106 matches found
CVE-2024-34810
CVE-2024-34810 is a CSRF vulnerability affecting Skyline WP
CVE-2022-42479
CVE-2022-42479 concerns a Broken Access Control in WordPress Soledad premium theme versions
CVE-2026-48165
Disclaimer: This data contains information about vulnerable...
EUVD-2025-203327
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2025-67906. Reason: This candidate is a reservation duplicate of CVE-2025-67906. Notes: All CVE users should reference CVE-2025-67906 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2025-10145
REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-7073. Reason: This candidate is a reservation duplicate of CVE-2023-7073. Notes: All CVE users should reference CVE-2023-7073 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2015-0842
The yubiserver software, in versions prior to 0.6 , is vulnerable to SQL injection issues. This flaw could potentially allow an attacker to achieve an authentication bypass . While technical exploitation details or specific patch versions are not provided in the documents, the vulnerability is as...
CVE-2014-7210
The PowerDNS software, specifically when packaged in Debian in versions prior to 3.3.1-1 , is susceptible to a configuration vulnerability. The issue originates from the pdns-backend-mysql maintainer scripts, which grant excessively wide database permissions to the pdns MySQL user. This creates a...
CVE-2021-26105
FortiSandbox exposes a stack-based buffer overflow (CWE-121) in the profile parser for versions 3.2.2 and earlier and 3.1.4 and earlier. An authenticated attacker can craft HTTP requests to potentially execute arbitrary code. The issue’s root cause is a buffer overflow in the profile parser; impa...
CVE-2022-29059
CVE-2022-29059 concerns Fortinet FortiWeb SQL Injection. Connected data confirms an improper neutralization of special elements used in SQL commands (CWE-89) that could allow a privileged attacker to execute SQL commands on the log database. Affected product versions include FortiWeb 7.0.1 and be...
CVE-2018-9384
CVE-2018-9384 identifies a vulnerability in the Kernel component of Google Pixel and Nexus devices. The flaw allows an attacker with System execution privileges to bypass KASLR (Kernel Address Space Layout Randomization) due to an unusual root cause, potentially leading to local information discl...
CVE-2023-27539
There is a denial of service vulnerability in the header parsing component of Rack...
CVE-2023-28120
There is a vulnerability in ActiveSupport if the new bytesplice method is called on a SafeBuffer with untrusted user input...
CVE-2022-43476
CVE-2022-43476 relates to the WordPress plugin Subscribe to Category (affected versions:
CVE-2023-47557
CVE-2023-47557 refers to a Missing Authorization vulnerability in the WordPress plugin Visitors Traffic Real Time Statistics (versions
CVE-2023-47183
CVE-2023-47183 refers to a Missing Authorization (Broken Access Control) vulnerability in GiveWP for WordPress. The issue affects GiveWP versions
CVE-2023-45002
CVE-2023-45002 concerns the WordPress plugin WP User Frontend (weDevs) with Missing Authorization via AJAX actions up to version 3.6.8. The issue originates from Inadequate access control (Broken Access Control) that can be exploited by users with low privileges to bypass configured security leve...
CVE-2023-48775
CVE-2023-48775 affects the WordPress WP Cleanfix plugin, specifically versions through 5.6.2. The root cause is a Missing Authorization / Broken Access Control vulnerability in the plugin’s access checks, enabling exploitation due to incorrectly configured security levels. The CVSSv3.1 base score...
CVE-2022-32203
CVE-2022-32203 describes a command-injection vulnerability in Huawei terminal printer products. The issue allows high-privilege code execution on the printer after exploitation over the network (CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, base 9.8). The root cause is described as insufficient...
CVE-2021-39081
IBM Cognos Analytics Mobile for Android 1.1.14 is affected by CVE-2021-39081, due to weaker cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. The issue impact is limited to the Android app and could affect confidentiality (C: High) with no integrity/av...