Lucene search
+L

2704 matches found

RedhatCVE
RedhatCVE
•added 2025/08/30 6:19 p.m.•17 views

CVE-2025-48348

Incorrect Privilege Assignment vulnerability in chandrashekharsahu Site Offline site-offline allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Site Offline: from n/a through = 1.5.7...

4.3CVSS5.9AI score0.00241EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/08/30 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2020-8793

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenSMTPD before 6.6.4 allows local users to read arbitrary files e.g., on some Linux distributions because of a combination of an untrusted search path in...

4.7CVSS6.1AI score0.009EPSS
SaveExploits4References2
Snyk
Snyk
•added 2025/08/28 1:33 p.m.•6 views

Use of Password Hash With Insufficient Computational Effort

Overview Affected versions of this package are vulnerable to Use of Password Hash With Insufficient Computational Effort due to the use of a simple, unsalted hash for storing user passwords and API keys. An attacker can obtain sensitive information by performing offline rainbow table attacks...

6.9CVSS6.5AI score0.00175EPSS
SaveExploits0References3
Snyk
Snyk
•added 2025/08/28 1:33 p.m.•3 views

Use of Password Hash With Insufficient Computational Effort

Overview Affected versions of this package are vulnerable to Use of Password Hash With Insufficient Computational Effort due to the use of a simple, unsalted hash for storing user passwords and API keys. An attacker can obtain sensitive information by performing offline rainbow table attacks...

6.9CVSS6.5AI score0.00175EPSS
SaveExploits0References3
Snyk
Snyk
•added 2025/08/28 1:33 p.m.•6 views

Use of Password Hash With Insufficient Computational Effort

Overview Affected versions of this package are vulnerable to Use of Password Hash With Insufficient Computational Effort due to the use of a simple, unsalted hash for storing user passwords and API keys. An attacker can obtain sensitive information by performing offline rainbow table attacks...

6.9CVSS6.5AI score0.00175EPSS
SaveExploits0References3
Snyk
Snyk
•added 2025/08/28 1:33 p.m.•3 views

Use of Password Hash With Insufficient Computational Effort

Overview Affected versions of this package are vulnerable to Use of Password Hash With Insufficient Computational Effort due to the use of a simple, unsalted hash for storing user passwords and API keys. An attacker can obtain sensitive information by performing offline rainbow table attacks...

6.9CVSS6.5AI score0.00175EPSS
SaveExploits0References3
Snyk
Snyk
•added 2025/08/28 1:33 p.m.•6 views

Use of Password Hash With Insufficient Computational Effort

Overview Affected versions of this package are vulnerable to Use of Password Hash With Insufficient Computational Effort due to the use of a simple, unsalted hash for storing user passwords and API keys. An attacker can obtain sensitive information by performing offline rainbow table attacks...

6.9CVSS6.5AI score0.00175EPSS
SaveExploits0References3
NVD
NVD
•added 2025/08/28 1:15 p.m.•15 views

CVE-2025-48348

Incorrect Privilege Assignment vulnerability in chandrashekharsahu Site Offline site-offline allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Site Offline: from n/a through = 1.5.7...

4.3CVSS0.00241EPSS
SaveExploits0References1
CVE
CVE
•added 2025/08/28 12:37 p.m.•23 views

CVE-2025-48348

CVE-2025-48348 affects WordPress Site Offline plugin (versions up to 1.5.7). The issue is an Incorrect Privilege/ Broken Access Control assignment due to misconfigured access control levels, enabling exploitation of privilege checks as described in multiple sources. CVSS v3.1: Network attack vect...

4.3CVSS5.9AI score0.00241EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/08/28 12:37 p.m.•6 views

CVE-2025-48348 WordPress Site Offline plugin <= 1.5.7 - Broken Access Control vulnerability

Incorrect Privilege Assignment vulnerability in chandrashekharsahu Site Offline site-offline allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Site Offline: from n/a through = 1.5.7...

4.3CVSS5.1AI score0.00241EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/08/28 12:00 a.m.•11 views

WordPress plugin Site Offline 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

4.3CVSS6.4AI score0.00241EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/28 12:00 a.m.•3 views

CVE-2025-48348: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in chandrashekharsahu Site Offline site-offline allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Site Offline: from n/a through = 1.5.7...

4.3CVSS5.9AI score0.00241EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/08/28 12:00 a.m.•17 views

PT-2025-35017

Name of the Vulnerable Software and Affected Versions: chandrashekharsahu Site Offline versions n/a through 1.5.7 Description: An incorrect privilege assignment exists in Site Offline, allowing exploitation of incorrectly configured access control security levels. Recommendations: Update Site...

4.3CVSS6.4AI score0.00241EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2025/08/26 11:22 p.m.•8 views

SUSE CVE-2025-53884

NeuVector stores user passwords and API keys using a simple, unsalted hash. This method is vulnerable to rainbow table attack offline attack where hashes of known passwords are precomputed...

5.3CVSS7AI score0.00175EPSS
SaveExploits0References4
OSV
OSV
•added 2025/08/26 11:15 p.m.•32 views

CVE-2025-35114

Agiloft Release 28 contains several accounts with default credentials that could allow local privilege escalation. The password hash is known for at least one of the accounts and the credentials could be cracked offline. Users should upgrade to Agiloft Release 30...

8.7CVSS5.8AI score0.00337EPSS
SaveExploits0References3
NVD
NVD
•added 2025/08/26 11:15 p.m.•17 views

CVE-2025-35114

Agiloft Release 28 contains several accounts with default credentials that could allow local privilege escalation. The password hash is known for at least one of the accounts and the credentials could be cracked offline. Users should upgrade to Agiloft Release 30...

8.7CVSS0.00337EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/08/26 10:18 p.m.•8 views

CVE-2025-35114 Agiloft local privilege escalation via default credentials

Agiloft Release 28 contains several accounts with default credentials that could allow local privilege escalation. The password hash is known for at least one of the accounts and the credentials could be cracked offline. Users should upgrade to Agiloft Release 30...

8.7CVSS6.3AI score0.00337EPSS
SaveExploits0References3
CVE
CVE
•added 2025/08/26 10:18 p.m.•48 views

CVE-2025-35114

CVE-2025-35114 affects Agiloft Release 28, where several accounts use default credentials enabling local privilege escalation. The vulnerability arises from accounts with known password hashes that could be cracked offline. Mitigation suggested in multiple sources is upgrading to Agiloft Release ...

8.7CVSS6.7AI score0.00337EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2025/08/26 12:00 a.m.•24 views

PT-2025-34815 · Agiloft · Agiloft

Name of the Vulnerable Software and Affected Versions: Agiloft versions prior to 30 Description: Agiloft Release 28 contains several accounts with default credentials that could allow local privilege escalation. The password hash is known for at least one of the accounts and the credentials could...

8.7CVSS7.3AI score0.00337EPSS
SaveExploits0References7
Patchstack
Patchstack
•added 2025/08/21 5:54 a.m.•11 views

WordPress Site Offline plugin <= 1.5.7 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Que Thanh Tuan - Blue Rock in WordPress Plugin Site Offline versions = 1.5.7...

4.3CVSS6.8AI score0.00241EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder