Lucene search
K

14 matches found

RedhatCVE
RedhatCVE
added 2026/02/20 1:26 p.m.3 views

CVE-2026-25388

Missing Authorization vulnerability in scripteo Ads Pro ap-plugin-scripteo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ads Pro: from n/a through = 5.0...

5.4CVSS5.5AI score0.00053EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/02/20 8:12 a.m.3 views

WordPress Ads Pro plugin <= 5.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Ads Pro versions = 5.0...

5.4CVSS5.4AI score0.00053EPSS
Exploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/02/05 8:23 p.m.8 views

Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in jws-3.2.2.tgz

Summary IBM Watson Discovery Cartridge affected by vulnerability in jws-3.2.2.tgz Vulnerability Details CVEID:CVE-2025-65945 DESCRIPTION: auth0/node-jws is a JSON Web Signature implementation for Node.js. In versions 3.2.2 and earlier and version 4.0.0, auth0/node-jws has an improper signature...

7.5CVSS5.4AI score0.00012EPSS
Exploits1Affected Software1
NVD
NVD
added 2026/02/05 12:15 p.m.2 views

CVE-2026-1517

A vulnerability was identified in iomad up to 5.0. Affected is an unknown function of the component Company Admin Block. Such manipulation leads to sql injection. The attack can be executed remotely. It is best practice to apply a patch to resolve this issue...

5.8CVSS0.00013EPSS
Exploits0References5
vulnersOsv
vulnersOsv
added 2025/12/23 9:15 p.m.4 views

3m (>=0.1.1 <=0.1.3), 4dpocket (>=0.1.3 <=0.1.4) +8077 more potentially affected by CVE-2025-14924 via transformers (>=5.0.0 <=5.8.0)

transformers PYPI version =5.0.0, =0.1.1, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.1.0.dev1, =0.1.0, =2.3.15.994, =3.4.6 - aait-store-cut-part-001 =0.0.1 - aait-store-cut-part-002 =0.0.1 - aait-store-cut-part-003 =0.0.1 - aait-store-cut-part-004 =0.0.1 - aait-store-cut-part-005 =0.0.1 -...

7.8CVSS7.1AI score0.00477EPSS
Exploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2016-0930

Malware in sbrugna...

6.1CVSS6.3AI score0.00335EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-27239

Malicious code in bioql PyPI...

8.7CVSS6.4AI score0.00154EPSS
Exploits0References1
NVD
NVD
added 2025/09/09 9:15 a.m.3 views

CVE-2025-40795

A vulnerability has been identified in SIMATIC PCS neo V4.1 All versions, SIMATIC PCS neo V5.0 All versions, SIMATIC PCS neo V6.0 All versions, User Management Component UMC All versions V2.15.1.3. Affected products contain a stack-based buffer overflow vulnerability in the integrated UMC...

9.8CVSS0.00374EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/09/09 12:0 a.m.5 views

PT-2025-36683

Name of the Vulnerable Software and Affected Versions: SIMATIC PCS neo versions 4.1 All versions SIMATIC PCS neo versions 5.0 All versions User Management Component UMC versions prior to 2.15.1.3 Description: The software contains an out-of-bounds read issue in the integrated User Management...

8.7CVSS6.4AI score0.00154EPSS
Exploits0References4
Patchstack
Patchstack
added 2024/06/19 9:9 a.m.4 views

WordPress phpinfo() WP plugin <= 5.0 - Unauthenticated Data Exposure vulnerability

Unauthenticated Data Exposure vulnerability discovered by LuxF0z Patchstack Alliance in WordPress Plugin phpinfo WP versions = 5.0...

7.5CVSS7AI score0.01446EPSS
Exploits0Affected Software1
OSV
OSV
added 2023/08/07 3:15 p.m.1 views

CVE-2023-27373

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. Due to insufficient input validation, an attacker can tamper with a runtime-accessible EFI variable to cause a dynamic BAR setting to overlap SMRAM...

5.5CVSS5.8AI score0.00074EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/07/17 12:0 a.m.4 views

WordPress plugin AN_GradeBook SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

8.8CVSS8.5AI score0.04597EPSS
Exploits5References4
OSV
OSV
added 2022/05/12 7:15 p.m.2 views

CVE-2021-22531

A bug exist in the input parameter of Access Manager that allows supply of invalid character to trigger cross-site scripting vulnerability. This affects NetIQ Access Manager 4.5 and 5.0...

6.1CVSS5.7AI score
Exploits0References1
OSV
OSV
added 2018/11/16 3:29 p.m.2 views

CVE-2018-1639

The Report Builder of Jazz Reporting Service 5.0 through 5.0.2 and 6.0 through 6.0.6 could allow an authenticated user to obtain sensitive information beyond its assigned privileges. IBM X-Force ID: 144579...

6.5CVSS5.8AI score0.00154EPSS
Exploits0References2
Rows per page
Query Builder