1600 matches found
EUVD-2022-24737
Malicious code in bioql PyPI...
EUVD-2022-47861
Malicious code in bioql PyPI...
EUVD-2021-33069
Malicious code in bioql PyPI...
PT-2025-39042
Name of the Vulnerable Software and Affected Versions RelyWP Coupon Affiliates versions through 6.8.0 Description A missing authorization issue exists in Elliot Sowersby / RelyWP Coupon Affiliates, allowing exploitation of incorrectly configured access control security levels. Recommendations...
WordPress plugin Brizy 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
CVE-2025-30048
The "serverConfig" endpoint, which returns the module configuration including credentials, is accessible without authentication...
Linux Distros Unpatched Vulnerability : CVE-2022-23773
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to be version tags. This can lead to incorrect access...
Linux Distros Unpatched Vulnerability : CVE-2025-38236
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: afunix: Don't leave consecutive consumed OOB skbs. Jann Horn reported a use-after-free in...
CVE-2025-52731 WordPress WordPress Event Manager, Event Calendar and Booking Plugin Plugin <= 4.0.24 - Arbitrary Content Deletion Vulnerability
Missing Authorization vulnerability in themefunction WordPress Event Manager, Event Calendar and Booking Plugin allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WordPress Event Manager, Event Calendar and Booking Plugin: from n/a through 4.0.24...
PT-2025-33208 · Unknown · Lcweb Global Gallery
Name of the Vulnerable Software and Affected Versions: LCweb Global Gallery versions n/d through 9.2.3 Description: A missing authorization flaw in LCweb Global Gallery allows exploitation due to incorrectly configured access control security levels. Recommendations: At the moment, there is no...
PT-2025-33253
Name of the Vulnerable Software and Affected Versions: ThemeMove Unicamp versions through 2.6.3 Description: This issue involves an improper control of filename for include/require statements in a PHP program, leading to a PHP Local File Inclusion. Recommendations: Update ThemeMove Unicamp to a...
Security Bulletin: Multiple vulnerabilities in IBM Semeru Runtime affect z/Transaction Processing Facility
Summary There are multiple vulnerabilities in IBM® Semeru Runtime Certified Edition 11 and IBM® Semeru Runtime Certified Edition 21 that are used by the z/TPF system. z/TPF has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2025-21587 DESCRIPTION: An unspecified vulnerability in...
CVE-2024-55402
4C Strategies Exonaut before v22.4 was discovered to contain an access control issue...
CVE-2024-55402
4C Strategies Exonaut before v22.4 was discovered to contain an access control issue...
PT-2025-32100 · Qualcomm · Smr Aug-2025 Release 1
Name of the Vulnerable Software and Affected Versions: versions prior to SMR Aug-2025 Release 1 Description: An improper access control issue exists in accessing a system device node. This allows local attackers to access the device identifier. Recommendations: Update to SMR Aug-2025 Release 1 or...
PT-2025-32084 · Parcel · Parcel
Name of the Vulnerable Software and Affected Versions: Parcel affected versions not specified Description: A ParcelMismatch vulnerability exists in attribute deserialization. Successful exploitation of this issue may cause exceptions in the playback control screen display. Recommendations: At the...
CVE-2024-55402
4C Strategies Exonaut before v22.4 was discovered to contain an access control issue...
CVE-2024-55402
Versions prior to v22.4 of 4C Strategies Exonaut , a training, exercise, and readiness management platform, are vulnerable to an access control issue (CWE-284). This flaw allows for unauthorized access, with a CVSS v3.1 base score of 5.3 indicating a MEDIUM severity. Remediation involves updating...
CVE-2024-55402
4C Strategies Exonaut before v22.4 was discovered to contain an access control issue...
PT-2025-32208
Name of the Vulnerable Software and Affected Versions 4C Strategies Exonaut versions prior to 22.4 Description The software contains an access control issue. Recommendations Update to version 22.4 or later...