Lucene search
+L

705 matches found

Vulnrichment
Vulnrichment
•added 2025/10/10 10:24 p.m.•1 views

CVE-2025-9549 Facets - Moderately critical - Information Disclosure - SA-CONTRIB-2025-099

Missing Authorization vulnerability in Drupal Facets allows Forceful Browsing.This issue affects Facets: from 0.0.0 before 2.0.10, from 3.0.0 before 3.0.1...

5.8AI score0.00203EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/10/10 10:24 p.m.•23 views

CVE-2025-9549 Facets - Moderately critical - Information Disclosure - SA-CONTRIB-2025-099

Missing Authorization vulnerability in Drupal Facets allows Forceful Browsing.This issue affects Facets: from 0.0.0 before 2.0.10, from 3.0.0 before 3.0.1...

0.00203EPSS
SaveExploits0References1
OSV
OSV
•added 2025/10/10 10:24 p.m.•10 views

CVE-2025-9549 Facets - Moderately critical - Information Disclosure - SA-CONTRIB-2025-099

Missing Authorization vulnerability in Drupal Facets allows Forceful Browsing.This issue affects Facets: from 0.0.0 before 2.0.10, from 3.0.0 before 3.0.1...

6.5CVSS5.9AI score
SaveExploits0References5
CVE
CVE
•added 2025/10/10 10:24 p.m.•48 views

CVE-2025-9549

The Drupal Facets module is vulnerable to a Missing Authorization issue, which may allow Forceful Browsing and information disclosure. The root cause is that the module does not sufficiently check access to entities when they are displayed as facets. This specifically affects Facets versions 0.0....

6.5CVSS5.8AI score0.00203EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2025/10/10 2:15 p.m.•12 views

CVE-2025-8887

Authorization Bypass Through User-Controlled Key, Missing Authorization, Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Usta Information Systems Inc. Aybs Interaktif allows Forceful Browsing, Parameter Injection, Input Data Manipulation. This issue affects Aybs...

6.1CVSS0.00148EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/10 1:56 p.m.•14 views

EUVD-2025-33726

Authorization Bypass Through User-Controlled Key, Missing Authorization, Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Usta Information Systems Inc. Aybs Interaktif allows Forceful Browsing, Parameter Injection, Input Data Manipulation.This issue affects Aybs...

6.1CVSS6.3AI score0.00148EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/10/10 1:56 p.m.•10 views

CVE-2025-8887 IDOR in Usta Information Systems' Aybs Interaktif

Authorization Bypass Through User-Controlled Key, Missing Authorization, Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Usta Information Systems Inc. Aybs Interaktif allows Forceful Browsing, Parameter Injection, Input Data Manipulation. This issue affects Aybs...

6.1CVSS5.8AI score0.00148EPSS
SaveExploits0References2
CVE
CVE
•added 2025/10/10 1:56 p.m.•28 views

CVE-2025-8887

The CVE-2025-8887 issue concerns Usta Information Systems Inc. Aybs Interaktif. Affects Aybs Interaktif versions from 2024 through 28082025 and arises from an authorization bypass via user-controlled keys, leading to missing authorization and exposure of sensitive information to an unauthorized a...

6.1CVSS5.8AI score0.00148EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/10/10 1:56 p.m.•26 views

CVE-2025-8887 IDOR in Usta Information Systems' Aybs Interaktif

Authorization Bypass Through User-Controlled Key, Missing Authorization, Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Usta Information Systems Inc. Aybs Interaktif allows Forceful Browsing, Parameter Injection, Input Data Manipulation. This issue affects Aybs...

6.1CVSS0.00148EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2025/10/10 1:56 p.m.•8 views

CVE-2025-8887

Authorization Bypass Through User-Controlled Key, Missing Authorization, Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Usta Information Systems Inc. Aybs Interaktif allows Forceful Browsing, Parameter Injection, Input Data Manipulation. This issue affects Aybs...

6.1CVSS5.5AI score0.00148EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2025/10/10 12:00 a.m.•25 views

PT-2025-41617

Name of the Vulnerable Software and Affected Versions Drupal Facets versions 0.0.0 through 2.0.9 Drupal Facets versions 3.0.0 through 3.0.0 Description A missing authorization issue exists in Drupal Facets, potentially allowing forceful browsing. The issue relates to insufficient access controls...

6.5CVSS6.6AI score0.00203EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/10 12:00 a.m.•3 views

CVE-2025-9549: Missing Authorization

Missing Authorization vulnerability in Drupal Facets allows Forceful Browsing.This issue affects Facets: from 0.0.0 before 2.0.10, from 3.0.0 before 3.0.1...

6.5CVSS5.8AI score0.00203EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/10 12:00 a.m.•2 views

CVE-2025-8887: Authorization Bypass Through User-Controlled Key

Authorization Bypass Through User-Controlled Key, Missing Authorization, Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Usta Information Systems Inc. Aybs Interaktif allows Forceful Browsing, Parameter Injection, Input Data Manipulation. This issue affects Aybs...

6.1CVSS5.8AI score0.00148EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/10/10 12:00 a.m.•15 views

PT-2025-41566

Name of the Vulnerable Software and Affected Versions Usta Information Systems Inc. Aybs Interaktif versions 2024 through 28082025 Description An authorization bypass exists in Usta Information Systems Inc. Aybs Interaktif due to user-controlled keys, missing authorization checks, and exposure of...

6.1CVSS6.5AI score0.00148EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/10/07 9:27 a.m.•18 views

CVE-2025-0608

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Logo Software Inc. Logo Cloud allows Phishing, Forceful Browsing. This issue affects Logo Cloud: before 2025.R6...

5.5CVSS5.5AI score0.00162EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2019-4352

Malware in sbrugna...

9.8CVSS8.1AI score0.02319EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2020-23237

Malware in sbrugna...

5.3CVSS5.5AI score0.01249EPSS
SaveExploits0References4
NVD
NVD
•added 2025/10/06 10:15 a.m.•29 views

CVE-2025-0608

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Logo Software Inc. Logo Cloud allows Phishing, Forceful Browsing. This issue affects Logo Cloud: before 2025.R6...

5.5CVSS0.00162EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/10/06 9:18 a.m.•9 views

CVE-2025-0608 Open Redirect in Logo Software's Logo Cloud

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Logo Software Inc. Logo Cloud allows Phishing, Forceful Browsing. This issue affects Logo Cloud: before 2025.R6...

5.5CVSS5.5AI score0.00162EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/06 9:18 a.m.•14 views

EUVD-2025-32526

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Logo Software Inc. Logo Cloud allows Phishing, Forceful Browsing.This issue affects Logo Cloud: before 2025.R6...

5.5CVSS6.3AI score0.00162EPSS
SaveExploits0References2
Rows per page
Query Builder