Lucene search
K

21 matches found

EUVD
EUVD
added yesterday3 views

EUVD-2026-34257

A visibility control issue in the event template creation workflow allowed non-site-admin users to access private galaxies belonging to other organisations. The event template builder loaded all enabled galaxies without applying organisation or distribution-based access restrictions, potentially...

5.3CVSS5.8AI score
Exploits0References1
Positive Technologies
Positive Technologies
added yesterday7 views

PT-2026-46224

A visibility control issue in the event template creation workflow allowed non-site-admin users to access private galaxies belonging to other organisations. The event template builder loaded all enabled galaxies without applying organisation or distribution-based access restrictions, potentially...

5.3CVSS5.8AI score
Exploits0References2
Microsoft Secure
Microsoft Secure
added 2026/03/09 1:0 p.m.4 views

Secure agentic AI for your Frontier Transformation

Today we shared the next step to make Frontier Transformation real for customers across every industry with Wave 3 of Microsoft 365 Copilot, Microsoft Agent 365, and Microsoft 365 E7: The Frontier Suite. Introducing the First Frontier Suite built on Intelligence and Trust As our customers rapidly...

5.9AI score
Exploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2015-6228

Malware in sbrugna...

5.7CVSS6.4AI score0.0017EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-29963

Malicious code in bioql PyPI...

5.4CVSS6.4AI score0.00097EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-19108

Malicious code in bioql PyPI...

7.5CVSS6.4AI score0.00512EPSS
Exploits0References1
OSV
OSV
added 2025/03/20 10:15 a.m.0 views

CVE-2024-9612

In danswer-ai/danswer v0.3.94, administrators can set the visibility of pages within a workspace, including the search page. When the search page is set to be invisible, regular users cannot view the search page or access its functionalities from the front-end interface. However, the back-end doe...

6.5CVSS6.6AI score0.00128EPSS
Exploits1References1
Cvelist
Cvelist
added 2024/04/17 10:13 a.m.19 views

CVE-2022-41698 WordPress If Menu – Visibility control for Menus plugin <= 0.16.3 - Broken Access Control

Missing Authorization vulnerability in Layered If Menu.This issue affects If Menu: from n/a through 0.16.3...

6.5CVSS6.7AI score0.00127EPSS
Exploits0References1
The Hacker News
The Hacker News
added 2023/04/08 5:5 a.m.44 views

Expert-Led Webinar: Learn Proven Strategies to Secure Your Identity Perimeter

The stakes are high when it comes to cybersecurity. No longer are we dealing with unskilled hackers trying to break into corporate systems with brute force. Today, cybercriminals are using highly sophisticated methods like social engineering, spear phishing, and BEC to target users directly and l...

6.5AI score
Exploits0
NVD
NVD
added 2022/12/26 1:15 p.m.10 views

CVE-2021-24942

The Menu Item Visibility Control WordPress plugin through 0.5 doesn't sanitize and validate the "Visibility logic" option for WordPress menu items, which could allow highly privileged users to execute arbitrary PHP code even in a hardened environment...

7.2CVSS0.00978EPSS
Exploits2References1
Cvelist
Cvelist
added 2022/12/26 12:28 p.m.16 views

CVE-2021-24942 Menu Item Visibility Control <= 0.5 - Admin+ Arbitrary PHP Code Execution

The Menu Item Visibility Control WordPress plugin through 0.5 doesn't sanitize and validate the "Visibility logic" option for WordPress menu items, which could allow highly privileged users to execute arbitrary PHP code even in a hardened environment...

7.5AI score0.00978EPSS
Exploits2References1
CVE
CVE
added 2022/12/26 12:28 p.m.65 views

CVE-2021-24942

The CVE-2021-24942 issue affects the WordPress plugin Menu Item Visibility Control, versions 0.5 and earlier. The underlying problem is that the plugin does not sanitize and validate the Visibility logic option for WordPress menu items, which can allow highly privileged users (Admin+) to execute ...

7.2CVSS7.2AI score0.00978EPSS
Exploits2References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/12/26 12:28 p.m.7 views

CVE-2021-24942 Menu Item Visibility Control <= 0.5 - Admin+ Arbitrary PHP Code Execution

The Menu Item Visibility Control WordPress plugin through 0.5 doesn't sanitize and validate the "Visibility logic" option for WordPress menu items, which could allow highly privileged users to execute arbitrary PHP code even in a hardened environment...

7.3AI score0.00978EPSS
Exploits2References1
CNNVD
CNNVD
added 2022/12/26 12:0 a.m.3 views

WordPress plugin Menu Item Visibility Control 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A security vulnerability exists in WordPress plugin Menu...

7.2CVSS7.4AI score0.00978EPSS
Exploits2References2
wpexploit
wpexploit
added 2022/11/29 12:0 a.m.117 views

Menu Item Visibility Control <= 0.5 - Admin+ Arbitrary PHP Code Execution

The plugin doesn't sanitize and validate the "Visibility logic" option for WordPress menu items, which could allow highly privileged users to execute arbitrary PHP code even in a hardened environment. 1. As an admin, go to "Appearance - Menus" and create a menu with some items of your choice. 2. ...

7.2CVSS1.3AI score0.00978EPSS
Exploits2
NVD
NVD
added 2022/01/10 2:10 p.m.10 views

CVE-2021-42748

In Beaver Builder through 2.5.0.3, attackers can bypass the visibility controls protection mechanism via the REST API...

5.3CVSS0.00157EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/01/10 12:0 a.m.2 views

FastLine Media Beaver Builder 安全漏洞

FastLine Media Beaver Builder is a front-end layout and styling designer from FastLine Media, Inc. It provides a WYSIWYG view when developing content areas. A security vulnerability exists in FastLine Media Beaver Builder, which stems from versions from Beaver Builder to 2.5.0.3, and can be...

5.3CVSS5.8AI score0.00157EPSS
Exploits1References3
CNNVD
CNNVD
added 2021/03/02 12:0 a.m.2 views

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from the USGoogleOpen Handheld Alliance Google. A security vulnerability exists in Google Android/Pixel, which stems from a null variable PendingIntent in createEmergencyLocationUserNotification of GnssVisibilityControl.java, which may...

7.8CVSS7.4AI score0.00014EPSS
Exploits0References3
OSV
OSV
added 2020/09/17 4:15 p.m.1 views

CVE-2020-0388

In createEmergencyLocationUserNotification of GnssVisibilityControl.java, there is a possible permissions bypass due to an empty mutable PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product:...

7.8CVSS7.2AI score0.0001EPSS
Exploits0References1
Cisco
Cisco
added 2015/09/08 4:44 p.m.26 views

Cisco Application Visibility and Control FlexConnect UDP Vulnerability

A vulnerability in Cisco Application Visibility and Control AVC software for wireless networking could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition. The vulnerability is due to improper validation of UDP packets in the configuration of FlexConnect mode. A...

6.1CVSS6.4AI score0.0017EPSS
Exploits0References1
Rows per page
Query Builder