Lucene search
+L

29792 matches found

osv_mini
osv_mini
•added 2026/05/13 11:47 a.m.•26 views

MINI-W763-VMFJ-RQ7W

Bulletin has no description...

7.1CVSS6.7AI score0.00217EPSS
SaveExploits1
osv_mini
osv_mini
•added 2026/05/13 11:46 a.m.•17 views

MINI-M8R5-GJH7-Q3QW

Bulletin has no description...

6.5CVSS6.8AI score0.00378EPSS
SaveExploits1
osv_mini
osv_mini
•added 2026/05/13 11:46 a.m.•21 views

MINI-CX37-2MJ6-JPRF

Bulletin has no description...

7.5CVSS8.2AI score0.00813EPSS
SaveExploits0
osv_mini
osv_mini
•added 2026/05/13 11:45 a.m.•19 views

MINI-36MX-MR33-3QW2

Bulletin has no description...

7.5CVSS8.2AI score0.00813EPSS
SaveExploits0
osv_mini
osv_mini
•added 2026/05/13 11:45 a.m.•22 views

MINI-2MMQ-FJCJ-R4FM

Bulletin has no description...

9.1CVSS6.9AI score0.00838EPSS
SaveExploits1
osv_mini
osv_mini
•added 2026/05/13 11:00 a.m.•15 views

MINI-H2M2-59Q3-4786

Bulletin has no description...

9.1CVSS6.9AI score0.00838EPSS
SaveExploits1
NVD
NVD
•added 2026/05/13 6:16 a.m.•29 views

CVE-2026-6965

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to and including 3.9.9. This is due to the getcourseidby function unconditionally trusting the user-supplied course GET parameter as the authoritative course ...

5.3CVSS0.00304EPSS
SaveExploits0References53
attackerkb
attackerkb
•added 2026/05/13 5:29 a.m.•19 views

CVE-2026-6965

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to and including 3.9.9. This is due to the getcourseidby function unconditionally trusting the user-supplied course GET parameter as the authoritative course ...

5.3CVSS5.7AI score0.00304EPSS
SaveExploits0References54
Vulnrichment
Vulnrichment
•added 2026/05/13 5:29 a.m.•26 views

CVE-2026-6965 Tutor LMS <= 3.9.9 - Insecure Direct Object Reference to Authenticated (Instructor+) Arbitrary Post Deletion via 'course' GET Parameter

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to and including 3.9.9. This is due to the getcourseidby function unconditionally trusting the user-supplied course GET parameter as the authoritative course ...

5.3CVSS5.7AI score0.00304EPSS
SaveExploits0References53
EUVD
EUVD
•added 2026/05/13 5:29 a.m.•47 views

EUVD-2026-29914

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to and including 3.9.9. This is due to the getcourseidby function unconditionally trusting the user-supplied course GET parameter as the authoritative course ...

5.3CVSS5.7AI score0.00304EPSS
SaveExploits0References53
NVD
NVD
•added 2026/05/13 5:16 a.m.•33 views

CVE-2025-14755

The Cost Calculator Builder plugin for WordPress is vulnerable to Unauthenticated Price Manipulation and Insecure Direct Object Reference IDOR in all versions up to, and including, 4.0.1 only when used in combination with Cost Calculator Builder PRO. This is due to the ccbwoocommercepayment AJAX...

5.3CVSS0.00227EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/05/13 3:35 a.m.•23 views

SUSE CVE-2026-43301

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Fix PM runtime usage count underflow Replace pmruntimeputsync with pmruntimedontuseautosuspend in the remove path to properly pair with pmruntimeuseautosuspend from probe. This allows pmruntimedisable t...

5.8AI score0.00121EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/05/13 3:34 a.m.•22 views

SUSE CVE-2026-43375

In the Linux kernel, the following vulnerability has been resolved: net: mctp: fix device leak on probe failure Driver core holds a reference to the USB interface and its parent USB device while the interface is bound to a driver and there is no need to take additional references unless the...

5.6AI score0.00121EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/05/13 3:34 a.m.•23 views

SUSE CVE-2026-43396

In the Linux kernel, the following vulnerability has been resolved: drm/xe/sync: Fix user fence leak on alloc failure When dmafencechainalloc fails, properly release the user fence reference to prevent a memory leak. cherry picked from commit a5d5634cde48a9fcd68c8504aa07f89f175074a0...

5.5CVSS5.5AI score0.00121EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/05/13 3:34 a.m.•25 views

SUSE CVE-2026-43399

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: Fix reference leak in amdgpuuserqwaitioctl Drop reference to syncobj and timeline fence when aborting the ioctl due output array being too small. cherry picked from commit 68951e9c3e6bb22396bc42ef2359751c8315dd2...

5.5CVSS5.6AI score0.00121EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/05/13 3:26 a.m.•18 views

CVE-2025-14755 Cost Calculator Builder <= 4.0.1 - Unauthenticated Price Manipulation and Insecure Direct Object Reference

The Cost Calculator Builder plugin for WordPress is vulnerable to Unauthenticated Price Manipulation and Insecure Direct Object Reference IDOR in all versions up to, and including, 4.0.1 only when used in combination with Cost Calculator Builder PRO. This is due to the ccbwoocommercepayment AJAX...

5.3CVSS5.8AI score0.00227EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/05/13 3:26 a.m.•71 views

CVE-2025-14755 Cost Calculator Builder <= 4.0.1 - Unauthenticated Price Manipulation and Insecure Direct Object Reference

The Cost Calculator Builder plugin for WordPress is vulnerable to Unauthenticated Price Manipulation and Insecure Direct Object Reference IDOR in all versions up to, and including, 4.0.1 only when used in combination with Cost Calculator Builder PRO. This is due to the ccbwoocommercepayment AJAX...

5.3CVSS0.00227EPSS
SaveExploits0References3
CVE
CVE
•added 2026/05/13 3:26 a.m.•41 views

CVE-2025-14755

The Cost Calculator Builder plugin for WordPress (

5.3CVSS5.8AI score0.00227EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/05/13 12:00 a.m.•29 views

PT-2026-52918

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/gma500/oaktrail lvds component where the LVDS initialization code fails to distinguish between I2C adapters retrieved via i2c get adapter and those allocated a...

5.5CVSS5.6AI score0.00162EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/05/13 12:00 a.m.•22 views

PT-2026-61471

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak occurs in the a6xx gpu init function within the drm/msm/adreno component. The node variable is obtained via of parse phandle, but certain early error return paths bypass...

5.5CVSS5.6AI score0.0013EPSS
SaveExploits0
Rows per page
Query Builder