Lucene search
K

33 matches found

Nuclei
Nuclei
added 7 hours ago7 views

Team WordPress Plugin (TLP Team) <= 5.0.9 - SQL Injection

Team WordPress plugin = 5.0.11 contains a SQL injection caused by improper sanitization and escaping of a parameter in an AJAX action accessible to unauthenticated users, letting remote attackers execute arbitrary SQL commands. id: CVE-2025-14124 info: name: Team WordPress Plugin TLP Team = 5.0.9...

8.6CVSS6.1AI score0.07355EPSS
Exploits1References3
OSV
OSV
added 2026/05/18 2:42 p.m.1 views

OPENSUSE-RU-2026:20767-1 Recommended update for tlp

This update for tlp fixes the following issues: Introduce tlp...

5.1CVSS6AI score0.00008EPSS
Exploits0References11
RedhatCVE
RedhatCVE
added 2026/03/26 5:4 p.m.4 views

CVE-2026-25026

Missing Authorization vulnerability in RadiusTheme Team tlp-team allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Team: from n/a through = 5.0.11...

7.5CVSS5.8AI score0.00047EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/25 6:31 p.m.3 views

EUVD-2026-15623

Missing Authorization vulnerability in RadiusTheme Team tlp-team allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Team: from n/a through = 5.0.11...

5.8AI score0.00047EPSS
Exploits0References2
NVD
NVD
added 2026/03/25 5:16 p.m.2 views

CVE-2026-25026

Missing Authorization vulnerability in RadiusTheme Team tlp-team allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Team: from n/a through = 5.0.11...

7.5CVSS0.00047EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/03/25 4:14 p.m.1 views

CVE-2026-25026 WordPress Team plugin <= 5.0.11 - Broken Access Control vulnerability

Missing Authorization vulnerability in RadiusTheme Team tlp-team allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Team: from n/a through = 5.0.11...

7.5CVSS5.9AI score0.00047EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/13 11:42 a.m.2 views

CVE-2026-32396

Missing Authorization vulnerability in RadiusTheme Team tlp-team allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Team: from n/a through = 5.0.13...

5.8AI score0.00042EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/03/13 11:42 a.m.6 views

CVE-2026-32396 WordPress Team plugin <= 5.0.13 - Broken Access Control vulnerability

Missing Authorization vulnerability in RadiusTheme Team tlp-team allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Team: from n/a through = 5.0.13...

5.8AI score0.00042EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/03/13 11:42 a.m.27 views

CVE-2026-32396 WordPress Team plugin <= 5.0.13 - Broken Access Control vulnerability

Missing Authorization vulnerability in RadiusTheme Team tlp-team allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Team: from n/a through = 5.0.13...

5.3CVSS0.00042EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/03/13 12:0 a.m.1 views

PT-2026-25242

CVE-2026-32396 Missing Authorization vulnerability in RadiusTheme Team tlp-team allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Team: from… https://t.co/jov96oVCtJ...

5.3CVSS5.8AI score0.00042EPSS
Exploits0References4
OSV
OSV
added 2026/01/26 12:0 a.m.2 views

OPENSUSE-SU-2026:10098-1 tlp-1.8.0-1.1 on GA media

These are all security issues fixed in the tlp-1.8.0-1.1 package on the GA media of openSUSE Tumbleweed...

5.1CVSS5.8AI score0.00008EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/01/14 11:34 a.m.2 views

CVE-2025-67859 Polkit Authorization Check can be Bypassed in the TLP power daemon

A Improper Authentication vulnerability in TLP allows local users to arbitrarily control the power profile in use as well as the daemon’s log settings.This issue affects TLP: from 1.9 before 1.9.1...

5.1CVSS6.2AI score0.00008EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2026/01/14 11:34 a.m.5 views

CVE-2025-67859

A Improper Authentication vulnerability in TLP allows local users to arbitrarily control the power profile in use as well as the daemon’s log settings.This issue affects TLP: from 1.9 before 1.9.1...

5.1CVSS5.6AI score0.00008EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2026/01/14 11:34 a.m.3 views

CVE-2025-67859

A Improper Authentication vulnerability in TLP allows local users to arbitrarily control the power profile in use as well as the daemon’s log settings.This issue affects TLP: from 1.9 before 1.9.1...

5.1CVSS6.7AI score0.00008EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/01/14 11:34 a.m.24 views

CVE-2025-67859 Polkit Authorization Check can be Bypassed in the TLP power daemon

A Improper Authentication vulnerability in TLP allows local users to arbitrarily control the power profile in use as well as the daemon’s log settings.This issue affects TLP: from 1.9 before 1.9.1...

5.1CVSS0.00008EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/01/14 11:34 a.m.3 views

CVE-2025-67859

A Improper Authentication vulnerability in TLP allows local users to arbitrarily control the power profile in use as well as the daemon’s log settings.This issue affects TLP: from 1.9 before 1.9.1...

5.1CVSS5.5AI score0.00008EPSS
Exploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/01/08 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2025-67859

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Improper Authentication vulnerability in TLP allows local users to arbitrarily control the power profile in use as well as the daemon's log settings.This issu...

5.1CVSS5.8AI score0.00008EPSS
Exploits0References2
NVD
NVD
added 2025/12/09 7:15 p.m.2 views

CVE-2025-9612

An issue was discovered in the PCI Express PCIe Integrity and Data Encryption IDE specification, where insufficient guidance on Transaction Layer Packet TLP ordering and tag uniqueness may allow encrypted packets to be replayed or reordered without detection. This can enable local or physical...

5.1CVSS0.00011EPSS
Exploits0References3
CVE
CVE
added 2025/12/09 6:44 p.m.9 views

CVE-2025-9612

CVE-2025-9612 concerns the PCI Express (PCIe) Integrity and Data Encryption (IDE) specification. The issue is that insufficient guidance on Transaction Layer Packet (TLP) ordering and tag uniqueness may allow encrypted packets to be replayed or reordered without detection, enabling local or physi...

5.1CVSS6.1AI score0.00011EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2025/12/09 12:0 a.m.3 views

PT-2025-50217

Name of the Vulnerable Software and Affected Versions PCI Express PCIe Integrity and Data Encryption IDE specification affected versions not specified Description The PCI Express PCIe Integrity and Data Encryption IDE specification contains insufficient guidance regarding Transaction Layer Packet...

6.2AI score0.00011EPSS
Exploits0References8
Rows per page
Query Builder