Lucene search
K

39 matches found

RedhatCVE
RedhatCVE
added 4 days ago6 views

CVE-2026-6826

Concrete CMS 9.5.0 and below is vulnerable to unauthenticated file usage disclosure via missing permission check in the usage controller. Any unauthenticated visitor can request /ccm/system/dialogs/file/usage/fID with any file ID and receive a list of every page that references that file, includi...

6.9CVSS5.5AI score0.00025EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/21 8:55 p.m.8 views

CVE-2026-6826

Concrete CMS 9.5.0 and below is vulnerable to unauthenticated file usage disclosure via missing permission check in the usage controller. Any unauthenticated visitor can request /ccm/system/dialogs/file/usage/fID with any file ID and receive a list of every page that references that file,...

6.9CVSS5.8AI score0.00025EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2026/03/13 1:8 p.m.0 views

MINI-6826-M9FP-4M68

Bulletin has no description...

8.2CVSS5.7AI score0.00009EPSS
Exploits2
Circl
Circl
added 2026/01/20 4:30 p.m.1 views

CVE-2025-58091

creationtimestamp| type| source ---|---|--- 2026-01-20 16:30:40+00:00| seen| https://infosec.place/objects/86c1cfe3-6826-4fb9-8bab-2163ea39c0ed...

6.1CVSS5AI score0.00083EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:50 a.m.5 views

CVE-2013-6826

cgi-bin/module//sysmanager/admin/SYSAdminUserDialog in Fortinet FortiAnalyzer before 5.0.5 does not properly validate the csrftoken parameter, which allows remote attackers to perform cross-site request forgery CSRF attacks...

6.8CVSS7.1AI score0.00413EPSS
Exploits1References1
Circl
Circl
added 2025/06/28 9:55 p.m.5 views

CVE-2025-6826

creationtimestamp| type| source ---|---|--- 2025-06-28 21:55:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19833...

9.8CVSS4.8AI score0.00204EPSS
Exploits1References1
Circl
Circl
added 2024/10/24 12:38 p.m.0 views

CVE-2024-6826

creationtimestamp| type| source ---|---|--- 2024-10-24 12:38:12+00:00| seen| https://t.me/cvedetector/8785...

6.5CVSS4.8AI score0.00136EPSS
Exploits1References1
Cvelist
Cvelist
added 2024/10/24 9:30 a.m.20 views

CVE-2024-6826 Allocation of Resources Without Limits or Throttling in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 11.2 before 17.3.6, 17.4 before 17.4.3, and 17.5 before 17.5.1. A denial of service could occur via importing a malicious crafted XML manifest file...

6.5CVSS0.00136EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2024/10/24 12:0 a.m.14 views

GitLab 11.2 < 17.3.6 / 17.4 < 17.4.3 / 17.5 < 17.5.1 (CVE-2024-6826)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab CE/EE affecting all versions from 11.2 before 17.3.6, 17.4 before 17.4.3, and 17.5 before 17.5.1. A denial of service could occur via importing a malicious craft...

6.5CVSS5.4AI score0.00136EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2024/06/11 12:0 a.m.27 views

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 23.10 : mod_jk vulnerability (USN-6826-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 23.10 host has a package installed that is affected by a vulnerability as referenced in the USN-6826-1 advisory. Karl von Randow discovered that modjk was vulnerable to an authentication bypass. If the configuration did not provide...

7.5CVSS7.4AI score0.00036EPSS
Exploits0References2
Circl
Circl
added 2024/01/11 11:56 a.m.0 views

CVE-2023-6826

creationtimestamp| type| source ---|---|--- 2024-01-11 11:56:22+00:00| seen| https://t.me/ctinow/166465...

7.2CVSS7.6AI score0.07288EPSS
Exploits0References1
Circl
Circl
added 2023/12/18 8:48 p.m.0 views

GHSA-RW54-6826-C8J5

creationtimestamp| type| source ---|---|--- 2023-12-18 20:48:08+00:00| seen| https://t.me/ctinow/156092...

4.8AI score
Exploits0References1
NVD
NVD
added 2023/12/15 8:15 a.m.14 views

CVE-2023-6826

The E2Pdf plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation on the 'importaction' function in versions up to, and including, 1.20.25. This makes it possible for authenticated attackers with a role that the administrator previously granted access...

7.2CVSS0.07288EPSS
Exploits0References4
CVE
CVE
added 2023/12/15 7:30 a.m.72 views

CVE-2023-6826

CVE-2023-6826 affects the WordPress plugin E2Pdf (Export To Pdf Tool) where versions up to and including 1.20.25 fail to validate file types in the import_action function. This allows authenticated attackers with granted plugin access to upload arbitrary files to the server, with potential remote...

7.2CVSS7.4AI score0.07288EPSS
Exploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2023/12/15 7:30 a.m.15 views

CVE-2023-6826 E2Pdf <= 1.20.25 - Authenticated (Administrator+) Arbitrary File Upload

The E2Pdf plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation on the 'importaction' function in versions up to, and including, 1.20.25. This makes it possible for authenticated attackers with a role that the administrator previously granted access...

7.2CVSS7.8AI score0.07288EPSS
Exploits0References4
AlpineLinux
AlpineLinux
added 2020/04/24 3:51 p.m.38 views

CVE-2020-6826

Mozilla developers Tyson Smith, Bob Clary, and Alexandru Michis reported memory safety bugs present in Firefox 74. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affec...

9.8CVSS9.9AI score0.00482EPSS
Exploits0
CVE
CVE
added 2020/04/24 3:51 p.m.223 views

CVE-2020-6826

CVE-2020-6826 affects Mozilla Firefox before version 75.0. The issue stems from memory-safety bugs in Firefox 74 that could lead to memory corruption and arbitrary code execution with a remote attack surface (no user interaction required). The Arch Linux advisory ASA-202004-8 provides remediation...

9.8CVSS9.7AI score0.00482EPSS
Exploits0References2Affected Software1
ArchLinux
ArchLinux
added 2020/04/08 12:0 a.m.39 views

[ASA-202004-8] firefox: multiple issues

Arch Linux Security Advisory ASA-202004-8 ========================================= Severity: Critical Date : 2020-04-08 CVE-ID : CVE-2020-6821 CVE-2020-6823 CVE-2020-6824 CVE-2020-6825 CVE-2020-6826 Package : firefox Type : multiple issues Remote : Yes Link :...

9.8CVSS0.1AI score0.00696EPSS
Exploits0References17
Tenable Nessus
Tenable Nessus
added 2020/04/08 12:0 a.m.43 views

Ubuntu 16.04 LTS / 18.04 LTS : Firefox vulnerabilities (USN-4323-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4323-1 advisory. Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could...

9.8CVSS7.7AI score0.00812EPSS
Exploits0References7
NVD
NVD
added 2019/09/17 8:15 p.m.13 views

CVE-2019-6826

A CWE-426: Untrusted Search Path vulnerability exists in SoMachine HVAC v2.4.1 and earlier versions, which could cause arbitrary code execution on the system running SoMachine HVAC when a malicious DLL library is loaded by the product...

7.8CVSS7.9AI score0.00432EPSS
Exploits0References1
Rows per page
Query Builder