Lucene search
K

15 matches found

ATTACKERKB
ATTACKERKB
added 2026/01/22 4:52 p.m.1 views

CVE-2026-22348

Missing Authorization vulnerability in Tasos Fel Civic Cookie Control civic-cookie-control-8 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Civic Cookie Control: from n/a through = 1.53...

5.3CVSS5.2AI score0.00051EPSS
Exploits0References2
CVE
CVE
added 2026/01/22 4:52 p.m.4 views

CVE-2026-22348

CVE-2026-22348 is a Missing Authorization vulnerability affecting Civic Cookie Control plugin (civic-cookie-control-8) with affected versions

5.3CVSS5.4AI score0.00051EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/01/22 12:0 a.m.5 views

PT-2026-4206

Missing Authorization vulnerability in Tasos Fel Civic Cookie Control civic-cookie-control-8 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Civic Cookie Control: from n/a through = 1.53...

5.4AI score0.00051EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-27811

Malicious code in bioql PyPI...

8.1CVSS8AI score0.00547EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2023-1428

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There exists an vulnerability causing an abort to be called in gRPC. The following headers cause gRPC's C++ implementation to abort when called via http2: te: x...

7.5CVSS6.8AI score0.00078EPSS
Exploits0References2
CVE
CVE
added 2025/05/23 12:44 p.m.31 views

CVE-2025-31913

CVE-2025-31913 describes a Local File Inclusion in the WordPress theme Ogami (versions <= 1.53). The vulnerability stems from improper control of include/require filename handling in PHP, enabling an attacker to cause PHP local file inclusion. Affected software: Ogami WordPress Theme up to ver...

8.1CVSS7.2AI score0.00547EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 5:42 a.m.2 views

CVE-2023-0808

A vulnerability was found in Deye/Revolt/Bosswerk Inverter MW315U54061.47/MW315U54061.471. It has been rated as problematic. This issue affects some unknown processing of the component Access Point Setting Handler. The manipulation with the input 12345678 leads to use of hard-coded password. It i...

6.8CVSS3.6AI score0.00061EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/05/23 12:0 a.m.1 views

WordPress plugin Ogami 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

8.1CVSS7.8AI score0.00547EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/02/13 12:0 a.m.1 views

PT-2023-16538 · Unknown · Deye/Revolt/Bosswerk Inverter

Name of the Vulnerable Software and Affected Versions: Deye/Revolt/Bosswerk Inverter version MW3 15U 5406 1.47/MW3 15U 5406 1.471 Description: A vulnerability was found in the Access Point Setting Handler component. The manipulation with the input 12345678 leads to the use of a hard-coded passwor...

6.8CVSS4.6AI score0.00061EPSS
Exploits0References8
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2022/10/19 7:23 a.m.0 views

Stack-based buffer overflow vulnerability in Yokogawa Test & Measurement WTViewerE

Overview WTViewerE provided by Yokogawa Test & Measurement Corporation contains a stack-based buffer overflow vulnerability CWE-121. Michael Heinzl reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer. Impact Processing a long file name may cause the product to crash...

9.8CVSS7.1AI score0.00654EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2021/03/29 12:0 a.m.1 views

PT-2021-6466 · Rust +7 · Rust +7

Name of the Vulnerable Software and Affected Versions: Rust versions prior to 1.53.0 Description: The issue is related to the improper handling of extraneous zero characters at the beginning of an IP address string in the library/std/src/net/parser.rs file. This can allow attackers to bypass acce...

9.8CVSS6.6AI score0.011EPSS
Exploits7References53
Positive Technologies
Positive Technologies
added 2019/03/06 12:0 a.m.6 views

PT-2019-2299 · Jenkins · Jenkins Script Security Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Script Security Plugin versions 1.53 and earlier Description: A sandbox bypass vulnerability exists in the Jenkins Script Security Plugin that allows attackers with Overall/Read permission to execute arbitrary code on the Jenkins mast...

9.9CVSS9.7AI score0.92647EPSS
Exploits3References19
CNVD
CNVD
added 2018/05/22 12:0 a.m.1 views

BBE theme for WordPress HTML editor vulnerability

BBE theme for WordPress is a theme plugin for the WordPress platform. A security vulnerability exists in BBE theme for WordPress versions prior to 1.53. An attacker can exploit the vulnerability to launch the HTML editor directly...

5.3CVSS6.5AI score0.00207EPSS
Exploits0References1
OSV
OSV
added 2009/03/02 12:0 a.m.14 views

DSA-1731-1 ndiswrapper - arbitrary code execution vulnerability

Bulletin has no description...

8.3CVSS6.3AI score0.02987EPSS
Exploits1
Exploit DB
Exploit DB
added 2002/02/27 12:0 a.m.18 views

Rit Research Labs The Bat! 1.53 - Microsoft Denial of Service Device Name Denial of Service

source: https://www.securityfocus.com/bid/4187/info The Bat! is an e-mail client for Microsoft Windows operating systems. A problem occurs with The Bat! when it is configured to save attachments seperately from the body of a message. It is possible to include a MS-DOS device name such as CON, AUX...

7AI score
Exploits0
Rows per page
Query Builder