AEGLIX intelligence library
Search retained source observations. Historical records do not establish current threat activity; always check the original source before acting.
The AI Engine WordPress plugin before 3.7.9 does not check that the item passed to one of its media actions belongs to the requesting user before converting it to an attachment and permanently deleti…
Source: nvd_cves · Retrieved:
Source date: 2026-10-18T07:16:52.713
Explore vulnerabilityThe Modern Events Calendar Lite WordPress plugin before 7.36.4 does not verify that a user is authorized to edit the target post before updating it, allowing authenticated users with the Subscriber ro…
Source: nvd_cves · Retrieved:
Source date: 2026-10-18T07:16:52.610
Explore vulnerabilityThe Modern Events Calendar Lite WordPress plugin before 7.37.0 does not perform capability, nonce, or ownership checks before returning event booking and attendee data, allowing any authenticated user…
Source: nvd_cves · Retrieved:
Source date: 2026-10-18T07:16:52.500
Explore vulnerabilityThe Salon Booking System WordPress plugin before 10.31.11 does not restrict one of its REST API endpoints to salon staff, allowing any authenticated user, such as a subscriber, to retrieve every disc…
Source: nvd_cves · Retrieved:
Source date: 2026-10-18T07:16:52.397
Explore vulnerabilityThe Salon Booking System WordPress plugin before 10.31.11 does not validate a user-supplied image URL before fetching it server-side and writing the response to a publicly accessible location under a…
Source: nvd_cves · Retrieved:
Source date: 2026-10-18T07:16:52.287
Explore vulnerabilityThe Salon Booking System WordPress plugin before 10.31.11 does not restrict which user account its salon staff roles may edit through the customers management screen, allowing users with the Salon St…
Source: nvd_cves · Retrieved:
Source date: 2026-10-18T07:16:52.183
Explore vulnerabilityThe Salon Booking System WordPress plugin before 10.31.11 does not prevent users holding its custom salon staff role from assigning arbitrary capabilities to other accounts when editing a customer, a…
Source: nvd_cves · Retrieved:
Source date: 2026-10-18T07:16:52.077
Explore vulnerabilityThe Tasty Recipes Lite WordPress plugin before 1.2.11 does not correctly check user capabilities when creating, renaming and deleting taxonomy terms, allowing users with a role as low as Contributor …
Source: nvd_cves · Retrieved:
Source date: 2026-10-18T07:16:51.967
Explore vulnerabilityThe Otter Blocks WordPress plugin before 3.2.3 does not validate that a user-supplied return URL belongs to the site before using it to build the return destination of a Stripe Checkout session, allo…
Source: nvd_cves · Retrieved:
Source date: 2026-10-18T07:16:50.927
Explore vulnerabilityA vulnerability was found in alexpasmantier television up to 0.15.9. Affected by this issue is the function Entry::output of the file television/channels/entry.rs. Performing a manipulation of the arg…
Source: nvd_cves · Retrieved:
Source date: 2026-10-18T06:16:57.047
Explore vulnerabilityA vulnerability has been found in David-Crty Databasement up to 1.8.1. Affected by this vulnerability is an unknown functionality of the file app/Http/Requests/Api/V1/SaveScheduledRestoreRequest.php o…
Source: nvd_cves · Retrieved:
Source date: 2026-10-18T06:16:56.840
Explore vulnerabilityA flaw has been found in OpenCATS 0.10.0. Affected is the function processLogin of the file modules/careers/CareersUI.php of the component Career Portal. This manipulation of the argument applyToJobSu…
Source: nvd_cves · Retrieved:
Source date: 2026-10-18T06:16:56.380
Explore vulnerabilityA vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. This impacts the function MySQLDB::topicslist of the file exammanger.php of the…
Source: nvd_cves · Retrieved:
Source date: 2026-10-18T05:16:27.920
Explore vulnerabilityA security vulnerability has been detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. This affects the function MySQLDB::valid/MySQLDB::getresults/MySQ…
Source: nvd_cves · Retrieved:
Source date: 2026-10-18T04:16:35.433
Explore vulnerabilityA weakness has been identified in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The impacted element is an unknown function of the file qsdb/usersdb/brandb/t…
Source: nvd_cves · Retrieved:
Source date: 2026-10-18T04:16:35.227
Explore vulnerabilityA security flaw has been discovered in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The affected element is the function isAdmin of the file admin/admin.php…
Source: nvd_cves · Retrieved:
Source date: 2026-10-18T04:16:31.750
Explore vulnerabilityA vulnerability was identified in makeplane plane up to 1.4.2. Impacted is an unknown function of the component API Endpoint. Such manipulation of the argument X-Forwarded-For leads to reliance on unt…
Source: nvd_cves · Retrieved:
Source date: 2026-10-18T03:16:28.970
Explore vulnerabilityip-address before 10.7.4 allows a denial of service (CPU consumption from quadratic complexity, and application stall) via many % characters in input reaching a function call that uses the Address6 co…
Source: nvd_cves · Retrieved:
Source date: 2026-10-18T01:16:35.463
Explore vulnerabilityA vulnerability was determined in datastax pulsar-jms up to 9.0.3. This issue affects the function decode of the file pulsar-jms/src/main/java/com/datastax/oss/pulsar/jms/messages/PulsarObjectMessage.…
Source: nvd_cves · Retrieved:
Source date: 2026-10-18T01:16:34.483
Explore vulnerabilityA weakness has been identified in nemoTyrant manong up to 7c9e5228e133b9267ad3a415833bc9bb53193bb4. This impacts the function cache/del_cache/arr2sql of the file func.php. This manipulation causes sql…
Source: nvd_cves · Retrieved:
Source date: 2026-10-18T00:16:37.960
Explore vulnerability