107,314 results · Clear filters · Feed
-
Medium 6.5
WP Comment Cleaner 6.1 - 7.1 - Subscriber+ Bulk Comment Deletion via nav_delete_all_comment
The WP Comment Cleaner WordPress plugin before 7.2 does not perform a capability check or validate a nonce on one of its bulk comment-deletion routines, allowing authenticated users with minimal permissions, such as subscribers, to permanently delete all comm…
-
Medium 6.5
SQL injection in Night Shift bulk license plate search allows cross-organization data access
SQL injection in the bulk license plate search of the Flock Night Shift hosted service allowed an authenticated user to read other customer organizations' data, including license plate recognition records, via a crafted license plate value. Data could not be …
-
Medium 6.3
y_project RuoYi Disable API add changeStatus session expiration
A security vulnerability has been detected in y_project RuoYi up to 4.8.3. This impacts the function changeStatus of the file /system/config/add of the component Disable API. The manipulation leads to session expiration. It is possible to initiate the attack …
-
Medium 5.4
Foreman: domain and subnet interface api skips host search filters
An **incorrect authorization** flaw has been found in **network interface handling** in the **Foreman** package. The domain and subnet interface API checks only that the caller holds a host permission. It does not apply the search limit on that permission, so…
-
Medium 6.5
Foreman: api filter lookup ignores a search-limited filter permission
A flaw has been found in **permission filters** in the **foreman** package. The API loads a filter by its identifier and does not apply the search limit on the caller's permission. A low-privileged network attacker or user must already be allowed to delete fi…
-
Medium 6.9
Insufficient verification of data authenticity in Smart Switch prior to version 3.7.73 allows physical attackers to ins…
-
Medium 5.1
Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch priv…
-
Medium 6.8
Improper authorization in Smart Switch prior to version 3.7.73 allows physical attackers to invoke application restore …
-
Medium 5.9
Improper access control in Samsung Internet prior to version 30.0.5.6 allows local attackers to access sensitive inform…
-
Medium 6.1
Improper authentication in Samsung Flow prior to version 4.9.22.4 allows adjacent attackers to access sensitive informa…
-
Medium 5.1
Path traversal in Samsung Flow prior to version 4.9.22.1 allows local attackers to access clipboard data.
-
Medium 6.0
Improper input validation in Samsung Internet prior to version 30.0.5.24 allows remote attackers to inject arbitrary sc…
-
Medium 5.1
Improper input validation in CreditCardRetrieveActivity of Samsung Checkout prior to version 5.1.03.1 allows local atta…
-
Medium 5.1
Improper input validation in GuestCreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local…
-
Medium 5.1
Improper input validation in CreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local atta…
-
Medium 6.9
Improper export of android application components in Samsung Account prior to version 15.7.01.1 allows local attackers …
-
Medium 6.9
Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 a…
-
Medium 6.7
Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with ro…
-
Medium 6.9
Improper handling of insufficient permission in CmcCore prior to SMR Oct-2026 Release 1 allows local attackers to use t…
-
Medium 4.8
Out-of-bounds read and write in lib_sag_ai_sound_sep_v2.00.so prior to SMR Oct-2026 Release 1 allows local attackers to…
-
Medium 6.9
Improper access control in DownloadProvider prior to SMR Oct-2026 Release 1 allows local attackers to access files in s…
-
Medium 5.1
Improper access control in CocktailBarService prior to SMR Oct-2026 Release 1 allows local attackers to access sensitiv…
-
Medium 5.1
Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bound…
-
Medium 5.1
Out-of-bounds write in libcodec2-sec-flacdec.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-…
-
Medium 6.3
prasathmani TinyFileManager tinyfilemanager.php move_uploaded_file unrestricted upload
A security flaw has been discovered in prasathmani TinyFileManager up to 2.6. The impacted element is the function move_uploaded_file of the file tinyfilemanager.php. Performing a manipulation of the argument fullpath results in unrestricted upload. The attac…
-
Medium 4.3
yangzongzhuan RuoYi cross-site request forgery
A vulnerability was identified in yangzongzhuan RuoYi 4.8.3. The affected element is an unknown function. Such manipulation leads to cross-site request forgery. The attack can be executed remotely. The vendor was contacted early about this disclosure but did …
-
Medium 4.3
ZKTeco BioTime Employee REST API employees authorization
A vulnerability has been found in ZKTeco BioTime 9.5.6 Build 20260130.3206. This vulnerability affects unknown code of the file /personnel/api/employees/ of the component Employee REST API. The manipulation leads to authorization bypass. The attack may be ini…
-
Medium 4.3
ZKTeco BioTime Biometric Data Endpoint finger_data authorization
A flaw has been found in ZKTeco BioTime 9.5.6 Build 20260130.3206. This affects an unknown part of the file /iclock/finger_data/ of the component Biometric Data Endpoint. Executing a manipulation of the argument emp_code can lead to authorization bypass. The …
-
Medium 4.3
ZKTeco BioTime System Settings API systemSettings access control
A vulnerability was detected in ZKTeco BioTime 9.5.6 Build 20260130.3206. Affected by this issue is some unknown functionality of the file /base/api/systemSettings of the component System Settings API. Performing a manipulation results in improper access cont…
-
Medium 6.3
ZKTeco BioTime Database Migration Functionality db_migrate_setting sql injection
A security vulnerability has been detected in ZKTeco BioTime 9.5.6 Build 20260130.3206. Affected by this vulnerability is an unknown functionality of the file /base/api/v1.0/systemSettings/db_migrate_setting/ of the component Database Migration Functionality.…
-
Medium 6.2
Plaintext Database Password Exposure in GV-E-Map Server V18.2.0A
GV-E-Map Server V18.2.0A contains a plaintext database password embedded within an application component. The credential can be recovered through static analysis of the distributed binary and may also be exposed in process memory during runtime.
-
Medium 4.3
westboy CicadasCMS Template Management input TemplateController.input path traversal
A weakness has been identified in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. Affected is the function TemplateController.input of the file /system/cms/template/input of the component Template Management. This manipulation of the argume…
-
Medium 4.7
westboy CicadasCMS Backend Template Editor save TemplateController.save path traversal
A security flaw has been discovered in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. This impacts the function TemplateController.save of the file /system/cms/template/save of the component Backend Template Editor. The manipulation result…
-
Medium 5.5
deepseek-ai deepseek-harness dsh-workflow-worker-thread agent behavioral workflow
A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.1-rc.2. This affects the function agent of the component dsh-workflow-worker-thread. The manipulation leads to enforcement of behavioral workflow. The attack is possible to be carried ou…
-
Medium 5.3
deepseek-ai deepseek-harness Sandbox spawn sandbox
A vulnerability was determined in deepseek-ai deepseek-harness up to 0.1.1-rc.2. The impacted element is the function spawn of the component Sandbox. Executing a manipulation of the argument Profile can lead to sandbox issue. It is possible to launch the atta…
-
Medium 6.3
houtini-ai voice-analyser-mcp collect_corpus crawler.ts fetch server-side request forgery
A vulnerability was found in houtini-ai voice-analyser-mcp up to 2.1.1. The affected element is the function fetch of the file src/utils/crawler.ts of the component collect_corpus. Performing a manipulation of the argument sitemap_url results in server-side r…
-
Medium 6.3
houtini-ai seo-crawler-mcp Crawler CrawlOrchestrator.ts run_seo_audit server-side request forgery
A vulnerability has been found in houtini-ai seo-crawler-mcp up to 2.1.5. Impacted is the function run_seo_audit of the file src/core/CrawlOrchestrator.ts of the component Crawler. Such manipulation leads to server-side request forgery. The attack may be laun…
-
Medium 5.5
Information Disclosure in Modem
In modem, there is a possible information disclosure due to missing filtering of sensitive data in crash dumps. This could lead to local information disclosure with no additional execution privileges needed.
-
Medium 5.5
Improper Input Validation in Kernel APsys DVFS
In the kernel apsys DVFS driver, there is a possible out-of-bounds read or hardware register corruption due to improper input validation of the frequency index. This could lead to system instability or denial of service with local privileges.
-
Medium 6.3
macrozheng mall JwtAuthenticationTokenFilter refreshToken JwtTokenUtil.refreshHeadToken session expiration
A flaw has been found in macrozheng mall up to 1.0.3. This issue affects the function JwtTokenUtil.refreshHeadToken of the file /admin/refreshToken of the component JwtAuthenticationTokenFilter. This manipulation of the argument token causes session expiratio…