7 matches found
CVE-2026-9709
The Cornerstone WordPress plugin (versions before 7.8.9 ) contains a Broken Access Control vulnerability due to a failure to enforce capability checks on specific REST API routes . This allows any authenticated user to disclose sensitive metadata of other users, which may include roles , session ...
CVE-2025-69428
The Pro-Bit enterprise management system, developed by a Slovenian company, is vulnerable in versions prior to v1.77.4 . A critical access control flaw allows unauthenticated attackers to directly access a sensitive directory and its subdirectories without authentication or authorization checks. ...
CVE-2026-4756 Out-of-bounds Write in MolotovCherry Android-ImageMagick7
Out-of-bounds Write vulnerability in MolotovCherry Android-ImageMagick7.This issue affects Android-ImageMagick7: before 7.1.2-11...
PT-2023-23261 · Snap One · Ovrc Pro
Name of the Vulnerable Software and Affected Versions: Snap One OvrC Pro versions prior to 7.2 Description: The issue concerns a locally running web server in Snap One OvrC Pro that is accessible from both the local network and remotely. Additionally, there is a hidden superuser account in OvrC...
CVE-2021-20623
Video Insight VMS versions prior to 7.8 allows a remote attacker to execute arbitrary code with the system user privilege by sending a specially crafted request...
DEBIAN-CVE-2020-27753
There are several memory leaks in the MIFF coder in /coders/miff.c due to improper image depth values, which can be triggered by a specially crafted input file. These leaks could potentially lead to an impact to application availability or cause a denial of service. It was originally reported tha...