Lucene search
+L

5932 matches found

Positive Technologies
Positive Technologies
•added 2025/08/20 12:00 a.m.•27 views

PT-2025-34014

Name of the Vulnerable Software and Affected Versions: miniOrange Custom API for WP versions through 4.2.2 Description: An incorrect privilege assignment issue in miniOrange Custom API for WP allows privilege escalation. Recommendations: Update miniOrange Custom API for WP to a version later than...

9.9CVSS5.8AI score0.00417EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/20 12:00 a.m.•7 views

CVE-2025-49422: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in themepassion Support Ticket support-ticket allows Privilege Escalation.This issue affects Support Ticket: from n/a through = 1.9...

9.8CVSS5.8AI score0.00452EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/08/20 12:00 a.m.•21 views

PT-2025-33989 · Unknown · Simple Business Directory Pro

Name of the Vulnerable Software and Affected Versions: Simple Business Directory Pro affected versions not specified Description: An incorrect privilege assignment issue exists in Simple Business Directory Pro, allowing for privilege escalation. Recommendations: At the moment, there is no...

9.8CVSS6.2AI score0.00367EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2025/08/20 12:00 a.m.•15 views

PT-2025-33910 · Bookify · Bookify

Name of the Vulnerable Software and Affected Versions: Bookify versions not specified through 1.0.9 Description: An incorrect privilege assignment issue in Bookify allows for privilege escalation. Recommendations: At the moment, there is no information about a newer version that contains a fix fo...

8.8CVSS6.2AI score0.00362EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/08/20 12:00 a.m.•18 views

PT-2025-33922 · Suredash · Suredash

Name of the Vulnerable Software and Affected Versions: SureDash versions n/a through 1.0.3 Description: An incorrect privilege assignment issue exists in SureDash, allowing for privilege escalation. Recommendations: At the moment, there is no information about a newer version that contains a fix...

8.8CVSS6.2AI score0.00362EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/08/20 12:00 a.m.•13 views

PT-2025-33923 · Unknown · Delucks Seo

Name of the Vulnerable Software and Affected Versions: DELUCKS SEO versions through 2.6.0 Description: An incorrect privilege assignment issue exists in DELUCKS SEO, allowing for privilege escalation. Recommendations: Update DELUCKS SEO to a version later than 2.6.0...

8.8CVSS6.4AI score0.00341EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/20 12:00 a.m.•7 views

CVE-2025-53580: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in quantumcloud Simple Business Directory Pro simple-business-directory-pro allows Privilege Escalation.This issue affects Simple Business Directory Pro: from n/a through 15.6.9...

9.8CVSS5.8AI score0.00367EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/20 12:00 a.m.•4 views

CVE-2025-48142: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in Saad Iqbal Bookify bookify allows Privilege Escalation.This issue affects Bookify: from n/a through = 1.0.9...

8.8CVSS5.8AI score0.00362EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/08/20 12:00 a.m.•26 views

PT-2025-34023 · WordPress · Cubewp Framework

Name of the Vulnerable Software and Affected Versions: CubeWP Framework versions n/a through 1.1.24 Description: An incorrect privilege assignment issue exists in CubeWP Framework, allowing for privilege escalation. Recommendations: Update CubeWP Framework to a version later than 1.1.24...

8.8CVSS6.5AI score0.00373EPSS
SaveExploits0References6
osv-debian
osv-debian
•added 2025/08/19 5:15 p.m.•7 views

DEBIAN-CVE-2025-38593

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: fix double free in 'hcidiscoveryfilterclear' Function 'hcidiscoveryfilterclear' frees 'uuids' array and then sets it to NULL. There is a tiny chance of the following race: 'hcicmdsyncwork'...

7.8CVSS6.1AI score0.0017EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/08/18 12:00 a.m.•21 views

The vulnerability of Adobe Illustrator’s graphic editor, related to pointer assignment errors, allows a hacker to trigger a service failure.

The vulnerability of the Adobe Illustrator graphic editor is related to pointer assignment errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS5.8AI score0.0022EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2025/08/18 12:00 a.m.•18 views

The vulnerability of FortiOS operating systems, related to incorrect privilege assignment, allows attackers to elevate their privileges.

The vulnerability of FortiOS operating systems is related to the improper assignment of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

9CVSS5.7AI score0.0064EPSS
SaveExploits1References3Affected Software1
RedhatCVE
RedhatCVE
•added 2025/08/16 3:26 p.m.•13 views

CVE-2025-36612

SupportAssist for Business PCs, versions 4.5.3 and prior, contains an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges...

7.8CVSS7AI score0.00104EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/08/16 11:25 a.m.•16 views

CVE-2025-54697

Incorrect Privilege Assignment vulnerability in StellarWP Kadence WooCommerce Email Designer kadence-woocommerce-email-designer allows Privilege Escalation.This issue affects Kadence WooCommerce Email Designer: from n/a through = 1.5.16...

7.2CVSS5.9AI score0.00403EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/08/15 12:00 a.m.•10 views

The vulnerability of the aspeed_lpc_enable_snoop() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the aspeedlpcenablesnoop function in the Linux operating system is related to the assignment of a zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.6AI score0.00207EPSS
SaveExploits0References17Affected Software5
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•8 views

Malicious code in assignment-02 (npm)

The package assignment-02 was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•6 views

Malicious code in assignment-2-calendar (npm)

The package assignment-2-calendar was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•5 views

Malicious code in fe-assignment (npm)

The package fe-assignment was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•12 views

Malicious code in adv-web-publishing-assignment-2 (npm)

The package adv-web-publishing-assignment-2 was found to contain malicious code...

7AI score
SaveExploits0
osv-mal
osv-mal
•added 2025/08/14 6:52 p.m.•12 views

MAL-2025-14120 Malicious code in adv-web-publishing-assignment-2 (npm)

The package adv-web-publishing-assignment-2 was found to contain malicious code...

7.2AI score
SaveExploits0
Rows per page
Query Builder