Lucene search
K

7 matches found

EUVD
EUVD
added 2026/05/14 12:26 p.m.8 views

EUVD-2026-30269

Unsafe object reference IDOR in Stel Order v3.25.1 and earlier versions, specifically in the ‘/app/FrontController’ endpoint, through manipulation of the ‘employeeID’ parameter. An authenticated attacker could exploit this vulnerability to access information about any employee first names, last...

7.1CVSS5.7AI score0.00043EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/14 12:26 p.m.4 views

CVE-2026-5798

Unsafe object reference IDOR in Stel Order v3.25.1 and earlier versions, specifically in the ‘/app/FrontController’ endpoint, through manipulation of the ‘employeeID’ parameter. An authenticated attacker could exploit this vulnerability to access information about any employee first names, last...

7.1CVSS5.7AI score0.00043EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/11/08 12:0 a.m.2 views

WordPress plugin Groups 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

4.3CVSS6.5AI score0.00036EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/10/16 12:0 a.m.1 views

Sergestec Exito 安全漏洞

Sergestec Exito is a sales platform from Sergestec, Inc. A security vulnerability exists in Sergestec Exito version v8.0, which stems from incorrect manipulation of the parameter id in the file /admin/ticketa4.php, which could lead to unsafe direct object references...

7.5CVSS6.6AI score0.00046EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/05/21 12:0 a.m.1 views

TYPO3 安全漏洞

TYPO3 is a free and open source content management system framework CMS/CMF from the Swiss TYPO3 Association. A security vulnerability exists in TYPO3 version 5.0.0 and earlier, which stems from the presence of an unsafe direct object reference...

8.6CVSS6.5AI score0.00295EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/07/12 12:0 a.m.4 views

WordPress Plugin LearnDash LMS 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

8.8CVSS8.6AI score0.0006EPSS
Exploits2References3
CNNVD
CNNVD
added 2022/07/08 12:0 a.m.5 views

Known 安全漏洞

Known is a social publishing platform open-sourced by Known in the United States. A security vulnerability exists in Known v1.3.1 and below, which stems from the discovery of the inclusion of an unsafe direct object reference IDOR...

4.3CVSS5.1AI score0.00189EPSS
Exploits1References4
Rows per page
Query Builder