CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

604242 matches found

Cvelist•added 2026/08/25 9:00 a.m.•37 views

CVE-2026-77143 Broken Access Control in extension "Forum" (pforum)

The frontend topic editing flow does not verify on the server side that the requesting visitor owns the topic being modified. As a result, a visitor who knows the identifier of a topic from the public forum can submit a modified update request for that topic directly and overwrite its content,...

8.8CVSS0.00239EPSS

SaveExploits0References1

CVE•added 2026/08/25 9:00 a.m.•9 views

CVE-2026-77144

CVE-2026-77144 is a broken access control vulnerability in the TYPO3 extension Events 2 (events2), specifically in its frontend management plugin. The plugin attributed a newly created event to the submitting user's organizer record only when the request supplied no organizer of its own, while th...

7.1CVSS5.4AI score0.00301EPSS

SaveExploits0References1

Kitploit•added 2026/08/25 9:00 a.m.•1 views

CVE-2026-37067

CVE-2026-37067 वेनो फ़ाइल मैनेजर प्रोजेक्ट 4.4.9 में /vfm-admin/admin-panel/view/save-cvs.php में गलत पहुँच नियंत्रण एक अप्रमाणित हमलावर को एक विशेष रूप से तैयार POST अनुरोध के माध्यम से एक वांछित तिथि से आगे के सभी एप्लिकेशन लॉग निकालने की अनुमति देता है।...

5.4AI score

SaveExploits0References1

Cvelist•added 2026/08/25 9:00 a.m.•34 views

CVE-2026-77144 Broken Access Control in extension "Events 2" (events2)

The frontend management plugin attributed a newly created event to the submitting user's organizer record only when the request supplied no organizer of its own. The accompanying permission check confirmed only that the submitting user held any organizer role. A user with frontend event managemen...

7.1CVSS0.00301EPSS

SaveExploits0References1

EUVD•added 2026/08/25 9:00 a.m.•5 views

EUVD-2026-65331

The permission check for the frontend management update flow verified a different event than the one the request went on to modify. A user with frontend event management access could therefore modify events belonging to other organizers...

7.1CVSS5.4AI score0.00207EPSS

SaveExploits0References1

Cvelist•added 2026/08/25 9:00 a.m.•35 views

CVE-2026-77145 Broken Access Control in extension "Events 2" (events2)

7.1CVSS0.00207EPSS

SaveExploits0References1

CVE•added 2026/08/25 9:00 a.m.•16 views

CVE-2026-77145

CVE-2026-77145 is a broken access control vulnerability in the TYPO3 extension Events 2 (events2) . The root cause is a flawed permission check in the frontend management update flow: it verified a different event than the one the request actually modified. As a result, a user with frontend event...

7.1CVSS5.4AI score0.00207EPSS

SaveExploits0References1

CVE•added 2026/08/25 9:00 a.m.•10 views

CVE-2026-77146

CVE-2026-77146 affects the TYPO3 extension femanager (version 8.x ). The invitation controller fails to stop processing after redirecting on invalid input — specifically missing hash, non-existent, disabled, or deleted users — allowing an unauthenticated attacker to set a new password for and re-...

8.3CVSS5.7AI score0.00247EPSS

SaveExploits0References1

Friends Of PHP•added 2026/08/25 9:00 a.m.•8 views

TYPO3-EXT-SA-2026-025: Broken Access Control in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)

More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-025...

6.3CVSS5.2AI score0.00242EPSS