Lucene search
+L

7 matches found

CVE
CVE
added 2025/11/18 1:54 p.m.27 views

CVE-2025-12545

CVE-2025-12545 affects the Pixel Manager for WooCommerce – Track Conversions and Analytics, Google Ads, TikTok and more WordPress plugin. The vulnerability is an information exposure in all versions up to 1.49.2 caused by insufficient access restrictions in the ajax_pmw_get_product_ids() function...

5.3CVSS5.8AI score0.00287EPSS
SaveExploits0References3
Talos
Talos
added 2025/08/20 12:0 a.m.14 views

Tenda AC6 V5.0 /goform/getproductInfo information disclosure vulnerability

Talos Vulnerability Report TALOS-2025-2164 Tenda AC6 V5.0 /goform/getproductInfo information disclosure vulnerability August 20, 2025 CVE Number CVE-2025-24496 SUMMARY An information disclosure vulnerability exists in the /goform/getproductInfo functionality of Tenda AC6 V5.0 V02.03.01.110...

7.5CVSS6.6AI score0.00367EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/23 9:16 a.m.13 views

CVE-2024-36837

SQL Injection vulnerability in CRMEB v.5.2.2 allows a remote attacker to obtain sensitive information via the getProductList function in the ProductController.php file...

7.5CVSS6AI score0.08306EPSS
SaveExploits2References1
OSV
OSV
added 2024/06/05 3:15 p.m.5 views

CVE-2024-36837

SQL Injection vulnerability in CRMEB v.5.2.2 allows a remote attacker to obtain sensitive information via the getProductList function in the ProductController.php file...

7.5CVSS5.9AI score0.08306EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
added 2024/06/05 12:0 a.m.8 views

PT-2024-27174 · Crmeb · Crmeb

Name of the Vulnerable Software and Affected Versions: CRMEB version 5.2.2 Description: The issue allows a remote attacker to obtain sensitive information. This is achieved via the getProductList function in the ProductController.php file. Recommendations: For CRMEB version 5.2.2, consider...

7.5CVSS7.1AI score0.08306EPSS
SaveExploits2References4
OSV
OSV
added 2022/04/28 8:15 p.m.5 views

CVE-2022-29081

Zoho ManageEngine Access Manager Plus before 4302, Password Manager Pro before 12007, and PAM360 before 5401 are vulnerable to access-control bypass on a few Rest API URLs for SSOutAction. SSLAction. LicenseMgr. GetProductDetails. GetDashboard. FetchEvents. and Synchronize via the ../RestAPI...

9.8CVSS7.3AI score0.83543EPSS
SaveExploits1References2
Packet Storm
Packet Storm
added 2009/07/23 12:0 a.m.26 views

Valentina Cookie Handling Privilege Escalation

Cyber-Warrior & Security TIM - Bug Researchers Group Application Name : Valentina Vulnerable Type : Cookie Handling Vulnerebility Infection : SQL Info GET... Author : Septemb0x Script Down.& WebSite : http://s2.dosya.tc/valentina.zip.html - http://www.valya.ru Cyber-Warrior & Security TIM - Bug...

1.3AI score
SaveExploits0
Rows per page
Query Builder