Lucene search
+L

320726 matches found

EUVD
EUVD
added 2026/08/21 3:32 p.m.5 views

EUVD-2026-63935

Authorization Bypass Through User-Controlled Key in the transaction save endpoint in Roskus Prospero Flow CRM 4.9.1 through 5.14.0 allows a user with transaction and accounting creation permissions to disclose another company's bank account name, bank name and card last four digits via a...

5.3CVSS5.4AI score
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/21 1:40 p.m.1 views

CVE-2026-19441

A flaw was found in Rush. This vulnerability allows an unauthenticated attacker to manipulate analytics data. By exploiting a critical function that lacks proper authentication, an attacker can falsify the origin of data. This could lead to inaccurate reporting and potentially impact business...

5.3CVSS5AI score
SaveExploits0References2
NVD
NVD
added 2026/08/21 12:16 p.m.6 views

CVE-2026-59308

In Spring AI's Semantic Cache support, the context hash used to isolate cached responses between different system prompts could allow cached responses to be shared across unrelated contexts. Affected versions: Spring AI: 2.0.0...

4.2CVSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2026/08/21 11:42 a.m.28 views

The vulnerability of the Directum HR Pro system, which exists due to insufficient verification of input data, allows a perpetrator to disclose protected information.

The vulnerability of the Directum HR Pro system exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to disclose protected information by sending a specially crafted POST request...

7.7CVSS5.7AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/08/21 11:42 a.m.37 views

The vulnerability of the Directum RX ECM system, related to deficiencies in access control, allows a perpetrator to compromise data integrity.

The vulnerability of the Directum RX ECM system is related to deficiencies in access control. Exploiting this vulnerability could allow a remote attacker to compromise data integrity...

5CVSS5.8AI score
SaveExploits0Affected Software1
NVD
NVD
added 2026/08/21 11:17 a.m.4 views

CVE-2026-77761

A parser state isolation vulnerability in misp-stix could cause data from a previously processed STIX document to be retained and incorporated into the MISP event generated from a subsequent document when the same parser instance is reused. Several STIX 1 and STIX 2 parser components maintained...

6.3CVSS
SaveExploits0References3
CVE
CVE
added 2026/08/21 10:11 a.m.8 views

CVE-2026-77761

misp-stix is a Python library for converting STIX documents to MISP events. A parser state isolation flaw allows per-document state (galaxies, galaxy clusters, passive DNS records, references, package titles, dates, and timestamps) to persist across conversions when the same parser instance is re...

6.3CVSS6.3AI score
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/21 10:11 a.m.8 views

CVE-2026-77761 Cross-Document Parser State Contamination in misp-stix

A parser state isolation vulnerability in misp-stix could cause data from a previously processed STIX document to be retained and incorporated into the MISP event generated from a subsequent document when the same parser instance is reused. Several STIX 1 and STIX 2 parser components maintained...

6.3CVSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/21 10:11 a.m.7 views

EUVD-2026-63883

A parser state isolation vulnerability in misp-stix could cause data from a previously processed STIX document to be retained and incorporated into the MISP event generated from a subsequent document when the same parser instance is reused. Several STIX 1 and STIX 2 parser components maintained...

6.3CVSS6.3AI score
SaveExploits0References3
CVE
CVE
added 2026/08/21 9:48 a.m.6 views

CVE-2026-77751

CVE-2026-77751 is a path traversal vulnerability in the misp-stix library, affecting MISP object template name handling during STIX 2 import and MISP-to-STIX 2 export . Object names from untrusted content were not sufficiently validated before being used to construct a filesystem path for loading...

8.8CVSS5.5AI score
SaveExploits0References2
EUVD
EUVD
added 2026/08/21 9:48 a.m.6 views

EUVD-2026-63877

A path traversal vulnerability existed in the handling of MISP object template names during STIX 2 import and MISP-to-STIX 2 export. MISP object names are passed to PyMISP's object-template resolution mechanism, which constructs a filesystem path by joining the configured MISP object-template...

8.8CVSS5.5AI score
SaveExploits0References2
Circl
Circl
added 2026/08/21 8:45 a.m.5 views

CVE-2026-55015

creationtimestamp| type| source ---|---|--- 2026-08-21 08:45:08+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=2027 2026-08-21 13:40:14+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mtlv5etjr726...

5.5CVSS4.7AI score
SaveExploits0References2
Circl
Circl
added 2026/08/21 8:45 a.m.6 views

CVE-2026-55013

creationtimestamp| type| source ---|---|--- 2026-08-21 08:45:06+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=2027 2026-08-21 13:40:14+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mtlv5etjr726...

7.1CVSS4.7AI score
SaveExploits0References2
EUVD
EUVD
added 2026/08/21 8:23 a.m.6 views

EUVD-2026-63834

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache CloudStack's Webhook module while listing and deleting deliveries. This issue affects Apache CloudStack: from 4.20.0.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0. Users are recommended to upgrade to versio...

5.3AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/08/21 8:19 a.m.5 views

Malicious code in boto4 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f621c5e2e8e94d1c8ae2ae176d4d882711536d25199df7a1cdddd410214faa setup.py defines a custom setuptools install command EjecutaElf that base64-decodes a 17MB embedded Linux ELF, writes it to /tmp/.systemd-helper,...

5.8AI score
SaveExploits0References3
OSV
OSV
added 2026/08/21 8:19 a.m.3 views

MAL-2026-14349 Malicious code in boto4 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f621c5e2e8e94d1c8ae2ae176d4d882711536d25199df7a1cdddd410214faa setup.py defines a custom setuptools install command EjecutaElf that base64-decodes a 17MB embedded Linux ELF, writes it to /tmp/.systemd-helper,...

6AI score
SaveExploits0References3
NVD
NVD
added 2026/08/21 8:16 a.m.4 views

CVE-2026-19441

Missing authentication for critical function vulnerability in IKAS Technology Inc. Rush allows Fake the Source of Data. This issue affects Rush: through 21082026...

5.3CVSS
SaveExploits0References1
Circl
Circl
added 2026/08/21 8:07 a.m.3 views

CVE-2026-19435

creationtimestamp| type| source ---|---|--- 2026-08-21 08:07:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gsonz3z7eagiq...

2.7CVSS4.8AI score
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/08/21 7:55 a.m.3 views

CVE-2026-19441 Unauthenticated API Allows Analytics Data Manipulation in IKAS Technology's Rush

Missing authentication for critical function vulnerability in IKAS Technology Inc. Rush allows Fake the Source of Data. This issue affects Rush: through 21082026...

5.3CVSS5.4AI score
SaveExploits0References1
CVE
CVE
added 2026/08/21 7:55 a.m.6 views

CVE-2026-19441

Missing authentication for critical function vulnerability in IKAS Technology Inc. Rush allows Fake the Source of Data. This issue affects Rush: through 21082026...

5.3CVSS5.4AI score
SaveExploits0References1
Rows per page
Query Builder