276957 matches found
BELL-CVE-2026-63793 CVE-2026-63793 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-63799 CVE-2026-63799 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-64171 CVE-2026-64171 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-64152 CVE-2026-64152 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-64151 CVE-2026-64151 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-64107 CVE-2026-64107 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-63935 CVE-2026-63935 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-63910 CVE-2026-63910 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-63864 CVE-2026-63864 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-53395 CVE-2026-53395 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-53396 CVE-2026-53396 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-53378 CVE-2026-53378 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-53373 CVE-2026-53373 does not affect BellSoft software
Bulletin has no description...
SawtoothSoftware Lighthouse Studio < 9.16.14 - Pre-Auth Remote Code Execution
A pre-authentication remote code execution vulnerability exists in Sawtooth Software’s Lighthouse Studio versions prior to 9.16.14. The issue arises from the unsafe use of the eval function within the Perl CGI component ciwweb.pl, where attacker-supplied input inside hidRandomACARAT is directly...
Navidrome <=0.54.5 - Authentication Bypass in Subsonic API
Navidrome is an open source web-based music collection server and streamer. Starting in version 0.52.0 and prior to version 0.54.5, in certain Subsonic API endpoints, a flaw in the authentication check process allows an attacker to specify any arbitrary username that does not exist on the system,...
NUUO NVRsolo Video Recorder 03.06.02 - Cross-Site Scripting
NUUO NVRsolo Video Recorder 03.06.02 contains a reflected cross-site scripting vulnerability via login.php. id: CVE-2022-33119 info: name: NUUO NVRsolo Video Recorder 03.06.02 - Cross-Site Scripting author: arafatansari severity: medium description: | NUUO NVRsolo Video Recorder 03.06.02 contains...
Processwire CMS <2.7.1 - Local File Inclusion
Processwire CMS prior to 2.7.1 is vulnerable to local file inclusion because it allows a remote attacker to retrieve sensitive files via the download parameter to index.php. id: CVE-2020-27467 info: name: Processwire CMS 2.7.1 - Local File Inclusion author: 0xAkoko severity: high description:...
LionWiki <3.2.12 - Local File Inclusion
LionWiki before 3.2.12 allows an unauthenticated user to read files as the web server user via crafted strings in the index.php f1 variable, aka local file inclusion. id: CVE-2020-27191 info: name: LionWiki 3.2.12 - Local File Inclusion author: 0xAkoko severity: high description: LionWiki before...
Open Automation Software OAS Platform V16.00.0121 - Missing Authentication
An improper authentication vulnerability exists in the REST API functionality of Open Automation Software OAS Platform V16.00.0121. A specially-crafted series of HTTP requests can lead to unauthenticated use of the REST API. An attacker can send a series of HTTP requests to trigger this...
PHP Jabbers Night Club Booking 1.0 - Cross Site Scripting
A vulnerability was found in PHP Jabbers Night Club Booking Software 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /index.php. The manipulation of the argument index leads to cross site scripting. The attack may be initiated remotely. The identifier...