Lucene search
+L

1283 matches found

osv_cve
osv_cve
•added 2025/10/22 5:15 p.m.•22 views

CVE-2025-22169

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to subscribe to an item/object without having the expected permission level...

5.4CVSS5.6AI score0.00175EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/22 4:30 p.m.•37 views

CVE-2025-22169

CVE-2025-22169 affects Atlassian Jira Align. Multiple connected sources describe an authorization flaw where a low-privilege user can access endpoints that disclose limited sensitive information, including subscribing to an item/object without the expected permissions. This once again confirms an...

5.4CVSS5.3AI score0.00175EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/10/22 4:30 p.m.•12 views

CVE-2025-22169

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to subscribe to an item/object without having the expected permission level...

5.3CVSS5.3AI score0.00175EPSS
SaveExploits0References1
NVD
NVD
•added 2025/10/22 3:15 p.m.•39 views

CVE-2025-60224

Deserialization of Untrusted Data vulnerability in wpshuffle Subscribe to Download subscribe-to-download allows Object Injection.This issue affects Subscribe to Download: from n/a through = 2.0.9...

9.8CVSS0.00581EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/22 2:32 p.m.•20 views

EUVD-2025-35405

Deserialization of Untrusted Data vulnerability in wpshuffle Subscribe to Download subscribe-to-download allows Object Injection.This issue affects Subscribe to Download: from n/a through = 2.0.9...

6.5CVSS5.8AI score0.00581EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/10/22 2:32 p.m.•25 views

CVE-2025-60224 WordPress Subscribe to Download plugin <= 2.0.9 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in wpshuffle Subscribe to Download subscribe-to-download allows Object Injection.This issue affects Subscribe to Download: from n/a through = 2.0.9...

9.8CVSS0.00581EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/22 2:32 p.m.•13 views

CVE-2025-60224 WordPress Subscribe to Download plugin <= 2.0.9 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in wpshuffle Subscribe to Download subscribe-to-download allows Object Injection.This issue affects Subscribe to Download: from n/a through = 2.0.9...

9.8CVSS5.8AI score0.00581EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/22 2:32 p.m.•33 views

CVE-2025-60224

CVE-2025-60224 affects the WordPress Subscribe to Download plugin (versions

9.8CVSS5.8AI score0.00581EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/22 12:00 a.m.•6 views

CVE-2025-22169: Improper Authorization

Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to subscribe to an item/object without having the expected permission level...

5.4CVSS5.3AI score0.00175EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/22 12:00 a.m.•8 views

CVE-2025-49912: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nks Email Subscription Popup email-subscribe allows Stored XSS.This issue affects Email Subscription Popup: from n/a through = 1.2.26...

5.9CVSS5.8AI score0.00287EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/10/22 12:00 a.m.•16 views

WordPress plugin Subscribe to Download security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, with the ability to host personal blog sites on PHP and MySQL based servers.WordPress...

9.8CVSS5.9AI score0.00581EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/22 12:00 a.m.•5 views

CVE-2025-60224: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in wpshuffle Subscribe to Download subscribe-to-download allows Object Injection.This issue affects Subscribe to Download: from n/a through = 2.0.9...

9.8CVSS5.8AI score0.00581EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2021-23420

Malware in sbrugna...

4.8CVSS5.4AI score0.00565EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2006-1003

Malware in sbrugna...

5.4CVSS4.7AI score0.0064EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•25 views

EUVD-2021-24804

Malware in sbrugna...

6.1CVSS6.3AI score0.00895EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2011-3972

Malware in sbrugna...

5.4CVSS5.8AI score0.01114EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•24 views

EUVD-2019-0481

Malware in sbrugna...

7.5CVSS7.3AI score0.01777EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2013-1035

Malware in sbrugna...

6.1CVSS5.7AI score0.00571EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2001-0086

Malware in sbrugna...

5CVSS6.4AI score0.01606EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2020-17728

Malware in sbrugna...

6.1CVSS6.3AI score0.00977EPSS
SaveExploits1References3
Rows per page
Query Builder