Lucene search
+L

2742 matches found

CNVD
CNVD
•added 2026/01/09 12:00 a.m.•23 views

JeecgBoot /datarule file authorization issue vulnerability

JeecgBoot is a low-code development platform that fuses code generation and AI applications to help organizations rapidly achieve low-code development and build AI applications. JeecgBoot suffers from an authorization issue vulnerability that stems from improper authorization in the file...

3.1CVSS5.9AI score0.00314EPSS
SaveExploits1References1
CNVD
CNVD
•added 2026/01/09 12:00 a.m.•32 views

JeecgBoot getDeptRoleList function authorization issue vulnerability

JeecgBoot is a low-code development platform that fuses code generation and AI applications to help organizations rapidly achieve low-code development and build AI applications. JeecgBoot suffers from an authorization issue vulnerability, which stems from improper authorization of the parameter...

3.1CVSS5.9AI score0.00326EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/01/08 12:00 a.m.•22 views

PT-2026-2189

Name of the Vulnerable Software and Affected Versions baqend Speed Kit versions through 2.0.2 Description A missing authorization issue exists in baqend Speed Kit due to incorrectly configured access control security levels. The issue allows exploitation of these levels. Recommendations Update to...

4.3CVSS6.6AI score0.00181EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/01/08 12:00 a.m.•23 views

PT-2026-1902

Name of the Vulnerable Software and Affected Versions Shahjahan Jewel Fluent Support versions through 1.10.4 Description An authorization issue exists in Fluent Support that allows exploitation of incorrectly configured access control security levels. Recommendations Versions prior to and includi...

8.8CVSS6.5AI score0.00294EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/01/07 9:17 a.m.•15 views

CVE-2025-1214

A vulnerability classified as critical has been found in pihome-shc PiHome 2.0. This affects an unknown part of the file /useraccounts.php?uid of the component Role-Based Access Control. The manipulation leads to missing authorization. It is possible to initiate the attack remotely. The exploit h...

8.8CVSS6.9AI score0.00646EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/01/07 12:00 a.m.•15 views

PT-2026-1649

Name of the Vulnerable Software and Affected Versions ThemeHunk Oneline Lite versions through 6.6 Description An authorization issue exists in ThemeHunk Oneline Lite, stemming from incorrectly configured access control security levels. This allows for unauthorized access. Recommendations Update...

4.3CVSS6.5AI score0.00181EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/01/06 12:23 a.m.•16 views

SUSE CVE-2025-68938

Gitea before 1.25.2 mishandles authorization for deletion of releases...

5.3CVSS6.9AI score0.0038EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/01/06 12:00 a.m.•19 views

PT-2026-1481

Name of the Vulnerable Software and Affected Versions Proxy & VPN Blocker versions through 3.5.3 Description An authorization issue exists in Proxy & VPN Blocker that allows exploitation of incorrectly configured access control security levels. Recommendations Update Proxy & VPN Blocker to a...

5.4CVSS6.6AI score0.00181EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/01/06 12:00 a.m.•17 views

PT-2026-1482

Name of the Vulnerable Software and Affected Versions BBR Plugins Better Business Reviews versions through 0.1.1 Description An authorization issue exists in BBR Plugins Better Business Reviews, allowing exploitation due to incorrectly configured access control security levels. Recommendations...

5.4CVSS5.8AI score0.00181EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/01/06 12:00 a.m.•27 views

PT-2026-1475

Name of the Vulnerable Software and Affected Versions AffiliateX versions through 1.3.9.3 Description An authorization issue exists in AffiliateX, allowing exploitation due to incorrectly configured access control security levels. Recommendations Update AffiliateX to a version later than 1.3.9.3...

5.4CVSS6.6AI score0.00181EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/01/06 12:00 a.m.•26 views

PT-2026-1467

Name of the Vulnerable Software and Affected Versions Car Rental Manager versions through 1.0.9 Description An authorization issue exists in Car Rental Manager that allows exploitation due to incorrectly configured access control security levels. Recommendations Update Car Rental Manager to a...

4.3CVSS6.6AI score0.00285EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/01/06 12:00 a.m.•20 views

PT-2026-1486

Name of the Vulnerable Software and Affected Versions WPFunnels Creator LMS versions through 1.1.12 Description An authorization issue exists in WPFunnels Creator LMS. The issue involves incorrectly configured access control security levels, potentially allowing unauthorized access. Recommendatio...

5.3CVSS5.8AI score0.00267EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/01/06 12:00 a.m.•19 views

PT-2026-1474

Name of the Vulnerable Software and Affected Versions BoldGrid Post and Page Builder versions through 1.27.9 Description An authorization issue exists in BoldGrid Post and Page Builder. The issue involves incorrectly configured access control security levels, potentially allowing unauthorized...

5.4CVSS6.3AI score0.00181EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/01/06 12:00 a.m.•25 views

PT-2026-1491

Name of the Vulnerable Software and Affected Versions Cloudways Breeze versions through 2.2.21 Description An authorization issue exists in Cloudways Breeze that allows exploitation of incorrectly configured access control security levels. Recommendations Update Cloudways Breeze to a version late...

5.3CVSS5.8AI score0.00267EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/01/06 12:00 a.m.•24 views

PT-2026-1480

Name of the Vulnerable Software and Affected Versions StellarWP The Events Calendar versions through 6.15.12.2 Description A missing authorization issue exists in StellarWP The Events Calendar, allowing exploitation of incorrectly configured access control security levels. Recommendations Update...

5.4CVSS5.8AI score0.00202EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2026/01/05 12:00 a.m.•20 views

MiniCMS 授权问题漏洞

MiniCMS is a mini content management system designed for personal websites by the individual developer of Dada bg5sbk. An authorization issue vulnerability exists in MiniCMS 1.8 and earlier versions, which stems from incorrect operation of the file /minicms/mc-admin/post.php of the component Tras...

9.8CVSS7.4AI score0.00574EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2026/01/05 12:00 a.m.•15 views

Centreon 安全漏洞

Centreon is a set of open source system monitoring tools from the French company Centreon . The product provides monitoring capabilities for resources such as networks, systems and applications. A security vulnerability exists in Centreon versions prior to 25.10.2, 24.10.15, and 24.04.19, which...

5.3CVSS6.2AI score0.00231EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/01/05 12:00 a.m.•21 views

PT-2026-1270

Name of the Vulnerable Software and Affected Versions WPweb Follow My Blog Post versions through 2.4.0 Description An authorization issue exists in WPweb Follow My Blog Post, allowing exploitation due to incorrectly configured access control security levels. Recommendations Update WPweb Follow My...

7.5CVSS6.6AI score0.00281EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/12/31 12:00 a.m.•23 views

WordPress plugin History Timeline 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

4.3CVSS6.5AI score0.00181EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/31 12:00 a.m.•24 views

PT-2025-54454

Name of the Vulnerable Software and Affected Versions merkulove Conformer for Elementor versions through 1.0.7 Description An authorization issue exists in merkulove Conformer for Elementor, allowing exploitation due to incorrectly configured access control security levels. Recommendations Update...

5.4CVSS5.8AI score0.00202EPSS
SaveExploits0References10
Rows per page
Query Builder