Lucene search
K

15 matches found

Wolfi
Wolfi
added 2026/04/11 2:52 a.m.4 views

CVE-2026-34763 vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, logstash, ruby3.4-rails...

5.3CVSS5.4AI score0.00041EPSS
Exploits0
Chainguard
Chainguard
added 2026/04/06 1:18 a.m.4 views

CVE-2026-34763 vulnerabilities

Vulnerabilities for packages: gitlab-cng, logstash, gitlab-rails-ce, ruby3.2-rails, ruby3.4-rails, pact-broker-docker-fips, gitlab-rails-ce-fips, pact-broker-docker...

5.3CVSS5.4AI score0.00041EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2026/04/04 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2026-34763

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Directory interpolates the configured root path directly into a...

5.3CVSS5.8AI score0.00041EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2026/04/03 8:25 p.m.1 views

CVE-2026-34763

A flaw was found in Rack. A remote attacker could exploit a vulnerability in Rack::Directory's handling of root paths. When the configured root path contains special regular expression characters, the directory listing generation can fail to properly strip the path prefix. This can lead to the...

5.3CVSS5.8AI score0.00041EPSS
Exploits0References4
Debian CVE
Debian CVE
added 2026/04/02 4:43 p.m.2 views

CVE-2026-34763

Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Directory interpolates the configured root path directly into a regular expression when deriving the displayed directory path. If root contains regex metacharacters such as +, , or ., the prefix...

5.3CVSS5.2AI score0.00041EPSS
Exploits0
OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-34763 Malicious code in test-10 (npm)

The package test-10 was found to contain malicious code...

7.2AI score
Exploits0
NVD
NVD
added 2024/06/11 5:16 p.m.16 views

CVE-2024-34763

Missing Authorization vulnerability in Saleswonder Team: Tobias Builder for WooCommerce reviews shortcodes – ReviewShort woo-product-reviews-shortcode.This issue affects Builder for WooCommerce reviews shortcodes – ReviewShort: from n/a through = 1.01.5...

5.3CVSS0.00294EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/06/11 4:57 p.m.12 views

CVE-2024-34763 WordPress Builder for WooCommerce reviews shortcodes – ReviewShort plugin <= 1.01.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Saleswonder Team: Tobias Builder for WooCommerce reviews shortcodes – ReviewShort woo-product-reviews-shortcode.This issue affects Builder for WooCommerce reviews shortcodes – ReviewShort: from n/a through = 1.01.5...

5.3CVSS5.2AI score0.00294EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/05/16 12:0 a.m.9 views

WordPress Builder for WooCommerce reviews shortcodes – ReviewShort Plugin <= 1.01.5 is vulnerable to Broken Access Control

Software Builder for WooCommerce reviews shortcodes – ReviewShort Type Plugin Vulnerable versions = 1.01.5 Fixed in 1.01.6 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-34763 Patch priority Low CVSS severity Low 5.3 Developer Tobias PSID b918c301485f...

5.3CVSS6.6AI score0.00294EPSS
Exploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/07/27 12:0 a.m.30 views

Schneider Electric Modicon Insufficient Verification of Data Authenticity (CVE-2022-34763)

A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could cause loading of unauthorized firmware images due to improper verification of the firmware signature. Affected Products: X80 advanced RTU Communication Module BMENOR2200H V2.01 and later, OPC UA Modicon...

7.5CVSS7.1AI score0.00098EPSS
Exploits0References2
Circl
Circl
added 2022/07/14 12:37 a.m.0 views

CVE-2022-34763

creationtimestamp| type| source ---|---|--- 2022-07-14 00:37:01+00:00| seen| https://t.me/cibsecurity/46204...

7.5CVSS7.3AI score0.00098EPSS
Exploits0References1
CVE
CVE
added 2022/07/13 9:11 p.m.65 views

CVE-2022-34763

The CVE-2022-34763 entry describes a CWE-345 vulnerability (Insufficient Verification of Data Authenticity) that could allow loading of unauthorized firmware images due to improper verification of the firmware signature. Affected products are Schneider Electric X80 advanced RTU Communication Modu...

7.5CVSS7.4AI score0.00098EPSS
Exploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/07/12 11:0 a.m.0 views

CVE-2022-34763

A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could cause loading of unauthorized firmware images due to improper verification of the firmware signature. Affected Products: X80 advanced RTU Communication Module BMENOR2200H V2.01 and later, OPC UA Modicon...

7.5CVSS5.9AI score0.00098EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2021/10/27 6:55 p.m.51 views

CVE-2021-34763

Cisco Firepower Management Center (FMC) Web UI vulnerabilities CVE-2021-34763: two issues—an authenticated attacker can lure a user to click a crafted link to execute arbitrary script code (XSS) and an unauthenticated attacker can exploit improper input validation to trigger an open redirect. The...

4.8CVSS5.2AI score0.00175EPSS
Exploits0References1Affected Software3
CVE
CVE
added 1976/01/01 12:0 a.m.4 views

CVE-2025-34763

CVE-2025-34763 is rejected and not used for a vulnerability disclosure.

6.6AI score
Exploits0
Rows per page
Query Builder