3417 matches found
CVE-2024-55070
A Broken Object Level Authorization vulnerability in the component /households/permissions of hay-kot mealie v2.2.0 allows group managers to edit their own permissions...
CVE-2025-20233
In the Splunk App for Lookup File Editing versions below 4.0.5, a script in the app used the chmod and makedirs Python functions in a way that resulted in overly broad read and execute permissions. This could lead to improper access control for a low-privileged user...
CVE-2025-20233
In the Splunk App for Lookup File Editing versions below 4.0.5, a script in the app used the chmod and makedirs Python functions in a way that resulted in overly broad read and execute permissions. This could lead to improper access control for a low-privileged user...
PT-2025-13017
Name of the Vulnerable Software and Affected Versions Splunk App for Lookup File Editing versions prior to 4.0.5 Description The issue is related to improper access control due to overly broad read and execute permissions. A script in the app used the chmod and makedirs Python functions in a way...
CVE-2025-20233: Incorrect Permission Assignment for Critical Resource
In the Splunk App for Lookup File Editing versions below 4.0.5, a script in the app used the chmod and makedirs Python functions in a way that resulted in overly broad read and execute permissions. This could lead to improper access control for a low-privileged user...
CVE-2025-20230: Improper Access Control
In Splunk Enterprise versions below 9.4.1, 9.3.3, 9.2.5, and 9.1.8, and versions below 3.8.38 and 3.7.23 of the Splunk Secure Gateway app on Splunk Cloud Platform, a low-privileged user that does not hold the “admin“ or “power“ Splunk roles could edit and delete other user data in App Key Value...
CVE-2024-12048
An IDOR Insecure Direct Object Reference vulnerability exists in transformeroptimus/superagi version v0.0.14. The application fails to properly check authorization for multiple API endpoints, allowing attackers to view, edit, and delete other users' information without proper authorization...
phpIPAM 跨站脚本漏洞
phpIPAM is phpIPAM open source a set of open source PHP and MySQL based IP address management applications IPAM. A cross-site scripting vulnerability exists in phpIPAM version 1.5.2, which stems from a stored cross-site scripting vulnerability in the Subnet NAT translations section when editing a...
[SECURITY] Fedora 42 Update: nextcloud-31.0.0-1.fc42
NextCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing rig ht on the web. NextCloud is extendable via a simple but powerful API...
Allocation of Resources Without Limits or Throttling
Overview pocketmine/pocketmine-mp is a highly customisable, open source server software for Minecraft: Bedrock Edition written in PHP Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the explode function. An attacker can occupy excessive...
CVE-2025-2117: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Beijing Founder Electronics Founder Enjoys All-Media Acquisition and Editing System 3.0 and classified as critical. Affected by this issue is the function electricDocList of the file /newsedit/report/reportCenter.do. The manipulation of the argument fvID/catID leads t...
PT-2025-10444
Name of the Vulnerable Software and Affected Versions Beijing Founder Electronics Founder Enjoys All-Media Acquisition and Editing System version 3.0 Description A vulnerability has been found in the File Protocol Handler component of the system, specifically in the...
PT-2025-10445
Name of the Vulnerable Software and Affected Versions Beijing Founder Electronics Founder Enjoys All-Media Acquisition and Editing System version 3.0 Description A critical issue was found in the function electricDocList of the file /newsedit/report/reportCenter.do. The manipulation of the argume...
CVE-2025-2116: Server-Side Request Forgery (SSRF)
A vulnerability has been found in Beijing Founder Electronics Founder Enjoys All-Media Acquisition and Editing System 3.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /newsedit/newsedit/xy/imageProxy.do of the component File Protocol Handle...
CVE-2025-27642
Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.933 Application 20.0.2368 allows Unauthenticated Driver Package Editing V-2024-008...
CVE-2025-27642
Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.933 Application 20.0.2368 allows Unauthenticated Driver Package Editing V-2024-008...
CVE-2025-27642
Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.933 Application 20.0.2368 allows Unauthenticated Driver Package Editing V-2024-008...
CVE-2025-27642
The Vasion Print (formerly PrinterLogic) application suffers from a critical vulnerability, identified as V-2024-008 , which allows unauthenticated driver package editing . This flaw exists in versions prior to Virtual Appliance Host 22.0.933 Application 20.0.2368 . An attacker could exploit this...
