CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

48 matches found

ATTACKERKB•added 2026/04/17 9:39 p.m.•4 views

CVE-2026-40474

wger is a free, open-source workout and fitness manager. In versions 2.5 and below, the GymConfigUpdateView declares permissionrequired = 'config.changegymconfig' but inherits WgerFormMixin instead of WgerPermissionMixin, so the permission is never enforced at runtime. Since GymConfig is an...

7.6CVSS5.8AI score0.00333EPSS

Exploits1References4Affected Software1

RedhatCVE•added 2026/01/09 12:29 p.m.•7 views

CVE-2023-40649

In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

5.5CVSS6.3AI score0.00078EPSS

Exploits0References1

RedhatCVE•added 2026/01/09 11:18 a.m.•7 views

CVE-2021-0518

In Wi-Fi, there is a possible leak of location-sensitive data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-176541...

5.5CVSS6.1AI score0.00118EPSS

Exploits0References1

RedhatCVE•added 2026/01/07 9:48 a.m.•12 views

CVE-2022-27209

A missing permission check in Jenkins Kubernetes Continuous Deploy Plugin 2.3.1 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

6.5CVSS6.3AI score0.00887EPSS

Exploits0References1

RedhatCVE•added 2026/01/07 9:32 a.m.•10 views

CVE-2019-16574

A missing permission check in Jenkins Alauda DevOps Pipeline Plugin 2.3.2 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

6.5CVSS6.4AI score0.00852EPSS

Exploits0References1