Lucene search
+L

5871 matches found

Github Security Blog
Github Security Blog
•added 2026/02/22 12:31 a.m.•28 views

funadmin has Incorrect Privilege Assignment in its Configuration Handler

A weakness has been identified in funadmin up to 7.1.0-rc4. This affects the function setConfig of the file app/backend/controller/Ajax.php of the component Configuration Handler. Executing a manipulation can lead to improper authorization. The attack can be executed remotely. The exploit has bee...

7.5CVSS6.6AI score0.00508EPSS
SaveExploits1References6Affected Software1
RedhatCVE
RedhatCVE
•added 2026/02/21 7:30 p.m.•16 views

CVE-2025-69378

Incorrect Privilege Assignment vulnerability in XforWooCommerce Product Filter for WooCommerce prdctfltr allows Privilege Escalation.This issue affects Product Filter for WooCommerce: from n/a through = 9.1.2...

7.2CVSS5.4AI score0.00445EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/02/20 11:08 p.m.•11 views

CVE-2018-2245

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2018. Notes: none...

5.8AI score
SaveExploits0References1
GithubExploit
GithubExploit
•added 2026/02/20 8:26 p.m.•303 views

Exploit for CVE-2025-2304

CVE-2025-2304-Camaleon-C...

9.4CVSS5.3AI score0.00628EPSS
SaveExploits17
OSV
OSV
•added 2026/02/20 5:25 p.m.•18 views

CVE-2026-26096

Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network request...

5.5CVSS5.8AI score0.0014EPSS
SaveExploits0References1
OSV
OSV
•added 2026/02/20 5:25 p.m.•13 views

CVE-2026-26100

Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network request...

5.5CVSS5.8AI score0.0014EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/02/20 4:56 p.m.•9 views

CVE-2026-26102

Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network request...

8.5CVSS5.4AI score0.00155EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/02/20 4:55 p.m.•50 views

CVE-2026-26101 Incorrect Permission Assignment for Critical Resource in Owl opds

Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network request...

8.5CVSS0.00155EPSS
SaveExploits0References1
CVE
CVE
•added 2026/02/20 4:55 p.m.•52 views

CVE-2026-26100

CVE-2026-26100 concerns Owl opds, version 2.2.0.4, where incorrect permission assignment of a critical resource enables file manipulation via a crafted network request. The CVE entry documents a MEDIUM-severity issue with CVSS 4.0, scoped as local access, low attack complexity, and no user intera...

6.8CVSS5.8AI score0.0014EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/02/20 4:52 p.m.•42 views

CVE-2026-26096 Incorrect Permission Assignment for Critical Resource in Owl opds

Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network request...

8.5CVSS0.0014EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/02/20 4:52 p.m.•12 views

CVE-2026-26096

Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network request...

8.5CVSS5.4AI score0.0014EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/02/20 4:51 p.m.•9 views

CVE-2026-26095

Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network request...

8.5CVSS5.4AI score0.0014EPSS
SaveExploits0References2
NVD
NVD
•added 2026/02/20 4:22 p.m.•18 views

CVE-2025-69378

Incorrect Privilege Assignment vulnerability in XforWooCommerce Product Filter for WooCommerce prdctfltr allows Privilege Escalation.This issue affects Product Filter for WooCommerce: from n/a through = 9.1.2...

7.2CVSS0.00445EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/02/20 3:46 p.m.•8 views

CVE-2025-69378 WordPress Product Filter for WooCommerce plugin <= 9.1.2 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in XforWooCommerce Product Filter for WooCommerce prdctfltr allows Privilege Escalation.This issue affects Product Filter for WooCommerce: from n/a through = 9.1.2...

7.2CVSS5.8AI score0.00445EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/02/20 1:25 p.m.•15 views

CVE-2026-22267

Dell PowerProtect Data Manager, versions prior to 19.22, contains an Incorrect Privilege Assignment vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

8.8CVSS5.6AI score0.00432EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/02/20 6:41 a.m.•15 views

CVE-2017-4582

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...

5.5AI score
SaveExploits0References1
attackerkb
attackerkb
•added 2026/02/20 6:29 a.m.•3 views

CVE-2017-4217

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...

5.5AI score
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/20 12:00 a.m.•2 views

CVE-2025-69378: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in XforWooCommerce Product Filter for WooCommerce prdctfltr allows Privilege Escalation.This issue affects Product Filter for WooCommerce: from n/a through = 9.1.2...

7.2CVSS5.8AI score0.00445EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/02/20 12:00 a.m.•25 views

PT-2026-21269

Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network request...

8.5CVSS5.4AI score0.00155EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/20 12:00 a.m.•8 views

CVE-2026-26096: Incorrect Permission Assignment for Critical Resource

Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network request...

8.5CVSS5.7AI score0.0014EPSS
SaveExploits0References1
Rows per page
Query Builder