 加密问题漏洞

Element Android is the Android Matrix client provided by Element. A cryptographic issue vulnerability exists in Element Android prior to version 1.2.2 and matrix-android-sdk2 prior to version 1.2.2, which stems from a logic error in the device's room key sharing functionality that results in...

5.9CVSS5.9AI score0.00641EPSS
Exploits0References4
CNVD
CNVD
added 2017/10/31 12:0 a.m.3 views

Quagga Denial of Service Vulnerability (CNVD-2017-35655)

Quagga is a routing software suite developed by American software developer Kunihiro Ishiguro. The suite implements OSPFv2, OSPFv3, RIP v1/v2 and other protocols on multiple platforms and provides route redistribution, route mapping and other features. A security vulnerability exists in the...

7.5CVSS6.8AI score0.1879EPSS
Exploits0References1
Rows per page
Query Builder