Lucene search
+L

7 matches found

Vulnrichment
Vulnrichment
•added 2026/07/02 8:33 a.m.•32 views

CVE-2026-12657 LatePoint <= 5.6.2 - Unauthenticated Insecure Direct Object Reference to Arbitrary Creation via 'service_id' Parameter

The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.6.2 via the 'serviceid' parameter due to missing validation on a user controlled key. This makes it possible for...

5.3CVSS5.8AI score0.00671EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
•added 2026/07/02 12:00 a.m.•27 views

PT-2026-54942

The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.6.2 via the 'service id' parameter due to missing validation on a user controlled key. This makes it possible for...

5.3CVSS5.8AI score0.00671EPSS
SaveExploits0References13
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•8 views

EUVD-2008-3671

Malware in sbrugna...

10CVSS6.4AI score0.12871EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2025/05/21 11:06 p.m.•17 views

CVE-2008-3684

Heap-based buffer overflow in awstmxn.exe in the Admin Agent service in the server in EMC Documentum ApplicationXtender Workflow, possibly 5.40 SP1 and earlier, allows remote attackers to execute arbitrary code via crafted packet data to TCP port 2606...

10CVSS8.6AI score0.05618EPSS
SaveExploits0References1
Prion
Prion
•added 2009/10/22 4:00 p.m.•20 views

Heap overflow

Heap-based buffer overflow in awstmxn.exe in the Admin Agent service in the server in EMC Documentum ApplicationXtender Workflow, possibly 5.40 SP1 and earlier, allows remote attackers to execute arbitrary code via crafted packet data to TCP port 2606...

10CVSS8.8AI score0.05618EPSS
SaveExploits0References2Affected Software1
Zero Day Initiative
Zero Day Initiative
•added 2008/08/14 12:00 a.m.•41 views

EMC ApplicationXtender Workflow Server Admin Agent Arbitrary File Upload Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of EMC ApplicationXtender Workflow Server. Authentication is not required to exploit this vulnerability. The specific flaw exists in the Admin Agent service awstmxn.exe which listens by...

10CVSS6.4AI score0.12871EPSS
SaveExploits1
Zero Day Initiative
Zero Day Initiative
•added 2008/08/14 12:00 a.m.•48 views

EMC ApplicationXtender Workflow Server Admin Agent Heap Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of EMC ApplicationXtender Workflow Server. Authentication is not required to exploit this vulnerability. The specific flaw exists in the Admin Agent service awstmxn.exe which listens by...

10CVSS6AI score0.05618EPSS
SaveExploits0
Rows per page
Query Builder