Lucene search
+L

3126 matches found

Cvelist
Cvelist
added 2025/05/16 6:42 a.m.18 views

CVE-2025-3624 Missing Authorization Vulnerability in Hitachi Ops Center Analyzer

Missing Authorization vulnerability in Hitachi Ops Center Analyzer Hitachi Ops Center Analyzer detail view component.This issue affects Hitachi Ops Center Analyzer: from 10.0.0-00 before 11.0.4-00...

4.3CVSS0.00198EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/05/16 12:0 a.m.6 views

PT-2025-21688 · Unknown · Salon Booking Pro

Name of the Vulnerable Software and Affected Versions: Salon Booking Pro versions 10.10.2 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions 10.10.2 an...

4.3CVSS5.4AI score0.00241EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/05/16 12:0 a.m.6 views

D-Link DI-7003G 授权问题漏洞

The D-Link DI-7003GV2 is a router from China-based AUO D-Link. The D-Link DI-7003GV2 has an authorization issue vulnerability that originates from improper privilege management of the function sub497DE4 in the file /H5/netconfig.asp, for which no detailed vulnerability details are provided at thi...

7.5CVSS7AI score0.05867EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/05/16 12:0 a.m.17 views

PT-2025-21673 · Unknown · Themeton The Business

Name of the Vulnerable Software and Affected Versions: themeton The Business versions 1.6.1 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows the exploitation of incorrectly configured access control security levels. Recommendations: For themeton...

5.3CVSS6AI score0.00273EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/05/15 12:0 a.m.7 views

PT-2025-21352 · Automattic · Automattic Tours

Name of the Vulnerable Software and Affected Versions: Automattic Tours versions n/a through 1.0.0 Description: The issue is related to a Missing Authorization vulnerability. This means that there is a lack of proper authorization checks, potentially allowing unauthorized access to certain featur...

4.3CVSS5.3AI score0.00243EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/05/13 8:21 a.m.34 views

CVE-2025-27696 Apache Superset: Incorrect authorization leading to resource ownership takeover

Incorrect Authorization vulnerability in Apache Superset allows ownership takeover of dashboards, charts or datasets by authenticated users with read permissions. This issue affects Apache Superset: through 4.1.1. Users are recommended to upgrade to version 4.1.2 or above, which fixes the issue...

5.3CVSS0.00972EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/05/13 12:0 a.m.7 views

WordPress plugin Frontend Dashboard 授权问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An authorization issue...

8.8CVSS8AI score0.00398EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2025/05/13 12:0 a.m.5 views

SAP Service Parts Management 安全漏洞

SAP Service Parts Management is an intelligent spare parts supply chain solution for after-sales service from SAP. An authorization issue vulnerability exists in SAP Service Parts Management, which stems from a lack of authorization checking, no details of the vulnerability are available at this...

6.3CVSS6.8AI score0.00219EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/05/12 12:0 a.m.4 views

SAP Service Parts Management 安全漏洞

SAP Service Parts Management is an intelligent spare parts supply chain solution for after-sales service from SAP. An authorization issue vulnerability exists in SAP Service Parts Management, which stems from a lack of authorization checking, no details of the vulnerability are available at this...

6.3CVSS6.8AI score0.00219EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/09 3:26 p.m.9 views

CVE-2025-47612

Missing Authorization vulnerability in ClickWhale ClickWhale clickwhale allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ClickWhale: from n/a through = 2.4.6...

8.8CVSS7.2AI score0.00333EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/05/08 12:0 a.m.9 views

Microsoft Azure Automation 授权问题漏洞

Microsoft Azure Automation is a cloud automation service from Microsoft Corporation USA. The product focuses on providing cloud-based automation and configuration services. An authorization issue vulnerability exists in Microsoft Azure Automation that stems from improper authorization and could...

9.9CVSS8.3AI score0.01364EPSS
SaveExploits0References1
NVD
NVD
added 2025/05/07 3:16 p.m.17 views

CVE-2025-47612

Missing Authorization vulnerability in ClickWhale ClickWhale clickwhale allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ClickWhale: from n/a through = 2.4.6...

8.8CVSS0.00333EPSS
SaveExploits0References1
NVD
NVD
added 2025/05/07 3:16 p.m.7 views

CVE-2025-47602

Missing Authorization vulnerability in ammarahmad786 Calculate Prices based on Distance For WooCommerce calculate-prices-based-on-distance-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Calculate Prices based on Distance For WooCommerce:...

5.4CVSS0.00298EPSS
SaveExploits0References1
NVD
NVD
added 2025/05/07 3:16 p.m.7 views

CVE-2025-47526

Missing Authorization vulnerability in GS Plugins GS Variation Swatches for WooCommerce gs-woo-variation-swatches allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GS Variation Swatches for WooCommerce: from n/a through = 3.0.4...

5.4CVSS0.00298EPSS
SaveExploits0References1
NVD
NVD
added 2025/05/07 3:16 p.m.16 views

CVE-2025-47485

Missing Authorization vulnerability in CozyThemes Cozy Blocks cozy-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cozy Blocks: from n/a through = 2.1.22...

5.3CVSS0.00317EPSS
SaveExploits0References1
CVE
CVE
added 2025/05/07 2:20 p.m.73 views

CVE-2025-47688

CVE-2025-47688 concerns the WordPress Advanced File Manager plugin (

9.8CVSS7.2AI score0.00337EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/05/07 2:20 p.m.32 views

CVE-2025-47628 WordPress QS Dark Mode plugin <= 3.0 - Broken Access Control Vulnerability

Missing Authorization vulnerability in quomodosoft QS Dark Mode qs-dark-mode allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects QS Dark Mode: from n/a through = 3.0...

5.4CVSS0.00333EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/05/07 2:19 p.m.9 views

CVE-2025-47471 WordPress Envo Extra <= 1.9.9 - Broken Access Control Vulnerability

Missing Authorization vulnerability in EnvoThemes Envo Extra allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Envo Extra: from n/a through 1.9.9...

4.3CVSS4.6AI score0.00263EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/05/07 1:43 a.m.21 views

CVE-2025-3921 PeproDev Ultimate Profile Solutions 1.9.1 - 7.5.2 - Missing Authorization to Limited Unauthenticated Arbitrary User Meta Update via handel_ajax_req Function

The PeproDev Ultimate Profile Solutions plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the handelajaxreq function in versions 1.9.1 to 7.5.2. This makes it possible for unauthenticated attackers to update arbitrary user's metadata whic...

8.2CVSS0.00401EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/05/07 12:0 a.m.7 views

WordPress plugin Frontend Dashboard 授权问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An authorization issue...

9.8CVSS8.7AI score0.0053EPSS
SaveExploits0References6
Rows per page
Query Builder