Lucene search
+L

2476 matches found

CNNVD
CNNVD
added 2026/04/09 12:0 a.m.7 views

WordPress plugin Vertex Addons for Elementor 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

8.8CVSS5.9AI score0.00578EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2026/04/09 12:0 a.m.9 views

PT-2026-31563

Name of the Vulnerable Software and Affected Versions Vertex Addons for Elementor plugin for WordPress versions up to and including 1.6.4 Description The Vertex Addons for Elementor plugin for WordPress is susceptible to a missing authorization issue. This is caused by insufficient authorization...

8.8CVSS6AI score0.00578EPSS
SaveExploits0References17
EUVD
EUVD
added 2026/04/05 9:30 p.m.5 views

EUVD-2019-20065

River Past Ringtone Converter 2.7.6.1601 contains a local buffer overflow vulnerability that allows attackers to crash the application by supplying oversized input to activation fields. Attackers can paste 300 bytes of data into the Email textbox and Activation code textarea via the Help menu's...

6.9CVSS6.2AI score0.00191EPSS
SaveExploits1References4
NVD
NVD
added 2026/04/05 9:16 p.m.5 views

CVE-2019-25665

River Past Ringtone Converter 2.7.6.1601 contains a local buffer overflow vulnerability that allows attackers to crash the application by supplying oversized input to activation fields. Attackers can paste 300 bytes of data into the Email textbox and Activation code textarea via the Help menu's...

6.9CVSS0.00191EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2026/04/05 8:45 p.m.26 views

CVE-2019-25665 River Past Ringtone Converter 2.7.6.1601 Buffer Overflow DoS

River Past Ringtone Converter 2.7.6.1601 contains a local buffer overflow vulnerability that allows attackers to crash the application by supplying oversized input to activation fields. Attackers can paste 300 bytes of data into the Email textbox and Activation code textarea via the Help menu's...

6.9CVSS0.00191EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2026/04/05 8:45 p.m.2 views

CVE-2019-25665

River Past Ringtone Converter 2.7.6.1601 contains a local buffer overflow vulnerability that allows attackers to crash the application by supplying oversized input to activation fields. Attackers can paste 300 bytes of data into the Email textbox and Activation code textarea via the Help menu's...

6.9CVSS6.2AI score0.00191EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/05 8:45 p.m.5 views

CVE-2019-25665 River Past Ringtone Converter 2.7.6.1601 Buffer Overflow DoS

River Past Ringtone Converter 2.7.6.1601 contains a local buffer overflow vulnerability that allows attackers to crash the application by supplying oversized input to activation fields. Attackers can paste 300 bytes of data into the Email textbox and Activation code textarea via the Help menu's...

6.9CVSS6.2AI score0.00191EPSS
SaveExploits1References3
CVE
CVE
added 2026/04/05 8:45 p.m.9 views

CVE-2019-25665

River Past Ringtone Converter 2.7.6.1601 contains a local buffer overflow vulnerability that can crash the application, triggered by oversized input (300 bytes) entered into the Email textbox and Activation code textarea via the Help > Activate dialog. The issue constitutes a Denial of Service...

6.9CVSS6.2AI score0.00191EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2026/04/05 12:0 a.m.10 views

River Past Ringtone Converter 缓冲区错误漏洞

River Past Ringtone Converter is an audio conversion tool developed by the River Past company. Version 2.7.6.1601 of River Past Ringtone Converter has a buffer error vulnerability. This vulnerability stems from a local buffer overflow in the activation field, which could allow attackers to cause...

6.9CVSS6.1AI score0.00191EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2026/04/05 12:0 a.m.17 views

PT-2026-30474

River Past Ringtone Converter 2.7.6.1601 contains a local buffer overflow vulnerability that allows attackers to crash the application by supplying oversized input to activation fields. Attackers can paste 300 bytes of data into the Email textbox and Activation code textarea via the Help menu's...

6.9CVSS6.2AI score0.00191EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
added 2026/04/03 11:2 p.m.6 views

CVE-2026-34736

Open edX Platform enables the authoring and delivery of online learning at any scale. From the maple release to before the ulmo release, an unauthenticated attacker can fully bypass the email verification process by combining two issues: the OAuth2 password grant issuing tokens to inactive users...

5.3CVSS5.8AI score0.00211EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/04/03 6:31 p.m.5 views

EUVD-2026-18746

In the Linux kernel, the following vulnerability has been resolved: iouring/poll: fix multishot recv missing EOF on wakeup race When a socket send and shutdown happen back-to-back, both fire wake-ups before the receiver's taskwork has a chance to run. The first wake gets poll ownership pollrefs=1...

5.8AI score0.00022EPSS
SaveExploits0References4
NVD
NVD
added 2026/04/02 7:21 p.m.7 views

CVE-2026-34736

Open edX Platform enables the authoring and delivery of online learning at any scale. From the maple release to before the ulmo release, an unauthenticated attacker can fully bypass the email verification process by combining two issues: the OAuth2 password grant issuing tokens to inactive users...

5.3CVSS0.00211EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/04/02 6:29 p.m.29 views

CVE-2026-34736 Open edX Platform: Account Activation Bypass via activation_key Exposure in REST API

Open edX Platform enables the authoring and delivery of online learning at any scale. From the maple release to before the ulmo release, an unauthenticated attacker can fully bypass the email verification process by combining two issues: the OAuth2 password grant issuing tokens to inactive users...

5.3CVSS0.00211EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/04/02 6:29 p.m.3 views

CVE-2026-34736 Open edX Platform: Account Activation Bypass via activation_key Exposure in REST API

Open edX Platform enables the authoring and delivery of online learning at any scale. From the maple release to before the ulmo release, an unauthenticated attacker can fully bypass the email verification process by combining two issues: the OAuth2 password grant issuing tokens to inactive users...

5.3CVSS5.8AI score0.00211EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/04/02 6:29 p.m.2 views

CVE-2026-34736

Open edX Platform enables the authoring and delivery of online learning at any scale. From the maple release to before the ulmo release, an unauthenticated attacker can fully bypass the email verification process by combining two issues: the OAuth2 password grant issuing tokens to inactive users...

5.3CVSS5.8AI score0.00211EPSS
SaveExploits0References3
CVE
CVE
added 2026/04/02 6:29 p.m.20 views

CVE-2026-34736

Open edX Platform experiened an account-activation bypass vulnerability (CVE-2026-34736). In affected versions from maple up to just before ulmo, an unauthenticated attacker could bypass email verification by chaining two issues: the OAuth2 password grant issuing tokens to inactive users, and the...

5.3CVSS5.8AI score0.00211EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/04/02 6:29 p.m.5 views

EUVD-2026-18502

Open edX Platform enables the authoring and delivery of online learning at any scale. From the maple release to before the ulmo release, an unauthenticated attacker can fully bypass the email verification process by combining two issues: the OAuth2 password grant issuing tokens to inactive users...

5.3CVSS5.8AI score0.00211EPSS
SaveExploits0References2
OSV
OSV
added 2026/04/02 6:29 p.m.3 views

CVE-2026-34736 Open edX Platform: Account Activation Bypass via activation_key Exposure in REST API

Open edX Platform enables the authoring and delivery of online learning at any scale. From the maple release to before the ulmo release, an unauthenticated attacker can fully bypass the email verification process by combining two issues: the OAuth2 password grant issuing tokens to inactive users...

5.3CVSS5.9AI score0.00211EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/04/02 12:0 a.m.15 views

PT-2026-29871

Open edX Platform enables the authoring and delivery of online learning at any scale. From the maple release to before the ulmo release, an unauthenticated attacker can fully bypass the email verification process by combining two issues: the OAuth2 password grant issuing tokens to inactive users...

5.3CVSS5.8AI score0.00211EPSS
SaveExploits0References4
Rows per page
Query Builder