Lucene search
+L

2874 matches found

Vulnrichment
Vulnrichment
•added 2026/02/11 9:32 p.m.•7 views

CVE-2026-26031 Frappe LMS affected by unauthorised user was able to access the full list of batch enrolled students

Frappe Learning Management System LMS is a learning system that helps users structure their content. Prior to 2.44.0, security issue was identified in Frappe Learning, where unauthorised users were able to access the full list of enrolled students by email in batches. This vulnerability is fixed ...

5.3CVSS5.9AI score0.00329EPSS
SaveExploits0References2
OSV
OSV
•added 2026/02/11 9:32 p.m.•14 views

CVE-2026-26031 Frappe LMS affected by unauthorised user was able to access the full list of batch enrolled students

Frappe Learning Management System LMS is a learning system that helps users structure their content. Prior to 2.44.0, security issue was identified in Frappe Learning, where unauthorised users were able to access the full list of enrolled students by email in batches. This vulnerability is fixed ...

5.3CVSS5.6AI score
SaveExploits0References4
CVE
CVE
•added 2026/02/11 9:32 p.m.•40 views

CVE-2026-26031

The CVE describes a privacy flaw in Frappe Learning Management System (LMS) prior to version 2.44.0, where unauthorised users could retrieve the full list of enrolled students (by email) in batches. Affected software is the Frappe LMS prior to 2.44.0; the root cause is not explicitly detailed in ...

5.3CVSS5.9AI score0.00329EPSS
SaveExploits0References2Affected Software1
Fedora
Fedora
•added 2026/02/11 1:00 a.m.•20 views

[SECURITY] Fedora 42 Update: sad-0.4.32-4.fc42

Space Age seD - Batch File Edit tool. It will show you a really nice diff of proposed changes before you commit them...

7.5CVSS6.2AI score0.00622EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
•added 2026/02/11 12:00 a.m.•12 views

The vulnerability of the `foregroundChild()` function in the Node.js software platform’s file and directory searching library, which allows a hacker to execute arbitrary code.

The vulnerability of the foregroundChild function in the Node.js software platform’s file and directory searching library is related to the improper handling of the shell parameter in .bat and .cmd files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.5CVSS7.6AI score0.0309EPSS
SaveExploits1References2Affected Software2
Fedora
Fedora
•added 2026/02/10 1:34 a.m.•22 views

[SECURITY] Fedora 43 Update: sad-0.4.32-4.fc43

Space Age seD - Batch File Edit tool. It will show you a really nice diff of proposed changes before you commit them...

7.5CVSS6.2AI score0.00622EPSS
SaveExploits1
Spring Security Advisories
Spring Security Advisories
•added 2026/02/10 12:00 a.m.•71 views

This Week in Spring - February 10th, 2026

Hi, Spring fans! Welcome to another installment of This Week in Spring! It's February 10th, 2026, as I write this from lovely London, UK. I spoke at the local Java User Group here last night, had a wonderful time. Tomorrow, I'm going home. It's been fun, but it's time to conclude this roller...

5.6AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/02/08 12:00 a.m.•38 views

PT-2026-34888

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB server component where the send done function needs to handle completions that lack the IB SEND SIGNALED flag. During smbdirect send batch processing, requests...

10CVSS7.8AI score0.00649EPSS
SaveExploits0References21
RedhatCVE
RedhatCVE
•added 2026/02/07 7:30 p.m.•17 views

CVE-2025-13818

Local privilege escalation vulnerability via insecure temporary batch file execution in ESET Management Agent...

8.3CVSS5.5AI score0.00127EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/02/07 6:32 p.m.•57 views

CVE-2026-2107 yeqifu warehouse Log Info LoginfoController.java batchDeleteLoginfo improper authorization

A vulnerability was found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the function loadAllLoginfo/deleteLoginfo/batchDeleteLoginfo of the file dataset\repos\warehouse\src\main\java\com\yeqifu\sys\controller\LoginfoController.java of the component Log Info...

6.5CVSS0.00367EPSS
SaveExploits1References6
CVE
CVE
•added 2026/02/07 6:32 p.m.•90 views

CVE-2026-2107

CVE-2026-2107 affects yeqifu warehouse (Log Info Handler). Multiple methods in LoginfoController (loadAllLoginfo, deleteLoginfo, batchDeleteLoginfo) enable improper authorization, with remote exploit capability. Public exploit exists; product uses no versioning, so affected/unaffected releases ar...

8.8CVSS5.9AI score0.00367EPSS
SaveExploits1References6Affected Software1
EUVD
EUVD
•added 2026/02/07 6:32 p.m.•23 views

EUVD-2026-5720

A vulnerability was found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the function loadAllLoginfo/deleteLoginfo/batchDeleteLoginfo of the file dataset\repos\warehouse\src\main\java\com\yeqifu\sys\controller\LoginfoController.java of the component Log Info...

6.5CVSS5.9AI score0.00367EPSS
SaveExploits1References6
attackerkb
attackerkb
•added 2026/02/07 6:32 p.m.•9 views

CVE-2026-2107

A vulnerability was found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This affects the function loadAllLoginfo/deleteLoginfo/batchDeleteLoginfo of the file dataset\repos\warehouse\src\main\java\com\yeqifu\sys\controller\LoginfoController.java of the component Log Info...

6.5CVSS5.9AI score0.00367EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2026/02/07 5:32 p.m.•8 views

CVE-2026-2106 yeqifu warehouse Notice Management NoticeController.java batchDeleteNotice improper authorization

A vulnerability has been found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. The impacted element is the function addNotice/updateNotice/deleteNotice/batchDeleteNotice of the file dataset\repos\warehouse\src\main\java\com\yeqifu\sys\controller\NoticeController.java of the...

6.5CVSS5.9AI score0.00367EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2026/02/07 5:32 p.m.•72 views

CVE-2026-2106 yeqifu warehouse Notice Management NoticeController.java batchDeleteNotice improper authorization

A vulnerability has been found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. The impacted element is the function addNotice/updateNotice/deleteNotice/batchDeleteNotice of the file dataset\repos\warehouse\src\main\java\com\yeqifu\sys\controller\NoticeController.java of the...

6.5CVSS0.00367EPSS
SaveExploits1References6
CVE
CVE
•added 2026/02/07 5:32 p.m.•62 views

CVE-2026-2106

The CVE-2026-2106 entry relates to yeqifu warehouse, affecting the Notice Management component. The exposed flaw is in NoticeController.java functions addNotice, updateNotice, deleteNotice, and batchDeleteNotice, causing improper authorization and enabling remote exploitation. Publicly disclosed ...

8.8CVSS5.9AI score0.00367EPSS
SaveExploits1References6Affected Software1
attackerkb
attackerkb
•added 2026/02/07 5:32 p.m.•9 views

CVE-2026-2106

A vulnerability has been found in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. The impacted element is the function addNotice/updateNotice/deleteNotice/batchDeleteNotice of the file dataset\repos\warehouse\src\main\java\com\yeqifu\sys\controller\NoticeController.java of the...

6.5CVSS5.9AI score0.00367EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2026/02/07 12:00 a.m.•68 views

PT-2026-6914

Name of the Vulnerable Software and Affected Versions yeqifu warehouse versions prior to aaf29962ba407d22d991781de28796ee7b4670e4 Description A flaw exists within the Notice Management component of yeqifu warehouse, specifically in the addNotice, updateNotice, deleteNotice, and batchDeleteNotice...

6.5CVSS5.3AI score0.00367EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2026/02/07 12:00 a.m.•20 views

warehouse 授权问题漏洞

Warehouse is a small-scale warehouse logistics management system developed by Yeqifu’s individual developer, based on Spring Boot. There are authorization issues in Warehouse; these issues stem from incorrect operations in the component Log Info Handler, specifically in the file...

8.8CVSS6.6AI score0.00367EPSS
SaveExploits1References7
OSV
OSV
•added 2026/02/06 2:16 p.m.•16 views

CVE-2025-13818

Local privilege escalation vulnerability via insecure temporary batch file execution in ESET Management Agent...

6.7CVSS5.9AI score0.00127EPSS
SaveExploits0References1
Rows per page
Query Builder