Lucene search
+L

374 matches found

NVD
NVD
•added 2026/10/29 4:17 p.m.•1 views

CVE-2026-112256

Acceptance of extraneous untrusted data with trusted data vulnerability in OpenText Advanced Authentication Server allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Advanced Authentication Server: from 6.4.0.0 through 6.4.3.8, from 6.5.0.0 through 6.5.0.10, and...

9.9CVSS
SaveExploits0References4
CVE
CVE
•added 2026/10/29 3:31 p.m.•3 views

CVE-2026-112256

OpenText Advanced Authentication Server versions 6.4.0.0 through 6.4.3.8, 6.5.0.0 through 6.5.0.10, and 6.6.0.0 through 6.6.1.0 are vulnerable to a logon bypass due to the acceptance of extraneous untrusted data with trusted data (specifically, an attacker-controlled completed-methods list ). Thi...

9.9CVSS5.9AI score
SaveExploits0References4
NVD
NVD
•added 2026/10/19 2:17 p.m.•10 views

CVE-2026-111828

Improper Validation of Specified Quantity in Input vulnerability in Mamunur Rashid Classified Listing classified-listing allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Classified Listing: from n/a through 6.1.5...

4.3CVSS0.00215EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/19 1:29 p.m.•10 views

EUVD-2026-104323

Improper Validation of Specified Quantity in Input vulnerability in Mamunur Rashid Classified Listing classified-listing allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Classified Listing: from n/a through 6.1.5...

4.3CVSS5.8AI score0.00215EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/19 1:29 p.m.•7 views

CVE-2026-111828 WordPress Classified Listing plugin <= 6.1.5 - Direct static code injection vulnerability

Improper Validation of Specified Quantity in Input vulnerability in Mamunur Rashid Classified Listing classified-listing allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Classified Listing: from n/a through 6.1.5...

4.3CVSS5.8AI score0.00215EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/19 1:29 p.m.•17 views

CVE-2026-111828

The WordPress Classified Listing plugin (versions

4.3CVSS5.8AI score0.00215EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/19 1:29 p.m.•42 views

CVE-2026-111828 WordPress Classified Listing plugin <= 6.1.5 - Direct static code injection vulnerability

Improper Validation of Specified Quantity in Input vulnerability in Mamunur Rashid Classified Listing classified-listing allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Classified Listing: from n/a through 6.1.5...

4.3CVSS0.00215EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/10/19 12:00 a.m.•9 views

PT-2026-117391

Improper Validation of Specified Quantity in Input vulnerability in Mamunur Rashid Classified Listing classified-listing allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Classified Listing: from n/a through 6.1.5...

4.3CVSS5.8AI score0.00215EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/19 12:00 a.m.•11 views

CVE-2026-111828: Improper Validation of Specified Quantity in Input

Improper Validation of Specified Quantity in Input vulnerability in Mamunur Rashid Classified Listing classified-listing allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Classified Listing: from n/a through 6.1.5...

4.3CVSS5.8AI score0.00215EPSS
SaveExploits0References2
NVD
NVD
•added 2026/10/03 3:16 p.m.•29 views

CVE-2026-103065

Improper Validation of Specified Quantity in Input vulnerability in Themeum Kirki kirki allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Kirki: from n/a through 6.3.1...

8.2CVSS0.00203EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/29 1:46 p.m.•15 views

EUVD-2026-88959

Insertion of sensitive information into sent data vulnerability in Parla Auto Automotive Trading Limited Company DetaWix Mobile Web Portal allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects DetaWix Mobile Web Portal: before v1.0.19...

7.5CVSS5.8AI score0.00245EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/29 1:46 p.m.•96 views

CVE-2026-86450 Sensitive Data Exposure in Parla Auto's DetaWix Mobile Web Portal

Insertion of sensitive information into sent data vulnerability in Parla Auto Automotive Trading Limited Company DetaWix Mobile Web Portal allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects DetaWix Mobile Web Portal: before v1.0.19...

7.5CVSS0.00245EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/29 12:00 a.m.•15 views

CVE-2026-86450: Insertion of Sensitive Information Into Sent Data

Insertion of sensitive information into sent data vulnerability in Parla Auto Automotive Trading Limited Company DetaWix Mobile Web Portal allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects DetaWix Mobile Web Portal: before v1.0.19...

7.5CVSS5.8AI score0.00245EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/25 9:17 p.m.•21 views

CVE-2026-100378

Missing Authorization vulnerability in Wikimedia Foundation Mediawiki - Translate Extension allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Mediawiki - Translate Extension: from before 1.46.1, 1.45.5, 1.43.10...

5.3CVSS0.00265EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/25 8:50 p.m.•20 views

CVE-2026-100378 Missing permission check in the Translate sandbox doRemind action

Missing Authorization vulnerability in Wikimedia Foundation Mediawiki - Translate Extension allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Mediawiki - Translate Extension: from before 1.46.1, 1.45.5, 1.43.10...

5.3CVSS5.8AI score0.00265EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/25 8:50 p.m.•28 views

CVE-2026-100378

The Mediawiki - Translate Extension contains a Missing Authorization vulnerability that allows for accessing functionality not properly constrained by Access Control Lists (ACLs). Specifically, the issue involves a missing permission check in the Translate sandbox doRemind action . This vulnerabi...

5.3CVSS5.8AI score0.00265EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/25 8:50 p.m.•20 views

EUVD-2026-87361

Missing Authorization vulnerability in Wikimedia Foundation Mediawiki - Translate Extension allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Mediawiki - Translate Extension: from before 1.46.1, 1.45.5, 1.43.10...

5.3CVSS5.7AI score0.00265EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/23 7:19 p.m.•18 views

CVE-2026-96872

Improper handling of insufficient permissions or privileges vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda Extension on Linux, MacOS, and Windows allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Mediawiki - WikiLambda Extension: before 1.47.0...

6.3CVSS0.00346EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/23 6:50 p.m.•49 views

CVE-2026-96872 WikiLambda public function execution bypasses the unsaved-code permission through nested Z825 compositions

Improper handling of insufficient permissions or privileges vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda Extension on Linux, MacOS, and Windows allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Mediawiki - WikiLambda Extension: before 1.47.0...

6.3CVSS0.00346EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/23 6:50 p.m.•16 views

EUVD-2026-85562

Improper handling of insufficient permissions or privileges vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda Extension on Linux, MacOS, and Windows allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Mediawiki - WikiLambda Extension: before 1.47.0...

6.3CVSS5.9AI score0.00346EPSS
SaveExploits0References2
Rows per page
Query Builder