Lucene search
K

464 matches found

Vulnrichment
Vulnrichment
added 2025/10/29 8:38 a.m.1 views

CVE-2025-64212 WordPress MasterStudy LMS Pro plugin < 4.7.16 - Broken Access Control vulnerability

Missing Authorization vulnerability in StylemixThemes MasterStudy LMS Pro masterstudy-lms-learning-management-system-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MasterStudy LMS Pro: from n/a through 4.7.16...

5.4CVSS6.6AI score0.00176EPSS
Exploits0References1
OSV
OSV
added 2025/10/27 9:19 p.m.5 views

CVE-2025-62779 Frappe Learning users were able to add HTML through input fields in the Job Form

Frappe Learning is a learning system that helps users structure their content. In Frappe Learning 2.39.1 and earlier, users were able to add HTML through input fields in the Job Form...

5.1CVSS6.8AI score0.0015EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/10/26 12:0 a.m.1 views

WordPress plugin Tutor LMS Pro 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

5.4CVSS6.4AI score0.00148EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/15 3:30 p.m.3 views

EUVD-2025-34621

Creativeitem Academy LMS up to and including 5.13 does not regenerate session IDs upon successful authentication, enabling session fixation attacks where attackers can hijack user sessions by predetermining session identifiers...

2.2CVSS6.3AI score0.00156EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/10/10 9:27 p.m.4 views

CVE-2025-11555

A vulnerability was detected in Campcodes Online Learning Management System 1.0. This affects an unknown part of the file /admin/calendarofevents.php. The manipulation of the argument datestart results in sql injection. The attack may be launched remotely. The exploit is now public and may be use...

9.8CVSS7AI score0.00382EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/10/09 8:32 p.m.16 views

CVE-2025-11555 Campcodes Online Learning Management System calendar_of_events.php sql injection

A vulnerability was detected in Campcodes Online Learning Management System 1.0. This affects an unknown part of the file /admin/calendarofevents.php. The manipulation of the argument datestart results in sql injection. The attack may be launched remotely. The exploit is now public and may be use...

7.5CVSS0.00382EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/10/09 12:0 a.m.3 views

CampCodes Online Learning Management System 安全漏洞

CampCodes Online Learning Management System is an online learning management system from CampCodes Philippines, Inc. A security vulnerability exists in CampCodes Online Learning Management System version 1.0, which stems from an incorrect manipulation of the parameter datestart in the file...

9.8CVSS7.8AI score0.00382EPSS
Exploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2018-18612

Malware in sbrugna...

5.4CVSS5.5AI score0.01568EPSS
Exploits4References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-7102

Malware in sbrugna...

9.8CVSS9.2AI score0.05392EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2006-4296

Malware in sbrugna...

4.3CVSS6.4AI score0.01998EPSS
Exploits0References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2007-5207

Malware in sbrugna...

4.3CVSS6.4AI score0.01066EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2008-3350

Malware in sbrugna...

7.5CVSS6.2AI score0.03327EPSS
Exploits0References9
OSV
OSV
added 2025/10/05 5:15 a.m.3 views

CVE-2025-11282

A vulnerability was found in Frappe LMS 2.34.x/2.35.0. The impacted element is an unknown function of the component Incomplete Fix CVE-2025-55006. Performing manipulation results in cross site scripting. Remote exploitation of the attack is possible. The exploit has been made public and could be...

6.1CVSS5.8AI score0.00245EPSS
Exploits0References5
NVD
NVD
added 2025/10/05 4:15 a.m.5 views

CVE-2025-11280

A flaw has been found in Frappe LMS 2.35.0. Impacted is an unknown function of the file /files/ of the component Assignment Picture Handler. This manipulation causes direct request. The attack may be initiated remotely. The attack's complexity is rated as high. The exploitability is considered...

6.3CVSS0.00435EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/10/05 3:32 a.m.4 views

CVE-2025-11280 Frappe LMS Assignment Picture files direct request

A flaw has been found in Frappe LMS 2.35.0. Impacted is an unknown function of the file /files/ of the component Assignment Picture Handler. This manipulation causes direct request. The attack may be initiated remotely. The attack's complexity is rated as high. The exploitability is considered...

6.3CVSS6.1AI score0.00435EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/10/05 12:0 a.m.4 views

PT-2025-40792

Name of the Vulnerable Software and Affected Versions Frappe LMS version 2.35.0 Description A flaw exists in Frappe LMS that allows for improper access controls. The issue is related to an unknown function within the /courses/ file of the Unpublished Course Handler component. The attack can be...

5CVSS4.9AI score0.00319EPSS
Exploits1References10
CNNVD
CNNVD
added 2025/10/05 12:0 a.m.2 views

Frappe Learning Management System 安全漏洞

Frappe Learning Management System is an easy-to-use open source learning management system from Frappe Open Source. A security vulnerability exists in Frappe Learning Management System version 2.35.0, which originates from a direct request for the file /files/ in the Assignment Picture Handler...

6.3CVSS4.8AI score0.00435EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-52696

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.00571EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-4404

Malicious code in bioql PyPI...

7.2CVSS5AI score0.00367EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2024-35108

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.00852EPSS
Exploits0References1
Rows per page
Query Builder