Lucene search
K

8 matches found

Cvelist
Cvelist
added 2026/05/07 2:59 a.m.28 views

CVE-2026-41662 Admidio: Missing Minimum Administrator Check in Role Membership Removal

Admidio is an open-source user management solution. Prior to version 5.0.9, Role::stopMembership does not verify whether removing a user from the administrator role leaves zero administrators. The deprecated Membership::stopMembership contains this safety check, but the current code path bypasses...

5.2CVSS0.00011EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/05/07 2:59 a.m.3 views

CVE-2026-41662

Admidio is an open-source user management solution. Prior to version 5.0.9, Role::stopMembership does not verify whether removing a user from the administrator role leaves zero administrators. The deprecated Membership::stopMembership contains this safety check, but the current code path bypasses...

5.2CVSS5.8AI score0.00011EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2026/04/29 9:53 p.m.1 views

GHSA-C7XM-R6VJ-8VG6 Admidio Missing Minimum Administrator Check in Role Membership Removal

Summary Role::stopMembership does not verify whether removing a user from the administrator role leaves zero administrators. The deprecated Membership::stopMembership contains this safety check, but the current code path bypasses it. Any administrator can remove the last remaining other...

5.2CVSS5.7AI score0.00011EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2026/04/29 9:53 p.m.5 views

Admidio Missing Minimum Administrator Check in Role Membership Removal

Summary Role::stopMembership does not verify whether removing a user from the administrator role leaves zero administrators. The deprecated Membership::stopMembership contains this safety check, but the current code path bypasses it. Any administrator can remove the last remaining other...

5.2CVSS5.4AI score0.00011EPSS
Exploits0References4Affected Software1
NVD
NVD
added 2025/10/23 8:15 p.m.1 views

CVE-2025-55067

The TLS4B ATG system is vulnerable to improper handling of Unix time values that exceed the 2038 epoch rollover. When the system clock reaches January 19, 2038, it resets to December 13, 1901, causing authentication failures and disrupting core system functionalities such as login access, history...

7.1CVSS0.0013EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/10/23 7:39 p.m.1 views

CVE-2025-55067 Integer Overflow or Wraparound in Veeder-Root TLS4B Automatic Tank Gauge System

The TLS4B ATG system is vulnerable to improper handling of Unix time values that exceed the 2038 epoch rollover. When the system clock reaches January 19, 2038, it resets to December 13, 1901, causing authentication failures and disrupting core system functionalities such as login access, history...

7.1CVSS6.5AI score0.0013EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-27090

Malicious code in bioql PyPI...

8.8CVSS8.6AI score0.00254EPSS
Exploits0References2
NVD
NVD
added 2001/06/02 4:0 a.m.9 views

CVE-2001-0157

Debugging utility in the backdoor mode of Palm OS 3.5.2 and earlier allows attackers with physical access to a Palm device to bypass access restrictions and obtain passwords, even if the system lockout mechanism is enabled...

4.6CVSS6.2AI score0.00069EPSS
Exploits1References2
Rows per page
Query Builder