Threat and Vulnerability Intelligence Database

RSS Feed

Example Searches:

CVE
Threat Actors
Countries
Vendors
Severity
Known Exploited

CVE-2023-32293
WordPress WRC Pricing Tables plugin <= 2.3.7 - Broken Access Control vulnerability
Description: Missing Authorization vulnerability in Realwebcare WRC Pricing Tables allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WRC Pricing Tables: from n/a through 2.3.7.

CVSS: MEDIUM (5.3)

EPSS Score: 0.04%

Source: CVE
December 10th, 2024 (5 months ago)

CVE-2023-32126
WordPress SALERT plugin <= 1.2.1 - Broken Access Control vulnerability
Description: Missing Authorization vulnerability in WPoperation SALERT allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SALERT: from n/a through 1.2.1.

CVSS: MEDIUM (4.3)

EPSS Score: 0.04%

Source: CVE
December 10th, 2024 (5 months ago)

CVE-2023-32117
WordPress Integrate Google Drive plugin <= 1.1.99 - Unauthenticated Broken Access Control vulnerability
Description: Missing Authorization vulnerability in SoftLab Integrate Google Drive allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Integrate Google Drive: from n/a through 1.1.99.

CVSS: CRITICAL (9.8)

EPSS Score: 0.25%

Source: CVE
December 10th, 2024 (5 months ago)

CVE-2023-32094
WordPress Extended Post Status plugin <= 1.0.19 - Broken Access Control vulnerability
Description: Missing Authorization vulnerability in Felix Welberg Extended Post Status allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Extended Post Status: from n/a through 1.0.19.

CVSS: MEDIUM (5.4)

EPSS Score: 0.04%

Source: CVE
December 10th, 2024 (5 months ago)

CVE-2023-31412
The LMS5xx uses weak hash generation methods, resulting in the creation of insecure hashs. If an attacker manages to retrieve the hash, it could...
Description: The LMS5xx uses weak hash generation methods, resulting in the creation of insecure hashs. If an attacker manages to retrieve the hash, it could lead to collision attacks and the potential retrieval of the password.

CVSS: HIGH (7.5)

EPSS Score: 0.14%

Source: CVE
December 10th, 2024 (5 months ago)

CVE-2023-31411
A remote unprivileged attacker can modify and access configuration settings on the EventCam App due to the absence of API authentication. The lack...
Description: A remote unprivileged attacker can modify and access configuration settings on the EventCam App due to the absence of API authentication. The lack of authentication in the API allows the attacker to potentially compromise the functionality of the EventCam App.

CVSS: CRITICAL (9.8)

EPSS Score: 0.22%

Source: CVE
December 10th, 2024 (5 months ago)

CVE-2023-31241
Snap One OvrC cloud servers contain a route an attacker can use to bypass requirements and claim devices outright.
Description: Snap One OvrC cloud servers contain a route an attacker can use to bypass requirements and claim devices outright.

CVSS: HIGH (8.6)

EPSS Score: 0.24%

Source: CVE
December 10th, 2024 (5 months ago)

CVE-2023-31240
Snap One OvrC Pro versions prior to 7.2 have their own locally running web server accessible both from the local network and remotely. OvrC cloud...
Description: Snap One OvrC Pro versions prior to 7.2 have their own locally running web server accessible both from the local network and remotely. OvrC cloud contains a hidden superuser account accessible through hard-coded credentials.

CVSS: HIGH (8.3)

EPSS Score: 0.26%

Source: CVE
December 10th, 2024 (5 months ago)

CVE-2023-31214
WordPress WP Quick Post Duplicator plugin <= 2.0 - Broken Access Control vulnerability
Description: Missing Authorization vulnerability in Arul Prasad J WP Quick Post Duplicator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Quick Post Duplicator: from n/a through 2.0.

CVSS: MEDIUM (5.4)

EPSS Score: 0.04%

Source: CVE
December 10th, 2024 (5 months ago)

CVE-2023-3110
Buffer overflow in S0 Decryption on Unify Gateway
Description: Description: A vulnerability in SiLabs Unify Gateway 1.3.1 and earlier allows an unauthenticated attacker within Z-Wave range to overflow a stack buffer, leading to arbitrary code execution.

CVSS: CRITICAL (9.6)

EPSS Score: 0.07%

Source: CVE
December 10th, 2024 (5 months ago)