Lucene search
K

26 matches found

Circl
Circl
added 2026/02/24 9:43 p.m.3 views

CVE-2026-26342

creationtimestamp| type| source ---|---|--- 2026-02-24 21:43:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfn56ezpiy2v...

9.8CVSS4.8AI score0.00414EPSS
Exploits3References1
RedhatCVE
RedhatCVE
added 2025/02/14 2:44 p.m.5 views

CVE-2025-26342

A CWE-306 "Missing Authentication for Critical Function" in maxprofile/accounts/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to create arbitrary users, including administrators, via crafted HTTP requests...

9.8CVSS7.3AI score0.00992EPSS
Exploits0References1
NVD
NVD
added 2025/02/12 2:15 p.m.7 views

CVE-2025-26342

A CWE-306 "Missing Authentication for Critical Function" in maxprofile/accounts/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to create arbitrary users, including administrators, via crafted HTTP requests...

9.8CVSS0.00992EPSS
Exploits0References1
Circl
Circl
added 2025/02/12 2:5 p.m.3 views

CVE-2025-26342

creationtimestamp| type| source ---|---|--- 2025-02-12 14:05:50+00:00| seen| https://infosec.exchange/users/cve/statuses/113991296597733720 2025-02-12 14:48:32+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113991464494437804 2025-02-12 15:09:36+00:00| seen|...

9.8CVSS5AI score0.00992EPSS
Exploits0References15
Cvelist
Cvelist
added 2025/02/12 1:27 p.m.8 views

CVE-2025-26342

A CWE-306 "Missing Authentication for Critical Function" in maxprofile/accounts/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to create arbitrary users, including administrators, via crafted HTTP requests...

9.8CVSS0.00992EPSS
Exploits0References1
CVE
CVE
added 2025/02/12 1:27 p.m.43 views

CVE-2025-26342

CVE-2025-26342 affects Q-Free MaxTime (MaxTime

9.8CVSS9.6AI score0.00992EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/02/12 1:27 p.m.4 views

CVE-2025-26342

A CWE-306 "Missing Authentication for Critical Function" in maxprofile/accounts/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to create arbitrary users, including administrators, via crafted HTTP requests...

9.8CVSS9.6AI score0.00992EPSS
Exploits0References1
Circl
Circl
added 2024/02/28 7:26 p.m.0 views

CVE-2024-26342

creationtimestamp| type| source ---|---|--- 2024-02-28 19:26:59+00:00| seen| https://t.me/ctinow/195775 2024-02-28 19:27:06+00:00| seen| https://t.me/ctinow/195781 2025-04-22 16:03:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12876...

7.5CVSS4.8AI score0.00538EPSS
Exploits1References3
OSV
OSV
added 2024/02/28 6:15 p.m.2 views

CVE-2024-26342

A Null pointer dereference in usr/sbin/httpd in ASUS AC68U 3.0.0.4.384.82230 allows remote attackers to trigger DoS via network packet...

7.5CVSS5.8AI score0.00538EPSS
Exploits1References1
NVD
NVD
added 2024/02/28 6:15 p.m.6 views

CVE-2024-26342

A Null pointer dereference in usr/sbin/httpd in ASUS AC68U 3.0.0.4.384.82230 allows remote attackers to trigger DoS via network packet...

7.5CVSS6.7AI score0.00538EPSS
Exploits1References1
CVE
CVE
added 2024/02/28 12:0 a.m.102 views

CVE-2024-26342

CVE-2024-26342 affects ASUS AC68U firmware version 3.0.0.4.384.82230. The vulnerability is a null pointer dereference in usr/sbin/httpd that allows remote attackers to trigger a denial of service via a network packet. Documented impact: availability loss (I: N; A: H) with network access and no re...

7.5CVSS6.9AI score0.00538EPSS
Exploits1References1Affected Software1
Circl
Circl
added 2023/03/29 12:46 a.m.3 views

CVE-2023-26342

creationtimestamp| type| source ---|---|--- 2023-03-29 00:46:00+00:00| seen| Telegram/jfSemyXwXrf3gbbdl5OXWMWO3eIPqWmlnxkAcNwcuBAKcJc...

5.5CVSS4.8AI score0.00174EPSS
Exploits0
CVE
CVE
added 2023/03/28 12:0 a.m.53 views

CVE-2023-26342

Adobe Dimension up to version 3.4.7 is affected by a GLB file-parsing out-of-bounds read vulnerability (CVE-2023-26342) that can disclose memory and bypass ASLR. Exploitation requires user interaction (open a malicious file). Updates to 3.4.8 are available and fixed per APSB23-20 and NCSC advisor...

5.5CVSS4.9AI score0.00174EPSS
Exploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/03/16 12:0 a.m.29 views

Adobe Dimension < 3.4.8 Multiple Vulnerabilities (APSB23-20) (macOS)

The version of Adobe Dimension installed on the remote macOS host is prior to 3.4.8. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-20 advisory. - Adobe Dimension versions 3.4.7 and earlier is affected by a Stack-based Buffer Overflow vulnerability that could...

7.8CVSS7.5AI score0.00346EPSS
Exploits0References59
NVD
NVD
added 2022/12/02 10:15 p.m.7 views

CVE-2020-26342

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none...

Exploits0
Circl
Circl
added 2022/08/06 2:27 a.m.3 views

CVE-2022-26342

creationtimestamp| type| source ---|---|--- 2022-08-06 02:27:07+00:00| seen| https://t.me/cibsecurity/47683...

9.8CVSS8.1AI score0.00459EPSS
Exploits1References1
NVD
NVD
added 2022/08/05 10:15 p.m.11 views

CVE-2022-26342

A buffer overflow vulnerability exists in the confsrv ucloudsetnodelocation functionality of TCL LinkHub Mesh Wi-Fi MS1G0001.0014. A specially-crafted network packet can lead to a buffer overflow. An attacker can send a malicious packet to trigger this vulnerability...

9.8CVSS0.00459EPSS
Exploits1References1
CVE
CVE
added 2022/08/05 9:18 p.m.73 views

CVE-2022-26342

Summary: CVE-2022-26342 applies to TCL LinkHub Mesh Wi‑Fi, specifically the MSP LinkHub Mesh node software. Talos documents a buffer overflow in the confsrv ucloud_set_node_location handler. The vulnerability arises from a dangerous strcpy in the path that handles the NodeLocation message (via pr...

9.8CVSS9.6AI score0.00459EPSS
Exploits1References1Affected Software1
OpenVAS
OpenVAS
added 2022/06/03 12:0 a.m.17 views

SUSE: Security Advisory (SUSE-SU-2022:1923-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS5.3AI score0.00162EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2022/05/26 12:0 a.m.20 views

SUSE: Security Advisory (SUSE-SU-2022:1840-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS5.2AI score0.00135EPSS
Exploits0References2
Rows per page
Query Builder