Lucene search
K

8 matches found

Positive Technologies
Positive Technologies
added 2025/12/24 12:0 a.m.7 views

PT-2025-53323

V-SOL GPON/EPON OLT Platform v2.03 contains a privilege escalation vulnerability that allows normal users to gain administrative access by manipulating the user role parameter. Attackers can send a crafted HTTP POST request to the user management endpoint with 'user role mod' set to integer value...

9.8CVSS7.3AI score0.00313EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2021-14149

Malware in sbrugna...

8.8CVSS8.7AI score0.00804EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.8 views

EUVD-2022-42796

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00332EPSS
Exploits1References1
CVE
CVE
added 2021/05/20 2:54 p.m.64 views

CVE-2021-25931

CVE-2021-25931 describes a CSRF vulnerability in OpenNMS Horizon (opennms-1-0-stable up to 27.1.0-1) and OpenNMS Meridian (meridian-foundation-2015.1.0-1 to 2020.1.6-1) where there is no CSRF protection for the endpoint /opennms/admin/userGroupView/users/updateUser. The flaw enables an attacker t...

8.8CVSS8.5AI score0.00726EPSS
Exploits1References3Affected Software2
Prion
Prion
added 2021/04/16 8:15 p.m.18 views

Design/Logic Flaw

A vulnerability has been identified in Mendix Applications using Mendix 7 All versions V7.23.19, Mendix Applications using Mendix 8 All versions V8.17.0, Mendix Applications using Mendix 8 V8.12 All versions V8.12.5, Mendix Applications using Mendix 8 V8.6 All versions V8.6.9, Mendix Applications...

6.5CVSS8.7AI score0.00804EPSS
Exploits0References1Affected Software1
CNVD
CNVD
added 2021/04/14 12:0 a.m.9 views

Siemens Mendix Elevation of Privilege Vulnerability

Siemens Mendix is a low-code application development platform from Siemens. The platform provides application development, testing, deployment and iteration. An elevation of privilege vulnerability exists in Siemens Mendix. An attacker could use the vulnerability to gain administrative privileges...

8.8CVSS7AI score0.00804EPSS
Exploits0References1
NVD
NVD
added 2021/04/05 7:15 p.m.10 views

CVE-2021-24158

Orbit Fox by ThemeIsle has a feature to add a registration form to both the Elementor and Beaver Builder page builders functionality. As part of the registration form, administrators can choose which role to set as the default for users upon registration. This field is hidden from view for...

6.5CVSS0.009EPSS
Exploits2References2
WPVulnDB
WPVulnDB
added 2018/02/08 12:0 a.m.18 views

Swape Theme - Authentication Bypass and Stored XSS

Similar to https://wpvulndb.com/vulnerabilities/8061, but with no authentication The theme suffers from a privilege escalation vulnerability, any user can trigger this vulnerability due to weak permissions checking. An attacker can update options, such as changing user's default role, registratio...

7.5CVSS1.2AI score0.01987EPSS
Exploits2References2Affected Software1
Rows per page
Query Builder