600043 matches found
CVE-2025-53999
Unauthenticated Broken Access Control in Altair = 5.2.2 versions...
EUVD-2025-210753
HCL IntelliOps Event Management IEM is affected by a least privileges violation which could allow an attacker to access the resource with the elevated privilege that could not be accessed with the attacker's original privileges...
CVE-2025-62299
HCL IntelliOps Event Management (IEM) has a least-privilege violation allowing a privileged (PR:H) network attacker to access resources beyond their original privileges, with HIGH confidentiality impact. CVSS 6.6 MEDIUM; no exploitation details or fix version provided in the documents.
CVE-2026-7485
In Checkmk, incorrect authorization in frozen BI aggregations lets an authenticated user with restricted host/service visibility learn the names and existence of hosts and services they should not see. Affected versions: <2.5.0p2, <2.4.0p29,
CVE-2026-74020 WordPress Koji theme <= 2.2.1 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Koji = 2.2.1 versions...
CVE-2026-74020
Unauthenticated Broken Access Control in Koji = 2.2.1 versions...
EUVD-2026-63320
Unauthenticated Broken Access Control in Koji = 2.2.1 versions...
EUVD-2026-63319
Unauthenticated Broken Access Control in EPROLO Dropshipping = 2.4.2 versions...
CVE-2026-74001
Unauthenticated Broken Authentication in User Registration & Membership Pro = 5.4.5 versions...
EUVD-2026-63314
Unauthenticated Broken Authentication in User Registration & Membership Pro = 5.4.5 versions...
EUVD-2026-63311
Subscriber Remote Code Execution RCE in Query Wrangler = 1.5.57 versions...
CVE-2026-68564
Unauthenticated Cross Site Scripting XSS in NotificationX Pro = 3.1.4 versions...
EUVD-2026-63302
Unauthenticated SQL Injection in Directory Pro = 2.5.8 versions...
EUVD-2026-63301
Subscriber Broken Access Control in Homlisti = 3.1.2 versions...
CVE-2026-66647
Subscriber Broken Access Control in Homlisti = 3.1.2 versions...
CVE-2026-66647 WordPress Homlisti theme <= 3.1.2 - Broken Access Control vulnerability
Subscriber Broken Access Control in Homlisti = 3.1.2 versions...
CVE-2026-66616 WordPress Form Maker by 10Web plugin <= 1.15.46 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Form Maker by 10Web = 1.15.46 versions...
EUVD-2026-63343
Unauthenticated Cross Site Scripting XSS in GeoDirectory = 2.8.173 versions...
CVE-2026-66601
Subscriber-level authenticated users can inject arbitrary JavaScript into the Media Library Assistant plugin (≤3.39) admin interface, enabling session hijacking or data theft. CVSS 6.5 (MEDIUM). Update to version 3.40 or later; no in-the-wild exploitation reported. See: https://patchstack.com/dat...