CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

127 matches found

Rapid7 Vulnerability Database (full)•added 2026/08/11 12:00 a.m.•0 views

CVE-2026-72554: Improper Access Control

A broken access control vulnerability in Ladybird Web Solution Faveo Helpdesk 2.0.3 allows any self-registered customer to read ticket conversations belonging to other customers via the v1 REST API. The API verifies the existence of the requested ticket but not ownership, enabling any authenticat...

6.5CVSS5.9AI score0.0037EPSS

SaveExploits0References2

BDU FSTEC•added 2026/02/20 12:00 a.m.•12 views

The vulnerability of the multi-platform web solution for creating Scada systems, Scada-LTS, is related to insufficient verification of the authenticity of executed requests. This allows attackers to bypass security restrictions and carry out CSRF attacks.

The vulnerability of the multi-platform web solution for creating Scada systems is related to insufficient verification of the authenticity of executed requests. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and perform CSRF attacks...

10CVSS5.8AI score0.00264EPSS

SaveExploits1References6Affected Software1

Positive Technologies•added 2026/02/19 12:00 a.m.•27 views

PT-2026-20766

Missing Authorization vulnerability in PI Web Solution Live sales notification for WooCommerce live-sales-notifications-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Live sales notification for WooCommerce: from n/a through = 2.3.46...

5.5AI score0.00042EPSS

SaveExploits0References1

BDU FSTEC•added 2025/12/01 12:00 a.m.•14 views

The vulnerability of the FolderHandler component in the multi-platform web solution for creating Scada systems, Scada-LTS, allows a hacker to perform cross-site scripting attacks.

The vulnerability of the FolderHandler component in the multi-platform web solution for creating Scada systems is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

5.5CVSS5.7AI score0.00282EPSS

SaveExploits1References3Affected Software1