Lucene search
+L

4807 matches found

BDU FSTEC
BDU FSTEC
added 2026/07/13 12:00 a.m.8 views

The vulnerability of the setup-sandbox.js file in the vm2 package manager of NPM allows a hacker to execute arbitrary code.

The vulnerability of the setup-sandbox.js file in the vm2 package manager’s library in NPM is related to a data protection mechanism breach. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code...

7.2CVSS6.3AI score0.002EPSS
SaveExploits1References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/07/13 12:00 a.m.8 views

The vulnerability of the vm2 package manager’s code transformer allows a hacker to execute arbitrary code.

The vulnerability of the vm2 package manager’s code transformation transformer is related to a breach of data protection mechanisms. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

5.8CVSS6.3AI score0.00248EPSS
SaveExploits1References3Affected Software2
CVE
CVE
added 2026/07/10 7:48 a.m.35 views

CVE-2026-12955

The CVE-2026-12955 entry describes a vulnerability in the GDPR Cookie Consent plugin for WordPress (versions up to 4.3.6) where missing capability checks and nonce verification in the gdpr_cookie_consent_ajax_save_schedule_scan() function (wp_ajax_gcc_save_schedule_scan) allow authenticated users...

4.3CVSS6.1AI score0.00336EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/07/10 7:48 a.m.41 views

CVE-2026-14475 Cookie Banner for GDPR / CCPA <= 4.3.6 - Authenticated (Administrator+) SQL Injection via 'scan_id' Parameter

The Cookie Banner for GDPR / CCPA – WPLP Cookie Consent plugin for WordPress is vulnerable to generic SQL Injection via the 'scanid' parameter in all versions up to, and including, 4.3.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing...

4.9CVSS0.00495EPSS
SaveExploits0References7
Patchstack
Patchstack
added 2026/07/09 7:08 p.m.14 views

WordPress Cookie Banner for GDPR / CCPA – WPLP Cookie Consent plugin <= 4.3.6 - Authenticated (Administrator+) SQL Injection vulnerability

Authenticated Administrator+ SQL Injection vulnerability discovered by PRISM in WordPress Plugin WP Cookie Notice for GDPR, CCPA & ePrivacy Consent versions = 4.3.6...

4.9CVSS6.1AI score0.00495EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2026/07/09 7:07 p.m.13 views

WordPress Cookie Banner for GDPR / CCPA – WPLP Cookie Consent plugin <= 4.3.6 - Missing Authorization to Authenticated (Subscriber+) Scan Schedule Modification vulnerability

Missing Authorization to Authenticated Subscriber+ Scan Schedule Modification vulnerability discovered by PRISM in WordPress Plugin WP Cookie Notice for GDPR, CCPA & ePrivacy Consent versions = 4.3.6...

4.3CVSS6.1AI score0.00336EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2026/07/09 9:31 a.m.19 views

EUVD-2026-42562

The DSGVO All in one for WP plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 4.9. This is due to the dsgvoresetpolicyservicefunc function lacking both capability checks and nonce verification while processing user-supplied parameters to reset plugin...

4.3CVSS5.9AI score0.00354EPSS
SaveExploits0References6
Redos
Redos
added 2026/07/09 12:00 a.m.11 views

ROS-20260709-73-0030

The vulnerability in Portainer-Ce is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker who operates remotely to gain unauthorized access to protected information...

7.4CVSS5.9AI score0.00259EPSS
SaveExploits0
Redos
Redos
added 2026/07/08 12:00 a.m.12 views

ROS-20260708-73-0043

The vulnerability in ImageMagick 7 is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

5.5CVSS5.9AI score0.00177EPSS
SaveExploits0
Redos
Redos
added 2026/07/08 12:00 a.m.11 views

ROS-20260708-73-0042

The vulnerability in ImageMagick is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

5.5CVSS5.9AI score0.00177EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2026/07/06 12:00 a.m.9 views

The vulnerability of the HTTPConnection.urlopen() method in the HTTP library of the Urllib3 Python programming language, which allows attackers to gain unauthorized access to protected information.

The vulnerability of the HTTPConnection.urlopen method in the Python HTTP library, Urllib3, is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.3CVSS5.9AI score0.00331EPSS
SaveExploits0References6Affected Software8
HackRead
HackRead
added 2026/07/01 8:52 p.m.22 views

The Cost of Non-Compliance: Why AI Governance Is the New Enterprise Imperative

AI governance helps enterprises control tool use, reduce compliance risk, protect customer data, and avoid fines as teams adopt AI faster than policy...

5.8AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2026/07/01 12:00 a.m.10 views

The vulnerability of 7-Zip, related to the breach of data protection mechanisms, allows attackers to circumvent existing security measures and perform spear-phishing attacks.

The vulnerability of 7-Zip refers to a flaw in the data protection mechanism implemented by Mark of the Web MOTW. Exploiting this vulnerability allows attackers to bypass existing security measures and perform spear-phishing attacks...

3.3CVSS5.8AI score0.00171EPSS
SaveExploits0References3Affected Software1
RedHat Linux
RedHat Linux
added 2026/06/25 8:18 a.m.57 views

Important: Red Hat Security Advisory: Red Hat OpenShift API for Data Protection

A new version of OpenShift API for Data Protection OADP is now available. OpenShift API for Data Protection OADP enables you to back up and restore application resources, persistent volume data, and internal container images to external backup storage. OADP enables both file system-based and...

10CVSS6.7AI score0.01557EPSS
SaveExploits2References13
RedHat Linux
RedHat Linux
added 2026/06/23 10:11 a.m.13 views

webkitgtk: An app may be able to access sensitive user data

A flaw was found in WebKitGTK. Processing or loading malicious web content can allow an app to access sensitive user data due to improper data protection...

5.5CVSS5.8AI score0.0014EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/06/23 4:38 a.m.21 views

webkitgtk: An app may be able to access sensitive user data

A flaw was found in WebKitGTK. Processing or loading malicious web content can allow an app to access sensitive user data due to improper data protection...

5.5CVSS5.8AI score0.0014EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2026/06/23 12:00 a.m.17 views

Уязвимость компонента Passwords браузера Google Chrome, позволяющая нарушителю получить доступ к защищаемой информации

Уязвимость компонента Passwords браузера Google Chrome связана с нарушением механизма защиты данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить доступ к защищаемой информации с помощью специально созданной HTML-страницы...

5CVSS5.8AI score0.00177EPSS
SaveExploits0References4Affected Software2
RedHat Linux
RedHat Linux
added 2026/06/22 9:27 a.m.26 views

webkitgtk: An app may be able to access sensitive user data

A flaw was found in WebKitGTK. Processing or loading malicious web content can allow an app to access sensitive user data due to improper data protection...

5.5CVSS5.8AI score0.0014EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/06/22 6:15 a.m.19 views

webkitgtk: An app may be able to access sensitive user data

A flaw was found in WebKitGTK. Processing or loading malicious web content can allow an app to access sensitive user data due to improper data protection...

5.5CVSS5.8AI score0.0014EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/06/22 3:49 a.m.26 views

webkitgtk: An app may be able to access sensitive user data

A flaw was found in WebKitGTK. Processing or loading malicious web content can allow an app to access sensitive user data due to improper data protection...

5.5CVSS5.8AI score0.0014EPSS
SaveExploits0References5
Rows per page
Query Builder