Lucene search
+L

2742 matches found

Cvelist
Cvelist
•added 2024/12/13 2:23 p.m.•47 views

CVE-2023-32520 WordPress WCP Contact Form plugin <= 3.1.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Webcodin WCP Contact Form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WCP Contact Form: from n/a through 3.1.0...

7.5CVSS0.0079EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/13 2:23 p.m.•33 views

CVE-2022-44578 WordPress Owl Carousel plugin <= 0.5.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Pierre JEHAN Owl Carousel allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Owl Carousel: from n/a through 0.5.3...

5.3CVSS0.00527EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/13 2:22 p.m.•34 views

CVE-2022-47594 WordPress Essential Blocks for Gutenberg plugin <= 3.8.5 - Broken Access Control

Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through 3.8.5...

6.5CVSS0.0043EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/13 2:22 p.m.•28 views

CVE-2023-22697 WordPress Survey Maker plugin <= 3.2.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Ays Pro Survey Maker survey-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Survey Maker: from n/a through = 3.2.0...

5.3CVSS5.8AI score0.0064EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/13 2:22 p.m.•39 views

CVE-2022-45841 WordPress Robo Gallery plugin <= 3.2.9 - Auth. Broken Access Control vulnerability

Missing Authorization vulnerability in RoboSoft Robo Gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Robo Gallery: from n/a through 3.2.9...

5.4CVSS0.00376EPSS
SaveExploits0References1
CNVD
CNVD
•added 2024/12/13 12:00 a.m.•29 views

Apache Superset Authorization Issues Vulnerability (CNVD-2025-03545)

Apache Superset is a data visualization and data exploration platform from the Apache USA Foundation. Apache Superset suffers from an authorization issue vulnerability that stems from improper authorization settings that can be exploited by an attacker to use this API when FABADDSECURITYAPI is...

7.6CVSS6.6AI score0.00716EPSS
SaveExploits0References1
CNVD
CNVD
•added 2024/12/13 12:00 a.m.•15 views

Adobe Experience Manager Authorization Issues Vulnerability (CNVD-2025-16238)

Adobe Experience Manager is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Audobee Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. Adobe...

4.3CVSS7AI score0.00874EPSS
SaveExploits0References1
CNVD
CNVD
•added 2024/12/13 12:00 a.m.•26 views

Dell OpenManage Server Administrator Authorization Issues Vulnerability

Dell OpenManage Server Administrator Dell OMSA is a software agent from Dell Dell USA. Provides a comprehensive one-to-one systems management solution in two ways. An authorization issue vulnerability exists in Dell OpenManage Server Administrator version 11.0.1.0 and prior versions, which stems...

8.8CVSS6.7AI score0.0034EPSS
SaveExploits0References1
OSV
OSV
•added 2024/12/12 2:15 a.m.•13 views

CVE-2024-54466

An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.2, macOS Ventura 13.7.2, macOS Sonoma 14.7.2. An encrypted volume may be accessed by a different user without prompting for the password...

5.3CVSS5.7AI score0.00713EPSS
SaveExploits0References6
NVD
NVD
•added 2024/12/12 2:15 a.m.•29 views

CVE-2024-54466

An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An encrypted volume may be accessed by a different user without prompting for the password...

6.5CVSS0.00713EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/12 12:00 a.m.•4 views

CVE-2024-54466: Missing Authorization

An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An encrypted volume may be accessed by a different user without prompting for the password...

6.5CVSS5.8AI score0.00713EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/11 10:59 p.m.•85 views

CVE-2024-54466

The CVE-2024-54466 entry describes an authorization issue in macOS where an encrypted volume could be accessed by another user without prompting for a password. The connected sources identify the affected products as macOS Sequoia 15.2, macOS Ventura 13.7.2, and macOS Sonoma 14.7.2, with the unde...

6.5CVSS7AI score0.00713EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
•added 2024/12/11 10:59 p.m.•49 views

CVE-2024-54466

An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An encrypted volume may be accessed by a different user without prompting for the password...

0.00713EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/12/11 10:59 p.m.•11 views

CVE-2024-54466

An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.2, macOS Ventura 13.7.2, macOS Sonoma 14.7.2. An encrypted volume may be accessed by a different user without prompting for the password...

6AI score0.00713EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/12/11 12:00 a.m.•20 views

GLPI 授权问题漏洞

GLPI is an open source IT and asset management software from GLPI Open Source. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner and ink...

7.5CVSS4.7AI score0.00523EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/12/11 12:00 a.m.•8 views

PT-2024-36343 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.2 macOS versions prior to 14.7.2 macOS versions prior to 15.2 Description: An authorization issue was addressed with improved state management. This issue allows a different user to access an encrypted volume...

6.5CVSS6.1AI score0.00713EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2024/12/10 12:00 a.m.•16 views

Microsoft Windows Virtualization-Based Security Enclave 授权问题漏洞

Microsoft Windows Virtualization-Based Security Enclave Microsoft Windows VBS Enclave is a software-based trusted execution environment within the host application address space from Microsoft Corporation USA. An authorization issue vulnerability exists in Microsoft Windows Virtualization-Based...

7.8CVSS6.4AI score0.01216EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2024/12/09 10:43 p.m.•33 views

lxd has a restricted TLS certificate privilege escalation when in PKI mode

Summary If a server.ca file is present in LXDDIR at LXD start up, LXD is in "PKI mode". In this mode, all clients must have certificates that have been signed by the CA. The LXD configuration option core.trustcacertificates defaults to false. This means that although the client certificate has be...

3.8CVSS4.1AI score0.00157EPSS
SaveExploits1References7Affected Software1
NVD
NVD
•added 2024/12/09 1:15 p.m.•20 views

CVE-2023-48332

Missing Authorization vulnerability in Varun Sharma Mail Bank - 1 Mail SMTP Plugin for WordPress wp-mail-bank allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mail Bank - 1 Mail SMTP Plugin for WordPress: from n/a through = 4.0.14...

4.3CVSS0.00458EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/09 1:11 p.m.•13 views

CVE-2024-52391 WordPress Pie Register Premium plugin < 3.8.3.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Genetech Pie Register Premium.This issue affects Pie Register Premium: from n/a before 3.8.3.3...

5.3CVSS6.9AI score0.00297EPSS
SaveExploits0References1
Rows per page
Query Builder