Lucene search
+L

8657 matches found

RedhatCVE
RedhatCVE
•added 2025/02/20 12:22 a.m.•16 views

CVE-2025-25055

Authentication bypass by spoofing issue exists in FileMegane versions above 1.0.0.0 prior to 3.4.0.0, which may lead to user impersonation. If exploited, restricted file contents may be accessed...

5.3CVSS6.8AI score0.0036EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/02/20 12:00 a.m.•17 views

The vulnerability of the Xerox Workplace Suite print server, related to incorrect path name restrictions for restricted access directories, allows attackers to gain read, modify, or delete access to data.

The vulnerability of the Xerox Workplace Suite print management server is related to an incorrect restriction on the path to the restricted catalog. Exploiting this vulnerability can allow a malicious actor to gain read, modify, or delete access to data...

6.5CVSS5.5AI score0.00424EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2025/02/19 4:15 p.m.•12 views

CVE-2024-45081

IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 could allow an authenticated user to modify restricted content due to incorrect authorization checks...

6.5CVSS5.8AI score0.00272EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/02/19 3:37 p.m.•22 views

CVE-2024-45081 IBM Cognos Controller incorrect authorization

IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 could allow an authenticated user to modify restricted content due to incorrect authorization checks...

6.5CVSS0.00272EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/02/19 3:37 p.m.•13 views

CVE-2024-45081 IBM Cognos Controller incorrect authorization

IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 could allow an authenticated user to modify restricted content due to incorrect authorization checks...

6.5CVSS6.8AI score0.00272EPSS
SaveExploits0References1
NVD
NVD
•added 2025/02/19 8:15 a.m.•30 views

CVE-2024-13854

The Education Addon for Elementor plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.3.1 via the naeduelementortemplate shortcode due to missing validation on a user controlled key. This makes it possible for authenticated attackers, wit...

4.3CVSS0.00346EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/02/19 12:00 a.m.•12 views

IBM Cognos Controller 安全漏洞

IBM Cognos Controller is a suite of business intelligence and planning solutions from International Business Machines IBM. The product features process automation, financial audit control, and the creation and management of financial reports. A security vulnerability exists in IBM Cognos Controll...

6.5CVSS6.2AI score0.00272EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/02/19 12:00 a.m.•25 views

The vulnerability in the function PLT_FileMediaServerDelegate::ExtractResourcePath() of the file PltHttpServer.cpp in the software development library Platinum UPnP SDK allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the PLTFileMediaServerDelegate::ExtractResourcePath function in the pltHttpServer.cpp file of the software development library, Platinum UPnP SDK, is related to an incorrect limitation on the path name for directories with restricted access. Exploiting this vulnerability coul...

7.8CVSS6.2AI score0.01711EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/19 12:00 a.m.•1 views

CVE-2024-45081: Incorrect Authorization

IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 could allow an authenticated user to modify restricted content due to incorrect authorization checks...

6.5CVSS5.8AI score0.00272EPSS
SaveExploits0References1
CVE
CVE
•added 2025/02/18 7:54 p.m.•88 views

CVE-2025-22663

CVE-2025-22663 affects WordPress Paid Videochat Turnkey Site plugin

8.6CVSS7.2AI score0.00553EPSS
SaveExploits0References1
NVD
NVD
•added 2025/02/18 6:15 p.m.•21 views

CVE-2024-49589

Foundry Artifacts was found to be vulnerable to a Denial Of Service attack due to disk being potentially filled up based on an user supplied argument size...

6.5CVSS0.00511EPSS
SaveExploits0References1
CVE
CVE
•added 2025/02/18 5:18 p.m.•69 views

CVE-2024-49589

Foundry Artifacts is affected by a Denial of Service via disk exhaustion caused by a user-supplied size argument. The PT-2025-6701 entry notes the affected versions are not specified and provides no fix information; no exploit details are described in the provided documents. Monitor for updates.

6.5CVSS6.4AI score0.00511EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/02/18 5:18 p.m.•27 views

CVE-2024-49589 Foundry artifacts denial of service

Foundry Artifacts was found to be vulnerable to a Denial Of Service attack due to disk being potentially filled up based on an user supplied argument size...

6.5CVSS6.4AI score0.00511EPSS
SaveExploits0References1
NVD
NVD
•added 2025/02/18 12:15 a.m.•16 views

CVE-2025-25055

Authentication bypass by spoofing issue exists in FileMegane versions above 1.0.0.0 prior to 3.4.0.0, which may lead to user impersonation. If exploited, restricted file contents may be accessed...

5.3CVSS0.0036EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/02/18 12:00 a.m.•11 views

JIP InfoBridge FileMegane 安全漏洞

JIP InfoBridge FileMegane is an application from JIP InfoBridge Japan. A security vulnerability exists in JIP InfoBridge FileMegane versions prior to 1.0.0.0 through 3.4.0.0, which stems from an authentication bypass issue that could allow a user to impersonate and access restricted files...

5.3CVSS5.6AI score0.0036EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/18 12:00 a.m.•0 views

CVE-2025-25055: Authentication Bypass by Spoofing

Authentication bypass by spoofing issue exists in FileMegane versions above 1.0.0.0 prior to 3.4.0.0, which may lead to user impersonation. If exploited, restricted file contents may be accessed...

5.3CVSS5.7AI score0.0036EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/18 12:00 a.m.•2 views

CVE-2025-22663: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in videowhisper Paid Videochat Turnkey Site ppv-live-webcams allows Path Traversal.This issue affects Paid Videochat Turnkey Site: from n/a through = 7.2.12...

8.6CVSS5.8AI score0.00553EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/02/18 12:00 a.m.•13 views

PT-2025-6958 · Unknown · Videowhisper Paid Videochat Turnkey Site

Name of the Vulnerable Software and Affected Versions: videowhisper Paid Videochat Turnkey Site versions 7.2.12 and earlier Description: The issue is related to an improper limitation of a pathname to a restricted directory, also known as 'Path Traversal'. This problem allows unauthorized access ...

8.6CVSS9.3AI score0.00553EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2025/02/17 11:56 p.m.•13 views

CVE-2025-25055

Authentication bypass by spoofing issue exists in FileMegane versions above 1.0.0.0 prior to 3.4.0.0, which may lead to user impersonation. If exploited, restricted file contents may be accessed...

5.3CVSS6.8AI score0.0036EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/02/17 11:56 p.m.•25 views

CVE-2025-25055

Authentication bypass by spoofing issue exists in FileMegane versions above 1.0.0.0 prior to 3.4.0.0, which may lead to user impersonation. If exploited, restricted file contents may be accessed...

5.3CVSS0.0036EPSS
SaveExploits0References2
Rows per page
Query Builder