272 matches found
CVE-2025-8861 Changing｜TSA - Missing Authentication
TSA developed by Changing has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read, modify, and delete database contents...
CVE-2025-8861
CVE-2025-8861 concerns Changing TSA, a timestamp server product, with a Missing Authentication vulnerability that allows unauthenticated remote attackers to read, modify, and delete database contents. The underlying issue is an access-control flaw (lack of authentication). The connected documents...
Changing TSA 访问控制错误漏洞
Changing TSA is a timestamp server from Panorama Changing Corporation in Taiwan, China. Changing TSA suffers from an Access Control Error vulnerability that stems from a lack of authentication, which could allow an unauthenticated, remote attacker to read, modify, and delete database contents...
CVE-2025-7839
The Restore Permanently delete Post or Page Data plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on the rpdpodpaajaxdpdeletedata function. This makes it possible for unauthenticated...
PT-2025-34511 · WordPress · Restore Permanently Delete Post/Page Data
Name of the Vulnerable Software and Affected Versions: Restore Permanently delete Post or Page Data plugin for WordPress version 1.0 Description: The Restore Permanently delete Post or Page Data plugin for WordPress is susceptible to Cross-Site Request Forgery due to missing or incorrect nonce...
Linux Distros Unpatched Vulnerability : CVE-2022-21305
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Hotspot. Supported versions that are affected are...
The vulnerability of the Web Utilities component of the Oracle Applications Framework software platform allows a perpetrator to gain unauthorized access to modify, read, and delete protected information.
The vulnerability of the Web Utilities component of the Oracle Applications Framework is related to access control errors. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to modify, read, and delete protected information using the HTTP protoc...
The vulnerability of the application’s request handling component relates to access, organization, and interaction with various types of Oracle Universal Work Queue tasks. This allows attackers to gain unauthorized access to modify, read, and delete protected information.
The vulnerability of the application’s request handling component for accessing, organizing, and interacting with various types of Oracle Universal Work Queue tasks is related to access control errors. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized...
Data Brokers Are Hiding Their Opt-Out Pages From Google Search
Dozens of companies are hiding how you can delete your personal data, The Markup and CalMatters found...
PT-2025-32386 · Mitel · Micollab +1
Name of the Vulnerable Software and Affected Versions: Mitel MiCollab versions through 9.8 SP2 9.8.2.12 Description: A vulnerability exists in the NuPoint Unified Messaging NPM component that could allow an unauthenticated attacker to conduct a path traversal attack due to insufficient input...
CVE-2025-52913
A path traversal vulnerability exists in the NuPoint Unified Messaging (NPM) component of Mitel MiCollab through version 9.8 SP2 (9.8.2.12) . The root cause is insufficient input validation, specifically involving the improper normalization of crafted URL sequences like ..;. This allows unauthent...
The vulnerability of the Platform Security component of the Oracle Business Intelligence Enterprise Edition software platform allows a perpetrator to gain access to read, modify, and delete data.
The vulnerability of the Platform Security component of the Oracle Business Intelligence Enterprise Edition software is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain read, modify, and delete privileges on data...
sentry-android unmasked sensitive data in Android Session Replays for users of Jetpack Compose 1.8+
Impact Under specific circumstances, text composables may contain unmasked sensitive data in Android session replays. You may be impacted if you meet the following conditions: - Using any sentry-android with versions = 1.8.0-alpha08 - This includes any alpha, beta, release candidate, or general...
The vulnerability of the File Upload plugin in the WordPress content management system allows a hacker to gain access to read, modify, or delete data.
The vulnerability of the File Upload plugin in the WordPress content management system is related to an incorrect restriction on the path to the restricted directory. Exploiting this vulnerability could allow a malicious actor to gain read, modify, or delete access to data...
FreeScout 安全漏洞
FreeScout is an ultra-lightweight free open source helpdesk and shared inbox built using PHP Laravel framework by FreeScout. FreeScout suffers from a security bypass vulnerability that is caused by incorrect configuration of the root folder of the object Storage. An attacker could exploit the...
CVE-2021-2066
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. Supported versions that are affected are 8.5.4 and 8.5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside...
Splunk 访问控制错误漏洞
Splunk is a suite of data collection and analysis software from Splunk, Inc. It is used to collect, index, and analyze and the data it generates, including data generated by all IT systems and infrastructures physical, virtual machines, and cloud. Splunk suffers from an Access Control Error...
The vulnerability of the setQuickCfgWifiAndLogin() function in the Tenda W18E router software allows a hacker to bypass security restrictions and gain access to read, modify, or delete data.
The vulnerability of the setQuickCfgWifiAndLogin function in the Tenda W18E router’s microprogramming software is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to bypass security restrictions and gain access to read, modify, or delete data ...
The vulnerability of the Mobile Security Framework (MobSF) for mobile application security research lies in an incorrect pathname limitation, which allows a malicious actor to gain unauthorized access for reading, deleting protected information, and executing arbitrary code.
The vulnerability of the Mobile Security Framework MobSF for mobile application security research is related to an incorrect restriction on the path name to the directory. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to read, delete protected information...
