CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5033 matches found

RedhatCVE•added 2025/04/17 1:36 p.m.•28 views

CVE-2025-3575

Insecure Direct Object Reference vulnerability in Deporsite from T-INNOVA allows an attacker to retrieve sensitive information from others users via "idUsuario" parameter in "/helper/Familia/establecerUsuarioSeleccion" endpoint...

8.7CVSS6.5AI score0.0046EPSS

SaveExploits0References1

RedhatCVE•added 2025/04/17 1:35 p.m.•25 views

CVE-2025-3574

8.7CVSS6.5AI score0.0046EPSS

SaveExploits0References1

Exploit DB•added 2025/04/16 12:00 a.m.•124 views

ProConf 6.0 - Insecure Direct Object Reference (IDOR)

Exploit Title: ProConf 6.0 - Insecure Direct Object Reference IDOR Date: 19/07/2018 Exploit Author: S. M. Zia Ur Rashid, SC Author Contact: https://www.linkedin.com/in/ziaurrashid/ Vendor Homepage: http://proconf.org & http://myproconf.org Version:...

6.5CVSS6.4AI score0.05949EPSS

SaveExploits3

NVD•added 2025/04/15 9:15 a.m.•17 views

CVE-2025-3574

8.7CVSS0.0046EPSS

SaveExploits0References1

NVD•added 2025/04/15 9:15 a.m.•18 views

CVE-2025-3575

8.7CVSS0.0046EPSS

SaveExploits0References1

Vulnrichment•added 2025/04/15 8:54 a.m.•8 views

CVE-2025-3575 Insecure Direct Object Reference en Deporsite de T-INNOVA

8.7CVSS6.7AI score0.0046EPSS

SaveExploits0References1

Cvelist•added 2025/04/15 8:54 a.m.•40 views

CVE-2025-3575 Insecure Direct Object Reference en Deporsite de T-INNOVA

8.7CVSS0.0046EPSS

SaveExploits0References1

CVE•added 2025/04/15 8:54 a.m.•71 views

CVE-2025-3575

CVE-2025-3575 affects Deporsite from T-INNOVA. The vulnerability is an Insecure Direct Object Reference allowing an attacker to retrieve sensitive information from other users through the idUsuario parameter at /helper/Familia/establecerUsuarioSeleccion. The CVE entry notes a high impact with CVS...

8.7CVSS6.1AI score0.0046EPSS

SaveExploits0References1

Vulnrichment•added 2025/04/15 8:47 a.m.•8 views

CVE-2025-3574 Insecure Direct Object Reference on Deporsite by T-INNOVA

8.7CVSS6.7AI score0.0046EPSS

SaveExploits0References1

Cvelist•added 2025/04/15 8:47 a.m.•52 views

CVE-2025-3574 Insecure Direct Object Reference on Deporsite by T-INNOVA

8.7CVSS0.0046EPSS

SaveExploits0References1

CVE•added 2025/04/15 8:47 a.m.•62 views

CVE-2025-3574

CVE-2025-3574 —Insecure Direct Object Reference in Deporsite (T-INNOVA). An attacker can retrieve another user’s sensitive information by manipulating the idUsuario parameter of the /helper/Familia/obtenerFamiliaUsuario endpoint. Root cause: improper access control on user data access. Documented...

8.7CVSS6.1AI score0.0046EPSS

SaveExploits0References1

RedhatCVE•added 2025/04/14 7:04 a.m.•30 views

CVE-2025-3292

The User Registration & Membership – Custom Registration Form, Login Form, and User Profile plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.1.3 via the userregistrationupdateprofiledetails due to missing validation on the 'userid' use...

4.3CVSS7.2AI score0.00306EPSS

SaveExploits0References1

RedhatCVE•added 2025/04/14 7:01 a.m.•23 views

CVE-2025-3282

The User Registration & Membership – Custom Registration Form, Login Form, and User Profile plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.1.3 via the userregistrationmembershipregistermember due to missing validation on the...

5.3CVSS7.2AI score0.00278EPSS

SaveExploits0References1

RedhatCVE•added 2025/04/13 1:11 a.m.•37 views

CVE-2025-32367

The Oz Forensics face recognition application before 4.0.8 late 2023 allows PII retrieval via /statistic/list Insecure Direct Object Reference. NOTE: the number 4.0.8 was used for both the unpatched and patched versions...

8.6CVSS7AI score0.0043EPSS

SaveExploits0References1

OSV•added 2025/04/12 7:15 a.m.•5 views

CVE-2025-3282

The User Registration & Membership – Custom Registration Form, Login Form, and User Profile plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.1.3 via the userregistrationmembershipregistermember due to missing validation on the...

5.3CVSS5.8AI score0.00278EPSS

SaveExploits0References2

NVD•added 2025/04/12 7:15 a.m.•29 views

CVE-2025-3282

The User Registration & Membership – Custom Registration Form, Login Form, and User Profile plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.1.3 via the userregistrationmembershipregistermember due to missing validation on the...

5.3CVSS0.00278EPSS

SaveExploits0References2

OSV•added 2025/04/12 7:15 a.m.•12 views

CVE-2025-3292

4.3CVSS5.8AI score0.00306EPSS

SaveExploits0References3

CVE•added 2025/04/12 6:37 a.m.•90 views

CVE-2025-3282

CVE-2025-3282 affects the WordPress plugin User Registration & Membership – Custom Registration Form, Login Form, and User Profile . The flaw is an Insecure Direct Object Reference via the missing validation of the but publicly controllable key membership_id, enabling unauthenticated attackers to...

5.3CVSS5.3AI score0.00278EPSS

SaveExploits0References2Affected Software1

Cvelist•added 2025/04/12 6:37 a.m.•35 views

CVE-2025-3282 User Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.1.3 - Insecure Direct Object Reference to Unauthenticated Membership Modification

The User Registration & Membership – Custom Registration Form, Login Form, and User Profile plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.1.3 via the userregistrationmembershipregistermember due to missing validation on the...

5.3CVSS0.00278EPSS

SaveExploits0References2

Cvelist•added 2025/04/12 6:37 a.m.•28 views

CVE-2025-3292 User Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.1.3 - Insecure Direct Object Reference to Authenticated (Subscriber+) User Password Update

4.3CVSS0.00306EPSS

SaveExploits0References3

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by