Eason

11 credited records · 2 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Credited records

Researchers

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
21Monitor	CVE-2026-11802No exploit	FoodBook Lite <= 1.5.6 - Missing Authorization to Unauthenticated User Registration via 'registration_action' AJAX Actionthemelooks · foodbook lite – online food ordering system · CWE-862 Pre-auth Broken access control (IDOR)	Medium5.3	—	0.5%	Jul 13, 2026
21Monitor	CVE-2026-12349No exploit	Premium Addons for KingComposer <= 1.1.1 - Missing Authorization to Unauthenticated Arbitrary Custom Sidebar Creation and Deletion via 'add_custom_sidebar' and octagonwebstudio · premium addons for kingcomposer · CWE-862 Pre-auth Broken access control (IDOR)	Medium5.3	—	0.4%	Jun 30, 2026
26Monitor	CVE-2024-11679No exploit	An input validation weakness was reported in the TpmSetup module for some legacy System x server products that could allow a local attacker lenovo · system x3550 m5 · CWE-125 Local privilege escalation Memory safety	Medium6.7	—	0.2%	Apr 11, 2025
26Monitor	CVE-2024-4550No exploit	A potential buffer overflow vulnerability was reported in some Lenovo ThinkSystem and ThinkStation products that could allow a local attackelenovo · p360 workstation (thinkstation) bios · CWE-121 RCE Local privilege escalation Memory safety	Medium6.7	—	0.2%	Sep 13, 2024
26Monitor	CVE-2024-3100No exploit	A potential buffer overflow vulnerability was reported in some Lenovo Notebook products that could allow a local attacker with elevated privlenovo · 100w gen 3 laptop (lenovo) bios · CWE-121 RCE Local privilege escalation Memory safety	Medium6.7	—	0.2%	Sep 13, 2024
32Monitor	CVE-2024-32860No exploit	Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component.dell · alienware area 51m r2 firmware · CWE-20 Local privilege escalation	High8.2	—	0.2%	Jun 13, 2024
32Monitor	CVE-2024-32859No exploit	Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component.dell · xps 8960 firmware · CWE-20 Local privilege escalation	High8.2	—	0.2%	Jun 13, 2024
32Monitor	CVE-2024-32858No exploit	Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component.dell · xps 8960 firmware · CWE-20 Local privilege escalation	High8.2	—	0.2%	Jun 13, 2024
24Monitor	CVE-2024-32856No exploit	Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component.dell · xps 8960 firmware · CWE-20 Local privilege escalation	Medium6.0	—	0.1%	Jun 13, 2024
17Monitor	CVE-2024-22448No exploit	Dell BIOS contains an Out-of-Bounds Write vulnerability.dell · alienware m15 r6 firmware · CWE-787 Local privilege escalation Memory safety Denial of service	Medium4.4	—	0.2%	Apr 10, 2024
26Monitor	CVE-2023-39251No exploit	Dell BIOS contains an Improper Input Validation vulnerability.dell · inspiron 7510 firmware · CWE-20 Local privilege escalation	Medium6.7	—	0.2%	Dec 22, 2023

CVE-2026-11802
21Monitor
FoodBook Lite <= 1.5.6 - Missing Authorization to Unauthenticated User Registration via 'registration_action' AJAX Action
MediumCVSS 5.3No exploitEPSS 1%
- Pre-auth
- Broken access control (IDOR)
themelooks · foodbook lite – online food ordering systemJul 13, 2026
CVE-2026-12349
21Monitor
Premium Addons for KingComposer <= 1.1.1 - Missing Authorization to Unauthenticated Arbitrary Custom Sidebar Creation and Deletion via 'add_custom_sidebar' and
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
octagonwebstudio · premium addons for kingcomposerJun 30, 2026
CVE-2024-11679
26Monitor
An input validation weakness was reported in the TpmSetup module for some legacy System x server products that could allow a local attacker
MediumCVSS 6.7No exploitEPSS 0%
- Local privilege escalation
- Memory safety
lenovo · system x3550 m5Apr 11, 2025
CVE-2024-4550
26Monitor
A potential buffer overflow vulnerability was reported in some Lenovo ThinkSystem and ThinkStation products that could allow a local attacke
MediumCVSS 6.7No exploitEPSS 0%
lenovo · p360 workstation (thinkstation) biosSep 13, 2024
CVE-2024-3100
26Monitor
A potential buffer overflow vulnerability was reported in some Lenovo Notebook products that could allow a local attacker with elevated priv
MediumCVSS 6.7No exploitEPSS 0%
lenovo · 100w gen 3 laptop (lenovo) biosSep 13, 2024
CVE-2024-32860
32Monitor
Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component.
HighCVSS 8.2No exploitEPSS 0%
- Local privilege escalation
dell · alienware area 51m r2 firmwareJun 13, 2024
CVE-2024-32859
32Monitor
Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component.
HighCVSS 8.2No exploitEPSS 0%
- Local privilege escalation
dell · xps 8960 firmwareJun 13, 2024
CVE-2024-32858
32Monitor
Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component.
HighCVSS 8.2No exploitEPSS 0%
- Local privilege escalation
dell · xps 8960 firmwareJun 13, 2024
CVE-2024-32856
24Monitor
Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component.
MediumCVSS 6.0No exploitEPSS 0%
- Local privilege escalation
dell · xps 8960 firmwareJun 13, 2024
CVE-2024-22448
17Monitor
Dell BIOS contains an Out-of-Bounds Write vulnerability.
MediumCVSS 4.4No exploitEPSS 0%
dell · alienware m15 r6 firmwareApr 10, 2024
CVE-2023-39251
26Monitor
Dell BIOS contains an Improper Input Validation vulnerability.
MediumCVSS 6.7No exploitEPSS 0%
- Local privilege escalation
dell · inspiron 7510 firmwareDec 22, 2023