Lucene search
+L

11833 matches found

Cvelist
Cvelist
added 2026/03/25 4:14 p.m.38 views

CVE-2026-32488 WordPress User Registration plugin <= 4.4.9 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in wpeverest User Registration user-registration allows Privilege Escalation.This issue affects User Registration: from n/a through = 4.4.9...

8.1CVSS0.00345EPSS
SaveExploits1References1
CVE
CVE
added 2026/03/25 4:14 p.m.23 views

CVE-2026-24373

CVE-2026-24373: Affected software is Metagauss RegistrationMagic Custom Registration Forms, User Registration, Payment, and User Login (RegistrationMagic custom-registration-form-builder-with-submission-manager) version

8.1CVSS5.8AI score0.00376EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/03/25 11:16 a.m.19 views

CVE-2026-23368

In the Linux kernel, the following vulnerability has been resolved: net: phy: register phy ledtriggers during probe to avoid AB-BA deadlock There is an AB-BA deadlock when both LEDSTRIGGERNETDEV and LEDTRIGGERPHY are enabled: 1362.049207 ledtriggerregister+0x5c/0x1fc...

5.5CVSS5.3AI score0.00099EPSS
SaveExploits0References34
OSV
OSV
added 2026/03/25 11:16 a.m.12 views

UBUNTU-CVE-2026-23368

In the Linux kernel, the following vulnerability has been resolved: net: phy: register phy ledtriggers during probe to avoid AB-BA deadlock There is an AB-BA deadlock when both LEDSTRIGGERNETDEV and LEDTRIGGERPHY are enabled: 1362.049207 ledtriggerregister+0x5c/0x1fc...

5.5CVSS5.7AI score0.00099EPSS
SaveExploits0References35
ATTACKERKB
ATTACKERKB
added 2026/03/25 10:27 a.m.14 views

CVE-2026-23368

In the Linux kernel, the following vulnerability has been resolved: net: phy: register phy ledtriggers during probe to avoid AB-BA deadlock There is an AB-BA deadlock when both LEDSTRIGGERNETDEV and LEDTRIGGERPHY are enabled: 1362.049207 ledtriggerregister+0x5c/0x1fc...

5.5AI score0.00099EPSS
SaveExploits0References9Affected Software1
Debian CVE
Debian CVE
added 2026/03/25 10:27 a.m.14 views

CVE-2026-23368

In the Linux kernel, the following vulnerability has been resolved: net: phy: register phy ledtriggers during probe to avoid AB-BA deadlock There is an AB-BA deadlock when both LEDSTRIGGERNETDEV and LEDTRIGGERPHY are enabled: 1362.049207 ledtriggerregister+0x5c/0x1fc...

5.5CVSS5.2AI score0.00099EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2026/03/25 5:11 a.m.3 views

CVE-2026-33253

SANUPS SOFTWARE provided by SANYO DENKI CO., LTD. registers Windows services with unquoted file paths. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege...

8.4CVSS7AI score0.00191EPSS
SaveExploits0References4Affected Software2
SUSE CVE
SUSE CVE
added 2026/03/25 12:25 a.m.12 views

SUSE CVE-2026-29193

ZITADEL is an open source identity management platform. From version 4.0.0 to 4.12.0, a vulnerability in Zitadel's login V2 UI allowed users to bypass login behavior and security policies and self-register new accounts or sign in using password even if corresponding options were disabled in their...

8.2CVSS5.8AI score0.00312EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/03/25 12:25 a.m.12 views

SUSE CVE-2026-30855

WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.3.2, an authorization bypass in tenant management endpoints of WeKnora application allows any authenticated user to read, modify, or delete any tenant by ID. Since account...

8.8CVSS5.8AI score0.00328EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2026/03/25 12:00 a.m.12 views

PT-2026-27639

SANUPS SOFTWARE provided by SANYO DENKI CO., LTD. registers Windows services with unquoted file paths. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege...

8.4CVSS7AI score0.00191EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/03/25 12:00 a.m.15 views

PT-2026-28002

Name of the Vulnerable Software and Affected Versions wpeverest User Registration versions through 4.4.9 Description An incorrect privilege assignment exists in wpeverest User Registration. This allows for privilege escalation. Recommendations Update wpeverest User Registration to a version later...

8.1CVSS5.9AI score0.00345EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2026/03/25 12:00 a.m.14 views

SUSE SLES12 Security Update : systemd (SUSE-SU-2026:0991-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:0991-1 advisory. This update for systemd fixes the following issue: - CVE-2026-4105: privilege escalation due to improper access control in RegisterMachine D-Bus method...

6.7CVSS5.9AI score0.00142EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/03/25 12:00 a.m.11 views

PT-2026-27855

Name of the Vulnerable Software and Affected Versions Metagauss RegistrationMagic versions through 6.0.7.1 Description An incorrect privilege assignment exists in Metagauss RegistrationMagic custom-registration-form-builder-with-submission-manager, allowing for privilege escalation. The issue...

8.1CVSS5.9AI score0.00376EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/03/25 12:00 a.m.15 views

WordPress plugin User Registration 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

8.1CVSS5.8AI score0.00345EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/03/25 12:00 a.m.18 views

Linux kernel 安全漏洞

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from an improper registration order of the PHY LED triggers. This vulnerability may lead to an AB-BA deadloc...

5.5CVSS5.8AI score0.00099EPSS
SaveExploits0References6
Patchstack
Patchstack
added 2026/03/24 6:28 p.m.16 views

WordPress Contest Gallery plugin <= 28.1.5 - Unauthenticated Privilege Escalation Admin Account Takeover via Registration Confirmation Email-to-ID Type Confusion vulnerability

Unauthenticated Privilege Escalation Admin Account Takeover via Registration Confirmation Email-to-ID Type Confusion vulnerability discovered by Supakiad S. m3ez - E-CQURITY Thailand in WordPress Plugin Contest Gallery versions = 28.1.5...

8.1CVSS5.8AI score0.00436EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2026/03/24 5:17 p.m.16 views

WordPress User Registration & Membership plugin <= 5.1.4 - Missing Authorization to Authenticated (Contributor+) Content Access Rule Manipulation vulnerability

Missing Authorization to Authenticated Contributor+ Content Access Rule Manipulation vulnerability discovered by darkmode in WordPress Plugin User Registration versions = 5.1.4...

5.4CVSS5.8AI score0.00182EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2026/03/24 12:30 p.m.15 views

EUVD-2019-20018

Matrimony Website Script M-Plus contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injecting SQL code through various POST parameters. Attackers can inject malicious SQL payloads into parameters like txtGender, religion, Fage, an...

8.8CVSS6.3AI score0.00334EPSS
SaveExploits0References4
NVD
NVD
added 2026/03/24 12:16 p.m.15 views

CVE-2019-25644

WinMPG Video Convert 9.3.5 and older versions contain a buffer overflow vulnerability in the registration dialog that allows local attackers to crash the application by supplying oversized input. Attackers can paste a large payload of 6000 bytes into the Name and Registration Code field to trigge...

6.9CVSS0.00231EPSS
SaveExploits1References4
CVE
CVE
added 2026/03/24 11:27 a.m.30 views

CVE-2019-25644

CVE-2019-25644 affects WinMPG Video Convert 9.3.5 and older, via a buffer overflow in the registration dialog. The flaw allows a local attacker to crash the application by supplying oversized input (the report notes a ~6000-byte payload in the Name and Registration Code fields), resulting in a de...

6.9CVSS6.1AI score0.00231EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder