Lucene search
+L

4918 matches found

NVD
NVD
added 2025/01/11 3:15 a.m.12 views

CVE-2024-42169

HCL MyXalytics is affected by insecure direct object references. It occurs due to missing access control checks, which fail to verify whether a user should be allowed to access specific data...

8.1CVSS0.00273EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/11 2:31 a.m.8 views

CVE-2024-42169 HCL MyXalytics is affected by insecure direct object references

HCL MyXalytics is affected by insecure direct object references. It occurs due to missing access control checks, which fail to verify whether a user should be allowed to access specific data...

7.1CVSS6.8AI score0.00273EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/11 2:31 a.m.36 views

CVE-2024-42169

CVE-2024-42169 affects HCL DRYiCE MyXalytics (MyXalytics) with an insecure direct object reference caused by missing access control checks. The CVE entry and multiple connected sources (NVD, CVE List, CIRCL, PT Security) consistently describe unauthorized access to data due to insufficient verifi...

8.1CVSS6.8AI score0.00273EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/01/11 2:31 a.m.23 views

CVE-2024-42169 HCL MyXalytics is affected by insecure direct object references

HCL MyXalytics is affected by insecure direct object references. It occurs due to missing access control checks, which fail to verify whether a user should be allowed to access specific data...

7.1CVSS0.00273EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/11 12:00 a.m.10 views

HCL DRYiCE MyXalytics 安全漏洞

HCL DRYiCE MyXalytics is a unified reporting and dashboard product from HCL Corporation, USA. A security vulnerability exists in HCL DRYiCE MyXalytics that stems from vulnerability to insecure direct object references...

8.1CVSS6.8AI score0.00273EPSS
SaveExploits0References1
Veracode
Veracode
added 2025/01/09 4:33 a.m.11 views

Insecure Direct Object Reference (IDOR)

Khoj is vulnerable to Insecure Direct Object Reference IDOR. The vulnerability is due to the improper implementation of access controls in the updatesubscription endpoint, where the system fails to enforce authorization checks to ensure that only the owner of a subscription can modify it, allowin...

4.3CVSS6.4AI score0.00381EPSS
SaveExploits0References4Affected Software1
Patchstack
Patchstack
added 2025/01/07 5:38 p.m.13 views

WordPress WP Job Portal plugin <= 2.2.5- Authenticated (Subscriber+) Insecure Direct Object Reference vulnerability

WordPress WP Job Portal plugin = 2.2.5- Authenticated Subscriber+ Insecure Direct Object Reference vulnerability discovered by Apostolos Sakellariou in WordPress Plugin WP Job Portal versions = 2.2.5...

4.3CVSS7AI score0.00314EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2025/01/07 1:15 p.m.26 views

CVE-2024-12131

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.5 due to missing validation on a user controlled key. This makes it possible for authenticated...

4.3CVSS0.00314EPSS
SaveExploits0References2
OSV
OSV
added 2025/01/07 1:15 p.m.10 views

CVE-2024-12131

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.5 due to missing validation on a user controlled key. This makes it possible for authenticated...

4.3CVSS7.3AI score0.00314EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/01/07 12:43 p.m.39 views

CVE-2024-12131 WP Job Portal – A Complete Recruitment System for Company or Job Board website <= 2.2.5- Authenticated (Subscriber+) Insecure Direct Object Reference

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.5 due to missing validation on a user controlled key. This makes it possible for authenticated...

4.3CVSS0.00314EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/01/07 12:43 p.m.14 views

CVE-2024-12131 WP Job Portal – A Complete Recruitment System for Company or Job Board website <= 2.2.5- Authenticated (Subscriber+) Insecure Direct Object Reference

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.5 due to missing validation on a user controlled key. This makes it possible for authenticated...

4.3CVSS6.8AI score0.00314EPSS
SaveExploits0References2
CVE
CVE
added 2025/01/07 12:43 p.m.66 views

CVE-2024-12131

CVE-2024-12131 affects the WordPress plugin “WP Job Portal – A Complete Recruitment System for Company or Job Board website” (WordPress plugin). The issue is an Insecure Direct Object Reference caused by missing validation on a user-controlled key, enabling authenticated attackers with Subscriber...

4.3CVSS4.3AI score0.00314EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2025/01/07 12:00 a.m.11 views

WordPress plugin WP Job Portal 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS8.2AI score0.00314EPSS
SaveExploits0References3
OSV
OSV
added 2025/01/03 9:15 a.m.10 views

CVE-2024-12132

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.4 due to missing validation on a user controlled key. This makes it possible for authenticated...

4.3CVSS5.8AI score0.00376EPSS
SaveExploits0References2
NVD
NVD
added 2025/01/03 9:15 a.m.13 views

CVE-2024-12132

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.4 due to missing validation on a user controlled key. This makes it possible for authenticated...

4.3CVSS0.00376EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/01/03 8:22 a.m.19 views

CVE-2024-12132 WP Job Portal – A Complete Recruitment System for Company or Job Board website <= 2.2.4 - Authenticated (Subscriber+) Insecure Direct Object Reference

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.4 due to missing validation on a user controlled key. This makes it possible for authenticated...

4.3CVSS6.5AI score0.00376EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/01/03 8:22 a.m.28 views

CVE-2024-12132 WP Job Portal – A Complete Recruitment System for Company or Job Board website <= 2.2.4 - Authenticated (Subscriber+) Insecure Direct Object Reference

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.4 due to missing validation on a user controlled key. This makes it possible for authenticated...

4.3CVSS0.00376EPSS
SaveExploits0References2
CVE
CVE
added 2025/01/03 8:22 a.m.71 views

CVE-2024-12132

CVE-2024-12132 - WP Job Portal (WordPress) vulnerability : The WP Job Portal – A Complete Recruitment System plugin for WordPress is vulnerable to insecure direct object references in all versions up to 2.2.4 due to missing validation on a user-controlled key. This enables authenticated attackers...

4.3CVSS4.3AI score0.00376EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2025/01/03 12:00 a.m.9 views

WordPress plugin WP Job Portal 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS8.2AI score0.00376EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/01/03 12:00 a.m.18 views

PT-2025-1761 · WordPress · Wp Job Portal

Name of the Vulnerable Software and Affected Versions: WP Job Portal – A Complete Recruitment System plugin for WordPress versions up to, and including, 2.2.4 Description: The WP Job Portal plugin for WordPress is vulnerable to Insecure Direct Object Reference due to missing validation on a user...

4.3CVSS9.4AI score0.00376EPSS
SaveExploits0References9
Rows per page
Query Builder