Lucene search
+L

28491 matches found

Cvelist
Cvelist
added 2026/08/21 6:00 a.m.45 views

CVE-2026-16959 Media Library Assistant < 3.40 - Author+ SQL Injection via mla_search_connector

The Media Library Assistant WordPress plugin before 3.40 does not validate a search parameter before concatenating it into a SQL query in one of its media-library query handlers, allowing users with the Author role to perform SQL injection...

0.00231EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/08/21 12:00 a.m.26 views

PT-2026-79445

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, there is a Reflected Cross-Site Scripting XSS vulnerability in the testing OQL query functionality. This issue has been fixed in version 3.2.3...

8CVSS5.2AI score0.00234EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2026/08/21 12:00 a.m.38 views

The vulnerability of the Metabase data visualization and reporting software lies in the lack of security measures for query structures, allowing attackers to enhance their privileges and execute arbitrary code.

The vulnerability of the Metabase data visualization and reporting software relates to the lack of measures taken to protect the SQL query structure during the processing of the resetpassword parameter. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute...

10CVSS6.5AI score0.94217EPSS
SaveExploits8References7Affected Software1
Positive Technologies
Positive Technologies
added 2026/08/21 12:00 a.m.25 views

PT-2026-79440

In the Neptune connector, a user with access to Neptune through Athena Federated Query could gain access to properties in the Lambda supplying the compute for the connector. To remediate this issue, users should upgrade to aws-athena-query-federation v2026.30.1 or later...

9.9CVSS5.3AI score0.00347EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/08/21 12:00 a.m.20 views

PT-2026-79434

Joomla Extension - j2commerce.com - Order content disclosure J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 - An unauthenticated visitor could supply any order id as a query parameter to render the full checkout confirmation page for that order, including line items, prices, and totals...

8.7CVSS5.3AI score0.00262EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/20 11:57 p.m.84 views

CVE-2026-16520

Genians Genian NAC V4.0, V5.0, and Genian ZTNA V6.0 contain improper input validation enabling SQL injection and authentication bypass (CVSS 8.7 HIGH). Affected versions: NAC V4.0 before 4.0.175, V5.0 before 5.0.88, ZTNA V6.0 before 6.0.48. No in-the-wild exploitation reported. Patch to the liste...

8.7CVSS5.9AI score0.00386EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/20 9:52 p.m.44 views

CVE-2026-49245

SFTPGo (open-source file transfer solution) versions 2.2.0 through 2.7.3 are affected by a stored XSS vulnerability. The inline query parameter on browsable-share and authenticated user-file download endpoints suppressed Content-Disposition: attachment, allowing an attacker-placed HTML file in a ...

3.7CVSS8.4AI score0.002EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/20 8:17 p.m.16 views

CVE-2026-75910

Incorrect privilege assignment in the ClickHouse connector deployment template in Amazon Athena Federated Query prior to v2026.17.1 could allow an authenticated remote user to read arbitrary AWS Secrets Manager secrets in the deploying account by pointing the connector's connection string at an...

7.1CVSS0.0037EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/20 8:06 p.m.16 views

EUVD-2026-63585

Incorrect privilege assignment in the ClickHouse connector deployment template in Amazon Athena Federated Query prior to v2026.17.1 could allow an authenticated remote user to read arbitrary AWS Secrets Manager secrets in the deploying account by pointing the connector's connection string at an...

7.1CVSS5.7AI score0.0037EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/20 8:06 p.m.37 views

CVE-2026-75910 Incorrect privilege assignment in the Amazon aws-athena-query-federation ClickHouse connector deployment template

Incorrect privilege assignment in the ClickHouse connector deployment template in Amazon Athena Federated Query prior to v2026.17.1 could allow an authenticated remote user to read arbitrary AWS Secrets Manager secrets in the deploying account by pointing the connector's connection string at an...

7.1CVSS0.0037EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/20 8:06 p.m.50 views

CVE-2026-75910

The ClickHouse connector deployment template in Amazon Athena Federated Query (versions before v2026.17.1) has an incorrect privilege assignment: an authenticated remote user can point the connector's connection string at an unrelated AWS Secrets Manager secret and a database endpoint they contro...

7.1CVSS5.7AI score0.0037EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2026/08/20 6:54 p.m.12 views

net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls

A flaw was found in the net/http/httputil package, specifically within the ReverseProxy component. This vulnerability allows the ReverseProxy to forward query parameters that are not visible to Rewrite functions. This occurs because the ReverseProxy does not correctly consider the url.ParseQuery...

5.3CVSS6.5AI score0.0039EPSS
SaveExploits0References8
OSV
OSV
added 2026/08/20 6:44 p.m.18 views

GHSA-8CFW-PCWH-V63W Winter: Authenticated Twig sandbox escape in CMS SecurityPolicy (bypass of CVE-2024-54149)

Impact Affected versions of Winter CMS allow authenticated backend users with CMS template-editing permissions to escape the Twig sandbox "safe mode" that is meant to restrict what template code can do. Using any of the following permissions, an attacker can read and modify arbitrary database...

8.4CVSS7.4AI score0.0043EPSS
SaveExploits0References5
Snyk
Snyk
added 2026/08/20 6:38 p.m.10 views

Incorrect Authorization

Overview backpack/crud is a package that helps you build an admin interface for your Eloquent models, using Laravel 5 Affected versions of this package are vulnerable to Incorrect Authorization in the Update, Delete, and Reorder processes, where query scopes registered via addClause or...

7.6CVSS5.9AI score0.00329EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/20 6:38 p.m.11 views

GHSA-VGMV-8XJC-6RCH Laravel Backpack CRUD: CRUD panel query scopes are not enforced on Update, Delete, and Reorder (cross-tenant IDOR)

Summary Backpack CRUD's list and read operations correctly apply any query scopes registered via addClause / addBaseClause e.g. tenant isolation, user ownership. However, the Update, Delete, and Reorder operations bypassed these scopes, fetching records directly from the unscoped model query. An...

7.6CVSS5.6AI score0.00329EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2026/08/20 6:38 p.m.14 views

Laravel Backpack CRUD: CRUD panel query scopes are not enforced on Update, Delete, and Reorder (cross-tenant IDOR)

Summary Backpack CRUD's list and read operations correctly apply any query scopes registered via addClause / addBaseClause e.g. tenant isolation, user ownership. However, the Update, Delete, and Reorder operations bypassed these scopes, fetching records directly from the unscoped model query. An...

7.6CVSS5.5AI score0.00329EPSS
SaveExploits0References4Affected Software1
NVD
NVD
added 2026/08/20 6:16 p.m.12 views

CVE-2026-54623

django CMS is an easy-to-use and developer-friendly enterprise content management system powered by Django. Prior to 5.0.8, the moveplugin endpoint in cms/admin/placeholderadmin.py accepts an attacker-controlled pluginparent value without rejecting a plugin’s own identifier or a descendant...

7.1CVSS0.00345EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/20 5:18 p.m.15 views

CVE-2026-74324

A flaw was found in the mt7925 Wi-Fi driver of the Linux kernel. An attacker could exploit this vulnerability by providing a specially crafted firmware response during a test mode query. This improper validation of the response length can lead to a buffer over-read, potentially disclosing sensiti...

5.5CVSS5.8AI score0.00166EPSS
SaveExploits0References4
NVD
NVD
added 2026/08/20 12:16 p.m.13 views

CVE-2026-77070

n8n before 1.123.69, 2.33.4, and 2.34.1 contains a NoSQL injection vulnerability in the MongoDB node's Find, Delete, and Aggregate operations, which parse the Query parameter as JSON after expression resolution without sanitizing MongoDB operators. An attacker who can influence the resolved query...

9.8CVSS0.00281EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/20 12:16 p.m.16 views

CVE-2026-73992

Subscriber Remote Code Execution RCE in Query Wrangler = 1.5.57 versions...

9.9CVSS0.00736EPSS
SaveExploits0References1
Rows per page
Query Builder