15025 matches found
WordPress Rehub theme <= 19.9.7 - Unauthenticated Password Protected Post Disclosure vulnerability
Unauthenticated Password Protected Post Disclosure vulnerability discovered by stealthcopter in WordPress Theme Rehub versions = 19.9.7...
AZL-73662 CVE-2025-39716 affecting package kernel 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: parisc: Revise getuser to probe user read access Because of the way read access support is implemented, read access interruptions are only triggered at privilege levels 2 and 3. The kernel executes at privilege level 0, so getuse...
UBUNTU-CVE-2025-39716
In the Linux kernel, the following vulnerability has been resolved: parisc: Revise getuser to probe user read access Because of the way read access support is implemented, read access interruptions are only triggered at privilege levels 2 and 3. The kernel executes at privilege level 0, so getuse...
CVE-2025-39715 parisc: Revise gateway LWS calls to probe user read access
In the Linux kernel, the following vulnerability has been resolved: parisc: Revise gateway LWS calls to probe user read access We use load and stbys,e instructions to trigger memory reference interruptions without writing to memory. Because of the way read access support is implemented, read acce...
CVE-2023-21483
Improper Access Control vulnerability in Galaxy Store prior to version 4.5.53.6 allows local attacker to access protected data using exported service...
ROS-20250905-02
A vulnerability in the twisted.web component of the Twisted networking framework is related to inconsistent interpretation of HTTP requests. interpretation of HTTP requests. Exploitation of the vulnerability could allow an attacker acting remotely affect the integrity of protected information as ...
Linux kernel sk_is_readable()
The vulnerability of the skisreadable function in the Linux operating system’s kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information from a remote location...
Linux net_sched Compromise Protected Information
The vulnerability of the netsched component in the Linux operating system is related to improper cleaning or release of resources. Exploiting this vulnerability allows a remote attacker to compromise the accessibility of protected information...
TrueConf Server Path Traversal Unauthorized Access
The vulnerability of the TrueConf Server software is related to errors in processing the relative path to the directory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
Improper Access Control
apachesuperset is vulnerable to Improper Access Control. The vulnerability is due to a missing authorization check in the /explore endpoint, which allows an attacker to enumerate datasourceid values and disclose sensitive metadata about protected datasources...
VulnCheck KEV: CVE-2025-29925
XWiki Platform is a generic wiki platform. Prior to 15.10.14, 16.4.6, and 16.10.0-rc-1, protected pages are listed when requesting the REST endpoints /rest/wikis/wikiName/pages even if the user doesn't have view rights on them. It's particularly true if the entire wiki is protected with "Prevent...
CVE-2023-21483
Improper Access Control vulnerability in Galaxy Store prior to version 4.5.53.6 allows local attacker to access protected data using exported service...
CVE-2023-21478
Improper input validation vulnerability in TIGERF trustlet prior to SMR Apr-2023 Release 1 allows local attackers to access protected data...
CVE-2023-21483
CVE-2023-21483 concerns Samsung Galaxy Store prior to 4.5.53.6 with an improper access control flaw that lets a local attacker access protected data via an exported service. Affected component: Galaxy Store (mobile app). Root cause: improper access control enabling data exposure without remote ex...
CVE-2023-21483
Improper Access Control vulnerability in Galaxy Store prior to version 4.5.53.6 allows local attacker to access protected data using exported service...
CVE-2023-21483
Improper Access Control vulnerability in Galaxy Store prior to version 4.5.53.6 allows local attacker to access protected data using exported service...
CVE-2023-21478
Improper input validation vulnerability in TIGERF trustlet prior to SMR Apr-2023 Release 1 allows local attackers to access protected data...
CVE-2023-21478
CVE-2023-21478 affects the TIGERF trustlet prior to SMR Apr-2023 Release 1. The vulnerability is due to improper input validation and could allow local attackers to access protected data. Affected component is the TIGERF trustlet; impact is exposure of data to a local attacker. Public exploit det...
CVE-2023-21477
The CVE-2023-21477 issue affects the TIGERF trustlet in Samsung Mobile devices, where an Access of Memory Location After End of Buffer vulnerability within the trustlet allows a local attacker to access protected data. Affected component: TIGERF trustlet; affected versions: prior to SMR Apr-2023 ...