4+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.
4 results for "CWE-25"
ServiceNext contains an insecure direct object reference (IDOR) in the /api/Usuario/GetUsuarios endpoint, which accepts a user-controlled numeric ID in the request body without verifying that …
CWE-250: Execution with Unnecessary Privileges
CWE-250: Execution with Unnecessary Privileges
Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-259: Use of Hard-coded Password may allow disclosing Sensitive Information Embedded inside Device's Firmware
Free website and port scanning — find vulnerabilities before attackers do.