Lucene search
+L

3428 matches found

RedhatCVE
RedhatCVE
added 2026/01/23 9:15 p.m.10 views

CVE-2026-24371

Missing Authorization vulnerability in bookingalgorithms BA Book Everything ba-book-everything allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BA Book Everything: from n/a through = 1.8.16...

4.3CVSS5.4AI score0.00158EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/22 5:16 p.m.10 views

CVE-2026-24371

Missing Authorization vulnerability in bookingalgorithms BA Book Everything ba-book-everything allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BA Book Everything: from n/a through = 1.8.16...

4.3CVSS0.00158EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/22 4:52 p.m.3 views

CVE-2026-24371

Missing Authorization vulnerability in bookingalgorithms BA Book Everything ba-book-everything allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BA Book Everything: from n/a through = 1.8.16...

9.8CVSS5.3AI score0.00158EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/01/22 4:52 p.m.4 views

CVE-2026-24371 WordPress BA Book Everything plugin <= 1.8.16 - Broken Access Control vulnerability

Missing Authorization vulnerability in bookingalgorithms BA Book Everything ba-book-everything allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BA Book Everything: from n/a through = 1.8.16...

4.3CVSS5.9AI score0.00158EPSS
SaveExploits0References1
CVE
CVE
added 2026/01/22 4:52 p.m.31 views

CVE-2026-24371

CVE-2026-24371 is a Missing Authorization (Broken Access Control) vulnerability in the WordPress plugin BA Book Everything (ba-book-everything) affecting versions up to 1.8.16. The RedHat/NVD entries describe an access-control weakness allowing exploitation via misconfigured security levels. The ...

4.3CVSS5.4AI score0.00158EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/22 4:52 p.m.40 views

CVE-2026-24371 WordPress BA Book Everything plugin <= 1.8.16 - Broken Access Control vulnerability

Missing Authorization vulnerability in bookingalgorithms BA Book Everything ba-book-everything allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BA Book Everything: from n/a through = 1.8.16...

4.3CVSS0.00158EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/01/22 12:00 a.m.12 views

WordPress plugin BA Book Everything security vulnerabilities

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

4.3CVSS5.8AI score0.00158EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/01/20 12:00 a.m.8 views

MiracleLinux 9 : bluez-5.72-2.el9 (AXSA:2024-9114:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-9114:01 advisory. bluez: unauthorized HID device connections allows keystroke injection and arbitrary commands execution CVE-2023-45866 BlueZ: Audio Profile AVRCP...

8CVSS9AI score0.07879EPSS
SaveExploits9References11
NVD
NVD
added 2026/01/16 12:16 a.m.8 views

CVE-2025-14236

Buffer overflow in Address Book attribute tag processing on Small Office Multifunction Printers which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. : Satera LBP670C Series/Satera MF750C Series firmware v06.02 and...

9.8CVSS0.00845EPSS
SaveExploits0References4
OSV
OSV
added 2026/01/16 12:16 a.m.13 views

CVE-2025-14236

Buffer overflow in Address Book attribute tag processing on Small Office Multifunction Printers which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. : Satera LBP670C Series/Satera MF750C Series firmware v06.02 and...

9.3CVSS6.1AI score0.00845EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/01/16 12:00 a.m.9 views

Canon’s various products have security vulnerabilities

Canon ImageRunner is a product of the Japanese company Canon. Canon ImageRunner is a series of all-in-one black-and-white printers. Canon Color imageCLASS is a series of printers. Canon Satera is also a series of printers. Several Canon products have security vulnerabilities; these vulnerabilitie...

9.8CVSS7.6AI score0.00845EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/01/15 11:39 p.m.6 views

CVE-2025-14236

Buffer overflow in Address Book attribute tag processing on Small Office Multifunction Printers which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. : Satera LBP670C Series/Satera MF750C Series firmware v06.02 and...

9.8CVSS6AI score0.00845EPSS
SaveExploits0References5Affected Software21
Vulnrichment
Vulnrichment
added 2026/01/15 11:39 p.m.7 views

CVE-2025-14236

Buffer overflow in Address Book attribute tag processing on Small Office Multifunction Printers which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. : Satera LBP670C Series/Satera MF750C Series firmware v06.02 and...

9.8CVSS7.4AI score0.00845EPSS
SaveExploits0References4
CVE
CVE
added 2026/01/15 11:39 p.m.23 views

CVE-2025-14236

CVE-2025-14236 is a buffer overflow in the Address Book attribute tag processing affecting Canon Small Office Multifunction Printers and Laser Printers. Affected firmware: v06.02 and earlier across multiple lines (Japan, US, Europe) for models including Satera LBP670C, Satera MF750C, Color imageC...

9.8CVSS7.4AI score0.00845EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2026/01/15 11:39 p.m.37 views

CVE-2025-14236

Buffer overflow in Address Book attribute tag processing on Small Office Multifunction Printers which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. : Satera LBP670C Series/Satera MF750C Series firmware v06.02 and...

9.8CVSS0.00845EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2026/01/15 10:18 a.m.12 views

WordPress Woocommerce Book Price plugin <= 1.3 - Arbitrary File Download vulnerability

Arbitrary File Download vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Woocommerce Book Price versions = 1.3...

7AI score0.00467EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2026/01/15 12:00 a.m.10 views

PT-2026-3191

Name of the Vulnerable Software and Affected Versions Satera LBP670C Series/Satera MF750C Series versions v06.02 and earlier Color imageCLASS LBP630C/Color imageCLASS MF650C Series/imageCLASS LBP230 Series/imageCLASS X LBP1238 II/imageCLASS MF450 Series/imageCLASS X MF1238 II/imageCLASS X MF1643i...

9.8CVSS7.8AI score0.00845EPSS
SaveExploits0References10
RedhatCVE
RedhatCVE
added 2026/01/13 10:53 p.m.11 views

CVE-2025-13893

The Lesson Plan Book plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the $SERVER'PHPSELF' variable in all versions up to, and including, 1.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrar...

6.1CVSS5.6AI score0.00219EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/01/13 12:00 a.m.9 views

MiracleLinux 8 : thunderbird-128.7.0-1.el8_10.ML.1 (AXSA:2025-9663:03)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2025-9663:03 advisory. firefox: thunderbird: Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7 CVE-2025-1017 firefox:...

9.8CVSS7.2AI score0.01355EPSS
SaveExploits0References11
RedhatCVE
RedhatCVE
added 2026/01/09 12:45 p.m.16 views

CVE-2005-1647

Gurgens GASoft Guest Book 2.1 stores the db/Genid.dat database file under the web document root with insufficient access control, which allows remote attackers to obtain and decrypt usernames and passwords...

7.5CVSS7.1AI score0.01708EPSS
SaveExploits1References1
Rows per page
Query Builder