Lucene search
+L

9773 matches found

Vulnrichment
Vulnrichment
•added 2026/05/02 1:30 p.m.•16 views

CVE-2026-7631 code-projects Online Hospital Management System Registration improper authorization

A vulnerability was found in code-projects Online Hospital Management System 1.0. The impacted element is an unknown function of the component Registration Handler. The manipulation of the argument Username results in improper authorization. The attack can be executed remotely. The exploit has be...

5.5CVSS5.5AI score0.00381EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/05/02 1:30 p.m.•26 views

EUVD-2026-26793

A vulnerability was found in code-projects Online Hospital Management System 1.0. The impacted element is an unknown function of the component Registration Handler. The manipulation of the argument Username results in improper authorization. The attack can be executed remotely. The exploit has be...

5.5CVSS5.7AI score0.00381EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/05/02 1:30 p.m.•52 views

CVE-2026-7631 code-projects Online Hospital Management System Registration improper authorization

A vulnerability was found in code-projects Online Hospital Management System 1.0. The impacted element is an unknown function of the component Registration Handler. The manipulation of the argument Username results in improper authorization. The attack can be executed remotely. The exploit has be...

5.5CVSS0.00381EPSS
SaveExploits0References5
NVD
NVD
•added 2026/05/02 8:16 a.m.•16 views

CVE-2026-6449

The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Improper Authorization in all versions up to, and including, 2.1.2. This is due to a logical short-circuit flaw in authorization logic that causes token validation to be entirely skipped when a booking...

5.3CVSS0.00423EPSS
SaveExploits0References8
attackerkb
attackerkb
•added 2026/05/02 7:46 a.m.•9 views

CVE-2026-6449

The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Improper Authorization in all versions up to, and including, 2.1.2. This is due to a logical short-circuit flaw in authorization logic that causes token validation to be entirely skipped when a booking...

5.3CVSS5.8AI score0.00423EPSS
SaveExploits0References9
EUVD
EUVD
•added 2026/05/02 7:46 a.m.•23 views

EUVD-2026-26758

The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Improper Authorization in all versions up to, and including, 2.1.2. This is due to a logical short-circuit flaw in authorization logic that causes token validation to be entirely skipped when a booking...

5.3CVSS5.8AI score0.00423EPSS
SaveExploits0References8
Mend
Mend
•added 2026/05/02 3:15 a.m.•5 views

CVE-2026-7602

A vulnerability was found in JeecgBoot up to 3.9.1. Affected by this vulnerability is an unknown functionality of the file /sys/fillRule/edit of the component FillRuleUtil Component. The manipulation of the argument ruleClass results in improper authorization. The attack may be performed from...

6.5CVSS5.9AI score0.00366EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2026/05/02 3:15 a.m.•10 views

CVE-2026-7602 JeecgBoot FillRuleUtil edit improper authorization

A vulnerability was found in JeecgBoot up to 3.9.1. Affected by this vulnerability is an unknown functionality of the file /sys/fillRule/edit of the component FillRuleUtil Component. The manipulation of the argument ruleClass results in improper authorization. The attack may be performed from...

6.5CVSS5.9AI score0.00366EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2026/05/02 3:15 a.m.•9 views

CVE-2026-7602

A vulnerability was found in JeecgBoot up to 3.9.1. Affected by this vulnerability is an unknown functionality of the file /sys/fillRule/edit of the component FillRuleUtil Component. The manipulation of the argument ruleClass results in improper authorization. The attack may be performed from...

6.5CVSS6AI score0.00366EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/05/02 3:15 a.m.•20 views

EUVD-2026-26730

A vulnerability was found in JeecgBoot up to 3.9.1. Affected by this vulnerability is an unknown functionality of the file /sys/fillRule/edit of the component FillRuleUtil Component. The manipulation of the argument ruleClass results in improper authorization. The attack may be performed from...

6.5CVSS6AI score0.00366EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/05/02 3:15 a.m.•49 views

CVE-2026-7602 JeecgBoot FillRuleUtil edit improper authorization

A vulnerability was found in JeecgBoot up to 3.9.1. Affected by this vulnerability is an unknown functionality of the file /sys/fillRule/edit of the component FillRuleUtil Component. The manipulation of the argument ruleClass results in improper authorization. The attack may be performed from...

6.5CVSS0.00366EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2026/05/02 3:15 a.m.•28 views

CVE-2026-7602 JeecgBoot FillRuleUtil edit improper authorization

A vulnerability was found in JeecgBoot up to 3.9.1. Affected by this vulnerability is an unknown functionality of the file /sys/fillRule/edit of the component FillRuleUtil Component. The manipulation of the argument ruleClass results in improper authorization. The attack may be performed from...

5.3CVSS5.9AI score0.00366EPSS
SaveExploits0References8
RedhatCVE
RedhatCVE
•added 2026/05/02 2:47 a.m.•23 views

CVE-2026-7505

A flaw has been found in nextlevelbuilder GoClaw and GoClaw Lite up to 3.8.5. This affects an unknown function of the component RPC Handler. This manipulation causes improper authorization. The attack may be initiated remotely. The exploit has been published and may be used. Upgrading to version...

7.5CVSS6.5AI score0.00511EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/02 12:00 a.m.•4 views

CVE-2026-7602: Improper Authorization

A vulnerability was found in JeecgBoot up to 3.9.1. Affected by this vulnerability is an unknown functionality of the file /sys/fillRule/edit of the component FillRuleUtil Component. The manipulation of the argument ruleClass results in improper authorization. The attack may be performed from...

6.5CVSS6AI score0.00366EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/02 12:00 a.m.•13 views

CVE-2026-7644: Improper Authorization

A vulnerability has been found in ChatGPTNextWeb NextChat up to 2.16.1. Affected is the function addMcpServer of the file app/mcp/actions.ts. The manipulation leads to improper authorization. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be...

7.5CVSS6.5AI score0.00513EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/02 12:00 a.m.•7 views

CVE-2026-6449: Improper Authorization

The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Improper Authorization in all versions up to, and including, 2.1.2. This is due to a logical short-circuit flaw in authorization logic that causes token validation to be entirely skipped when a booking...

5.3CVSS5.7AI score0.00423EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/02 12:00 a.m.•24 views

Code-Projects Online Hospital Management System Security Vulnerabilities

Code-Projects Online Hospital Management System is an open-source online hospital management system developed by Code-Projects. Version 1.0 of the Code-Projects Online Hospital Management System contains a security vulnerability. This vulnerability stems from the handling of the parameter...

5.5CVSS5.8AI score0.00381EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/05/02 12:00 a.m.•44 views

PT-2026-36626

A vulnerability has been found in ChatGPTNextWeb NextChat up to 2.16.1. Affected is the function addMcpServer of the file app/mcp/actions.ts. The manipulation leads to improper authorization. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be...

7.5CVSS6.5AI score0.00513EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/05/02 12:00 a.m.•39 views

PT-2026-36591

The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Improper Authorization in all versions up to, and including, 2.1.2. This is due to a logical short-circuit flaw in authorization logic that causes token validation to be entirely skipped when a booking...

5.3CVSS5.7AI score0.00423EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/02 12:00 a.m.•11 views

CVE-2026-7631: Improper Authorization

A vulnerability was found in code-projects Online Hospital Management System 1.0. The impacted element is an unknown function of the component Registration Handler. The manipulation of the argument Username results in improper authorization. The attack can be executed remotely. The exploit has be...

5.5CVSS5.5AI score0.00381EPSS
SaveExploits0References3
Rows per page
Query Builder