Lucene search
+L

63728 matches found

CNNVD
CNNVD
added 2025/05/16 12:0 a.m.8 views

WordPress plugin BERTHA AI 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

8.8CVSS6AI score0.0031EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/05/16 12:0 a.m.7 views

WordPress plugin Simple Link Directory Pro 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.3CVSS6.3AI score0.00289EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/05/16 12:0 a.m.13 views

D-Link DI-7003G 访问控制错误漏洞

The D-Link DI-7003GV2 is a router from China-based AUO D-Link. The D-Link DI-7003GV2 suffers from an information disclosure vulnerability that originates from improper access control in the file /login.data, which can be exploited by an attacker to cause information disclosure...

6.9CVSS6.2AI score0.01011EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/05/16 12:0 a.m.9 views

WordPress plugin Acerola 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

5.3CVSS6.3AI score0.0038EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/05/16 12:0 a.m.7 views

WordPress plugin CSS3 Tooltips for WordPress 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS6AI score0.00235EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/05/16 12:0 a.m.8 views

WordPress plugin Sharespine Woocommerce Connector 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

4.3CVSS6AI score0.00216EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/05/16 12:0 a.m.8 views

WordPress plugin Push notification for Mobile and Web app 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

6.5CVSS6.9AI score0.00234EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/05/15 9:14 p.m.18 views

CVE-2025-20076

Improper access control for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

5CVSS7.6AI score0.00194EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/15 9:13 p.m.13 views

CVE-2025-43564

ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system read. An attacker could leverage this vulnerability to access or modify sensitive data without proper authorization. Exploitation of this...

9.1CVSS6.7AI score0.15287EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2025/05/15 9:13 p.m.16 views

CVE-2025-43563

ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system read. An attacker could leverage this vulnerability to access or modify sensitive data without proper authorization. Exploitation of this...

9.8CVSS6.7AI score0.15287EPSS
SaveExploits0References3
OSV
OSV
added 2025/05/15 8:16 p.m.20 views

CVE-2025-47161

Improper access control in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00739EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
added 2025/05/15 6:9 p.m.15 views

CVE-2025-4660

A remote code execution vulnerability exists in the Windows agent component of SecureConnector due to improper access controls on a named pipe. The pipe is accessible to the Everyone group and does not restrict remote connections, allowing any network-based attacker to connect without...

9.8CVSS7.9AI score0.01104EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/05/15 12:0 a.m.7 views

eSigna 安全漏洞

eSigna is a Windows-based analytical application for investors and traders from eSigna, Inc. A security vulnerability exists in eSigna versions 1.0 through 1.5 that stems from improper access control of the component eSignaViewer, which could lead to arbitrary file access...

2CVSS6.8AI score0.00296EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/05/15 12:0 a.m.13 views

Adobe ColdFusion 2021.x < 2021u20 / 2023.x < 2023u14 / 2025.x < 2025u2 Multiple Vulnerabilities (APSB25-52)

The version of Adobe ColdFusion installed on the remote Windows host is prior to 2021.x update 20, 2023.x update 14, or 2025.x update 2. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB25-52 advisory. - ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are...

9.1CVSS6.5AI score0.55106EPSS
SaveExploits1References9
CNVD
CNVD
added 2025/05/14 12:0 a.m.44 views

Samsung PENUP Access Control Error Vulnerability

Samsung PENUP is a digital painting application from the South Korean company Samsung SAMSUNG. Samsung PENUP is vulnerable to an Access Control Error vulnerability that stems from improper access control, no details of the vulnerability are provided at this time...

6.2CVSS6.2AI score0.00141EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2025/05/13 9:16 p.m.7 views

CVE-2025-43564

ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system read. A high-privileged attacker could leverage this vulnerability to access or modify sensitive data without proper authorization...

9.1CVSS5.9AI score0.15287EPSS
SaveExploits1References2
NVD
NVD
added 2025/05/13 9:16 p.m.33 views

CVE-2025-43564

ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system read. A high-privileged attacker could leverage this vulnerability to access or modify sensitive data without proper authorization...

9.1CVSS0.15287EPSS
SaveExploits1References1
OSV
OSV
added 2025/05/13 9:16 p.m.7 views

CVE-2025-43564

ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system read. A high-privileged attacker could leverage this vulnerability to access or modify sensitive data without proper authorization...

9.1CVSS5.9AI score0.15287EPSS
SaveExploits1References1
OSV
OSV
added 2025/05/13 9:16 p.m.5 views

CVE-2025-43563

ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system read. A high-privileged attacker could leverage this vulnerability to access or modify sensitive data without proper authorization...

9.1CVSS5.9AI score0.15287EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2025/05/13 9:16 p.m.6 views

CVE-2025-43563

ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system read. A high-privileged attacker could leverage this vulnerability to access or modify sensitive data without proper authorization...

9.1CVSS5.9AI score0.15287EPSS
SaveExploits0References2
Rows per page
Query Builder