112262 matches found
CVE-2026-104397
The Jeroen Peters Name Directory WordPress plugin (versions up to and including 1.34.2 ) is vulnerable to a Missing Authorization vulnerability. This flaw allows for the exploitation of incorrectly configured access control security levels , potentially leading to Arbitrary Shortcode Execution . ...
CVE-2026-104397 WordPress Name Directory plugin <= 1.34.2 - Arbitrary Shortcode Execution vulnerability
Missing Authorization vulnerability in Jeroen Peters Name Directory name-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Name Directory: from n/a through 1.34.2...
CVE-2026-104397 WordPress Name Directory plugin <= 1.34.2 - Arbitrary Shortcode Execution vulnerability
Missing Authorization vulnerability in Jeroen Peters Name Directory name-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Name Directory: from n/a through 1.34.2...
EUVD-2026-92312
Missing Authorization vulnerability in WP Mailster WP Mailster wp-mailster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Mailster: from n/a through 1.9.0.0...
EUVD-2026-92309
Missing Authorization vulnerability in Brandtoss WP Admin Audit wp-admin-audit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Admin Audit: from n/a through 1.2.17...
CVE-2026-0300
此存储库没有 README。...
CVE-2025-65856
Este repositorio no tiene un README...
EUVD-2026-92304
Missing Authorization vulnerability in WPFunnels Team WP VR wpvr allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP VR: from n/a through 9.1.3...
CVE-2024-12172
CVE-2024-12172 WP Courses LMS – 在线课程构建器、电子学习课程、课程解决方案、教育课程 = 3.2.21 - 缺少授权，导致经过身份验证的（订阅者+）用户可任意更新用户元数据 描述 WP Courses LMS – 在线课程构建器、电子学习课程、课程解决方案、教育课程 WordPress 插件在 3.2.21 及之前的所有版本中，由于 wpcupdateusermetaoption 函数缺少权限检查，存在未授权访问漏洞。这使经过身份验证的攻击者（具有订阅者及以上权限）能够更新任意用户的元数据，当 wpcapabilities 被设置为 0...
CVE-2026-23744
此存储库没有 README。...
CVE-2025-65857
此存储库没有 README。...
SUSE-SU-2026:4441-1 Security update for kubevirt-1.6
This update for kubevirt-1.6 fixes the following issues: - Package the persistent-reservation helper's entrypoint script bsc1276520: virt-operator runs the pr-helper container with the command /entrypoint.sh, which symlinks the multipath socket into place and then execs qemu-pr-helper. Only...
CVE-2018-6574
This repository does not have a README...
CVE-2026-68138
Este repositorio no tiene un README...
Missing Authorization
Apache HBase is vulnerable to Missing Authorization. The vulnerability is due to missing owner checks in the fetch and close steps, where the server uses the scanner ID returned by the open step to identify scanner instances but fails to verify that the ID belongs to the requesting user, allowing...
CVE-2017-5123
CVE-2017-5123 漏洞概述 Linux 内核中的 Waitid 系统调用未验证所使用的目标地址。此缺陷可允许拥有本地权限的用户写入内核内存区域，可能导致设备上的权限提升或沙箱逃逸。 漏洞描述 漏洞分类 权限提升 沙箱逃逸（Chrome） 漏洞代码 kernel/exit.c SYSCALLDEFINE5waitid, int, which, pidt, upid, struct siginfo user , infop, int, options, struct rusage user , ru struct rusage r; struct waitidinfo info =...
Craftcms-PoC-CVE-2026-31266
CVE-2026-31266 - Craft CMS 缺少授权 CVE 信息 字段| 值 ---|--- CVE ID| CVE-2026-31266 供应商| Pixel & Tonic 产品| Craft CMS 受影响版本| self::ALLOWANONYMOUSLIVE | self::ALLOWANONYMOUSOFFLINE, ; 概念验证 当 allowAdminChanges=false 时 curl -X POST "http://target/actions/app/migrate" 证据 攻击前: mysql SELECT COUNT FROM sessions;...