Lucene search
K

12 matches found

Positive Technologies
Positive Technologies
added 2025/12/17 12:0 a.m.3 views

PT-2025-51853

Mattermost Desktop App versions 6.0.0 fail to sanitize sensitive information from Mattermost logs and clear data on server deletion which allows an attacker with access to the users system to gain access to potentially sensitive information via reading the application logs...

3.3CVSS6.8AI score0.00017EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/11/01 5:40 a.m.2 views

CVE-2025-12038 Folderly <= 0.3 - Incorrect Authorization to Authenticated (Author+) Term Deletion

The Folderly plugin for WordPress is vulnerable to unauthorized modification of data due to an insufficient capability check on the /wp-json/folderly/v1/config/clear-all-data REST API endpoint in all versions up to, and including, 0.3. This makes it possible for authenticated attackers, with...

4.3CVSS5.2AI score0.00038EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/21 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2018-6053

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in New Tab Page in Google Chrome prior to 64.0.3282.119 allowed a local attacker to view website thumbnail images after clearing...

4.3CVSS6.7AI score0.0017EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/09 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2020-10685

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and 2.9.x before 2.9.7 as well as Ansible Tower...

5.5CVSS6.7AI score0.00205EPSS
Exploits0References2
CVE
CVE
added 2024/06/28 3:29 a.m.46 views

CVE-2024-5863

CVE-2024-5863 affects the Easy Image Collage WordPress plugin. The issue is a missing capability check in ajax_image_collage() across versions up to and including 1.13.5, allowing authenticated users with Contributor-level access and above to erase content in arbitrary posts (data loss). Wordfenc...

5.4CVSS5.6AI score0.00078EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/06/28 3:29 a.m.20 views

CVE-2024-5863 Easy Image Collage <= 1.13.5 - Missing Authorization to Authenticated (Contributor+) Data Clearance

The Easy Image Collage plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the ajaximagecollage function in all versions up to, and including, 1.13.5. This makes it possible for authenticated attackers, with Contributor-level access and above, to...

5.4CVSS0.00078EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/06/28 3:29 a.m.13 views

CVE-2024-5863 Easy Image Collage <= 1.13.5 - Missing Authorization to Authenticated (Contributor+) Data Clearance

The Easy Image Collage plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the ajaximagecollage function in all versions up to, and including, 1.13.5. This makes it possible for authenticated attackers, with Contributor-level access and above, to...

5.4CVSS5.3AI score0.00078EPSS
Exploits0References2
NVD
NVD
added 2023/06/16 7:15 p.m.9 views

CVE-2023-25645

There is a permission and access control vulnerability in some ZTE AndroidTV STBs. Due to improper permission settings, non-privileged application can perform functions that are protected with signature/privilege-level permissions. Exploitation of this vulnerability could clear personal data and...

7.7CVSS7.5AI score0.00039EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/06/16 12:0 a.m.10 views

CVE-2023-25645

There is a permission and access control vulnerability in some ZTE AndroidTV STBs. Due to improper permission settings, non-privileged application can perform functions that are protected with signature/privilege-level permissions. Exploitation of this vulnerability could clear personal data and...

6.8AI score0.00039EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2021/12/08 12:0 a.m.3 views

PT-2021-8123 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The vulnerability is related to the ipmi: ssif component in the Linux kernel. It causes a kernel crash when an error path is taken during the probe of ssif info-client. The issue arise...

7.8CVSS6.7AI score0.00223EPSS
Exploits12References1651
RedHat Linux
RedHat Linux
added 2018/02/01 4:6 p.m.1 views

chromium-browser: leak of page thumbnails in new tab page

Inappropriate implementation in New Tab Page in Google Chrome prior to 64.0.3282.119 allowed a local attacker to view website thumbnail images after clearing browser data via a crafted HTML page...

4.3CVSS7.3AI score0.0017EPSS
Exploits0References5
Cvelist
Cvelist
added 2013/09/16 7:0 p.m.24 views

CVE-2013-4183

The clearvolume function in LVMVolumeDriver driver in OpenStack Cinder 2013.1.1 through 2013.1.2 does not properly clear data when deleting a snapshot, which allows local users to obtain sensitive information via unspecified vectors...

5.4AI score0.00156EPSS
Exploits1References3
Rows per page
Query Builder