Lucene search
+L

31575 matches found

ATTACKERKB
ATTACKERKB
added 2026/01/23 4:47 p.m.5 views

CVE-2021-47906

BloofoxCMS 0.5.2.1 contains a stored cross-site scripting vulnerability in the articles text parameter that allows authenticated attackers to inject malicious scripts. Attackers can insert malicious javascript payloads in the text field to execute scripts and potentially steal authenticated users...

6.4CVSS5.9AI score0.00201EPSS
SaveExploits0References4Affected Software1
NVD
NVD
added 2026/01/23 3:16 p.m.13 views

CVE-2026-24604

Missing Authorization vulnerability in themebeez Simple GDPR Cookie Compliance simple-gdpr-cookie-compliance allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple GDPR Cookie Compliance: from n/a through = 2.0.0...

5.3CVSS0.00282EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/01/23 2:29 p.m.5 views

CVE-2026-24604 WordPress Simple GDPR Cookie Compliance plugin <= 2.0.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in themebeez Simple GDPR Cookie Compliance simple-gdpr-cookie-compliance allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple GDPR Cookie Compliance: from n/a through = 2.0.0...

5.3CVSS5.4AI score0.00282EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/23 2:29 p.m.41 views

CVE-2026-24604 WordPress Simple GDPR Cookie Compliance plugin <= 2.0.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in themebeez Simple GDPR Cookie Compliance simple-gdpr-cookie-compliance allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple GDPR Cookie Compliance: from n/a through = 2.0.0...

5.3CVSS0.00282EPSS
SaveExploits0References1
CVE
CVE
added 2026/01/23 2:29 p.m.22 views

CVE-2026-24604

CVE-2026-24604 is a Missing Authorization / Broken Access Control issue in the WordPress plugin Simple GDPR Cookie Compliance (themebeez Simple GDPR Cookie Compliance). public records show vulnerability exists in versions up to and including 2.0.0 and is due to incorrectly configured access contr...

5.3CVSS5.4AI score0.00282EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/23 2:29 p.m.4 views

CVE-2026-24604

Missing Authorization vulnerability in themebeez Simple GDPR Cookie Compliance simple-gdpr-cookie-compliance allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple GDPR Cookie Compliance: from n/a through = 2.0.0...

5.3CVSS5.9AI score0.00282EPSS
SaveExploits0References2
OSV
OSV
added 2026/01/23 4:16 a.m.9 views

CVE-2026-0789

ALGO 8180 IP Audio Alerter Web UI Inclusion of Authentication Cookie in Response Body Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is not required ...

7.5CVSS5.8AI score0.00652EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/23 3:01 a.m.38 views

CVE-2026-0789 ALGO 8180 IP Audio Alerter Web UI Inclusion of Authentication Cookie in Response Body Information Disclosure Vulnerability

ALGO 8180 IP Audio Alerter Web UI Inclusion of Authentication Cookie in Response Body Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is not required ...

5.3CVSS0.00652EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/23 3:01 a.m.4 views

CVE-2026-0789

ALGO 8180 IP Audio Alerter Web UI Inclusion of Authentication Cookie in Response Body Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is not required ...

5.3CVSS5.4AI score0.00652EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/23 3:01 a.m.5 views

CVE-2026-0789 ALGO 8180 IP Audio Alerter Web UI Inclusion of Authentication Cookie in Response Body Information Disclosure Vulnerability

ALGO 8180 IP Audio Alerter Web UI Inclusion of Authentication Cookie in Response Body Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is not required ...

5.3CVSS5.5AI score0.00652EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/23 12:00 a.m.18 views

PT-2026-4438

Name of the Vulnerable Software and Affected Versions themebeez Simple GDPR Cookie Compliance versions through 2.0.0 Description An issue exists in themebeez Simple GDPR Cookie Compliance where incorrectly configured access control security levels can be exploited, leading to a missing...

5.3CVSS5.3AI score0.00282EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/01/23 12:00 a.m.15 views

WordPress plugin Simple GDPR Cookie Compliance has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

5.3CVSS5.8AI score0.00282EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/22 5:16 p.m.9 views

CVE-2026-22348

Missing Authorization vulnerability in Tasos Fel Civic Cookie Control civic-cookie-control-8 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Civic Cookie Control: from n/a through = 1.53...

5.3CVSS0.00222EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/01/22 4:52 p.m.6 views

CVE-2026-22348 WordPress Civic Cookie Control plugin <= 1.53 - Broken Access Control vulnerability

Missing Authorization vulnerability in Tasos Fel Civic Cookie Control civic-cookie-control-8 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Civic Cookie Control: from n/a through = 1.53...

5.3CVSS5.9AI score0.00222EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/22 4:52 p.m.25 views

CVE-2026-22348 WordPress Civic Cookie Control plugin <= 1.53 - Broken Access Control vulnerability

Missing Authorization vulnerability in Tasos Fel Civic Cookie Control civic-cookie-control-8 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Civic Cookie Control: from n/a through = 1.53...

5.3CVSS0.00222EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/22 4:52 p.m.3 views

CVE-2026-22348

Missing Authorization vulnerability in Tasos Fel Civic Cookie Control civic-cookie-control-8 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Civic Cookie Control: from n/a through = 1.53...

5.3CVSS5.2AI score0.00222EPSS
SaveExploits0References2
CVE
CVE
added 2026/01/22 4:52 p.m.22 views

CVE-2026-22348

CVE-2026-22348 is a Missing Authorization vulnerability affecting Civic Cookie Control plugin (civic-cookie-control-8) with affected versions

5.3CVSS5.4AI score0.00222EPSS
SaveExploits0References1
OSV
OSV
added 2026/01/22 2:32 p.m.13 views

CLSA-2026-1769092364 curl: Fix of CVE-2025-9086

CVE-2025-9086: cookie: don't treat the leading slash as trailing...

7.5CVSS6.8AI score0.01395EPSS
SaveExploits1References1
IBM Security Bulletins
IBM Security Bulletins
added 2026/01/22 2:58 a.m.13 views

Security Bulletin: Vulnerabilities affect IBM watsonx Orchestrate with watsonx Assistant Cartridge

Summary Potential vulnerabilities have been identified that affect IBM watsonx Orchestrate with watsonx Assistant Cartridge - UAB Component. The vulnerability has been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2025-47912 DESCRIPTION: The Parse functio...

7.5CVSS7.2AI score0.00617EPSS
SaveExploits0Affected Software1
SUSE CVE
SUSE CVE
added 2026/01/22 12:25 a.m.8 views

SUSE CVE-2026-0672

When using http.cookies.Morsel, user-controlled cookie values and parameters can allow injecting HTTP headers into messages. Patch rejects all control characters within cookie names, values, and parameters...

7.5CVSS5.4AI score0.00416EPSS
SaveExploits0References29
Rows per page
Query Builder