Lucene search
+L

60 matches found

OSV
OSV
•added 2026/07/30 2:22 p.m.•9 views

MINI-6926-99MM-CMVP

Bulletin has no description...

5CVSS5.8AI score0.00338EPSS
SaveExploits0
Circl
Circl
•added 2026/07/29 12:01 p.m.•19 views

CVE-2017-6926

creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:45+00:00| seen| Telegram/MseQjC2UFsOQcI0uMv13Ym2DcC4W3m2ZZH-Hx1nKmU3n8w 2026-07-30 00:02:01+00:00| seen| Telegram/MseQjC2UFsOQcI0uMv13Ym2DcC4W3m2ZZH-Hx1nKmU3n8w 2026-08-01 14:00:05+00:00| seen|...

8.1CVSS7.5AI score0.01207EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2026/01/09 12:05 p.m.•17 views

CVE-2018-6926

In app/Controller/ServersController.php in MISP 2.4.87, a server setting permitted the override of a path variable on certain Red Hed Enterprise Linux and CentOS systems where rhshellfix was enabled, and consequently allowed site admins to inject arbitrary OS commands. The impact is limited by th...

9CVSS7AI score0.0165EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2025/07/14 12:00 a.m.•19 views

MediaWiki < 1.39.13, 1.40.x < 1.42.7, 1.43.x < 1.43.2 Multiple Vulnerabilities - Linux

MediaWiki is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mediawiki:mediawiki"; ifdescripti...

8.8CVSS6.3AI score0.00516EPSS
SaveExploits0References15
RedhatCVE
RedhatCVE
•added 2025/07/05 5:19 p.m.•16 views

CVE-2025-6926

Improper Authentication vulnerability in Wikimedia Foundation Mediawiki - CentralAuth Extension allows : Bypass Authentication.This issue affects Mediawiki - CentralAuth Extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2...

8.8CVSS6.3AI score0.00452EPSS
SaveExploits0References1
OSV
OSV
•added 2025/07/03 5:15 p.m.•10 views

CVE-2025-6926

Improper Authentication vulnerability in Wikimedia Foundation Mediawiki - CentralAuth Extension allows : Bypass Authentication.This issue affects Mediawiki - CentralAuth Extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2...

6.1AI score
SaveExploits0References2
CVE
CVE
•added 2025/07/03 4:23 p.m.•79 views

CVE-2025-6926

The Wikimedia Foundation Mediawiki - CentralAuth Extension is vulnerable to an Improper Authentication flaw that allows attackers to bypass authentication . The root cause is that the extension allows suppressing the reauth flag on login, which was intended as a workaround for certain "autologin"...

8.8CVSS6.6AI score0.00452EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2025/07/03 4:23 p.m.•21 views

CVE-2025-6926

Improper Authentication vulnerability in Wikimedia Foundation Mediawiki - CentralAuth Extension allows : Bypass Authentication.This issue affects Mediawiki - CentralAuth Extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2...

8.8CVSS5.2AI score0.00452EPSS
SaveExploits0
Cvelist
Cvelist
•added 2025/07/03 4:23 p.m.•46 views

CVE-2025-6926 Security Authentication Bypass in CentralAuth

Improper Authentication vulnerability in Wikimedia Foundation Mediawiki - CentralAuth Extension allows : Bypass Authentication.This issue affects Mediawiki - CentralAuth Extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2...

0.00452EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/07/03 4:23 p.m.•32 views

CVE-2025-6926 Security Authentication Bypass in CentralAuth

Improper Authentication vulnerability in Wikimedia Foundation Mediawiki - CentralAuth Extension allows : Bypass Authentication.This issue affects Mediawiki - CentralAuth Extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2...

6.5AI score0.00452EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/21 9:29 p.m.•20 views

CVE-2006-6926

Buffer overflow in eXtremail 2.1 has unknown impact and attack vectors, as demonstrated by VulnDisco Pack. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

10CVSS7AI score0.01463EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/09/04 6:00 a.m.•18 views

CVE-2024-6926 Viral Signup <= 2.1 - Unauthenticated SQLi

The Viral Signup WordPress plugin through 2.1 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...

7.9AI score0.03292EPSS
SaveExploits1References1
Patchstack
Patchstack
•added 2024/09/04 12:00 a.m.•25 views

WordPress Viral Signup Plugin <= 2.1 is vulnerable to SQL Injection

Software Viral Signup Type Plugin Vulnerable versions = 2.1 Fixed in N/A OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2024-6926 Patch priority High CVSS severity High 9.3 Developer Claim ownership PSID bccf241bb1d7 Credits Project Black Required privilege Unauthenticated...

9.8CVSS6.8AI score0.03292EPSS
SaveExploits1References3Affected Software1
OpenVAS
OpenVAS
•added 2024/08/02 12:00 a.m.•27 views

Ubuntu: Security Advisory (USN-6926-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.3AI score0.00828EPSS
SaveExploits0References2
OSV
OSV
•added 2024/06/07 11:05 a.m.•13 views

CGA-9QFH-6926-6GRF

Bulletin has no description...

5.5CVSS6.3AI score0.00446EPSS
SaveExploits0
OSV
OSV
•added 2024/06/06 12:25 p.m.•11 views

CGA-93FG-W3GC-6926

Bulletin has no description...

7.5CVSS7AI score0.0105EPSS
SaveExploits0
Cvelist
Cvelist
•added 2024/01/23 7:23 p.m.•54 views

CVE-2023-6926 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Crestron AM-300

There is an OS command injection vulnerability in Crestron AM-300 firmware version 1.4499.00018 which may enable a user of a limited-access SSH session to escalate their privileges to root-level access...

8.4CVSS8.9AI score0.00529EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/01/23 7:23 p.m.•18 views

CVE-2023-6926 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Crestron AM-300

There is an OS command injection vulnerability in Crestron AM-300 firmware version 1.4499.00018 which may enable a user of a limited-access SSH session to escalate their privileges to root-level access...

8.4CVSS7.7AI score0.00529EPSS
SaveExploits0References1
CVE
CVE
•added 2024/01/23 7:23 p.m.•54 views

CVE-2023-6926

CVE-2023-6926 concerns an OS command injection in Crestron AM-300 firmware version 1.4499.00018. A limited-access user over SSH could escalate privileges to root. Affected product: Crestron AM-300 (firmware 1.4499.00018). Reported CVSS/metrics indicate high impact with local, low-privilege, non-u...

8.4CVSS7.9AI score0.00529EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2022/02/25 11:32 a.m.•40 views

CVE-2020-6926

HP Device Manager contains CVE-2020-6926: an unauthenticated RMI vulnerability that enables remote access to resources and, via an RMI call, can inject HQL that executes SQL on the bundled PostgreSQL database. Affected products/versions include HP Device Manager 4.x before 4.7 SP13 and 5.x before...

6.8AI score
SaveExploits0References11
Rows per page
Query Builder