Lucene search
K

13 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 9:12 a.m.9 views

CVE-2022-0170

peertube is vulnerable to Improper Access Control...

5.3CVSS6.8AI score0.00684EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2018-13052

Malware in sbrugna...

4.3CVSS5.4AI score0.00658EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2019-4578

Malware in sbrugna...

5.3CVSS5.3AI score0.01107EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/07/01 12:0 a.m.2 views

PT-2025-27575 · Elementor · The Plus Addons For Elementor

Name of the Vulnerable Software and Affected Versions: The Plus Addons for Elementor Pro versions prior to 6.3.7 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions...

5.4CVSS6.4AI score0.00251EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/06/20 3:4 p.m.14 views

CVE-2025-49980 WordPress WP User Profile Avatar plugin <= 1.0.6 - Broken Access Control Vulnerability

Missing Authorization vulnerability in WP Event Manager WP User Profile Avatar wp-user-profile-avatar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Profile Avatar: from n/a through = 1.0.6...

4.3CVSS0.00236EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 1:45 a.m.8 views

CVE-2023-38514

Missing Authorization vulnerability in social share pro Social Share Icons & Social Share Buttons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Social Share Icons & Social Share Buttons: from n/a through 3.5.7...

4.3CVSS6.3AI score0.00283EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:26 p.m.6 views

CVE-2022-2243

An access control vulnerability in GitLab EE/CE affecting all versions from 14.8 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, allows authenticated users to enumerate issues in non-linked sentry projects...

5CVSS6.2AI score0.00632EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 8:58 a.m.5 views

CVE-2019-9732

An issue was discovered in GitLab Community and Enterprise Edition 10.x starting from 10.8 and 11.x before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Incorrect Access Control...

9.8CVSS6.5AI score0.01692EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:43 a.m.7 views

CVE-2019-9218

An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Incorrect Access Control issue 1 of 5...

9.8CVSS6.6AI score0.01643EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/16 12:44 p.m.9 views

CVE-2025-39545 WordPress WordPress REST API Authentication <= 3.6.3 - Settings Change Vulnerability

Missing Authorization vulnerability in miniOrange WordPress REST API Authentication allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WordPress REST API Authentication: from n/a through 3.6.3...

5.4CVSS7.2AI score0.00431EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/04/05 2:38 p.m.10 views

CVE-2025-30915

Missing Authorization vulnerability in enituretechnology Small Package Quotes – Worldwide Express Edition small-package-quotes-wwe-edition allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Small Package Quotes – Worldwide Express Edition: from n/a through ...

6.5CVSS7.2AI score0.00311EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/02/24 2:48 p.m.18 views

CVE-2025-27294 WordPress WP-Asambleas plugin <= 2.85.0 - Arbitrary Shortcode Execution vulnerability

Missing Authorization vulnerability in platcom WP-Asambleas wp-asambleas allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP-Asambleas: from n/a through = 2.85.0...

4.8CVSS0.00244EPSS
Exploits0References1
CVE
CVE
added 2024/12/09 12:0 a.m.81 views

CVE-2024-46547

CVE-2024-46547 affects Wampserver (Romain Bourdon) versions 3.2.3 and 3.2.6. The issue arises from improper access-control validation on the PHP Info Page, allowing unauthorized users to access sensitive information. The documented impact is data leakage. No remediation details are provided in th...

7.5CVSS6.7AI score0.00366EPSS
Exploits0References1
Rows per page
Query Builder