Lucene search
+L

5223 matches found

OSV
OSV
•added 2026/08/25 8:21 a.m.•14 views

ROOT-OS-DEBIAN-12-CVE-2026-54369 CVE-2026-54369 in acl - Patched by Root

Root has patched CVE-2026-54369 in the acl package for Root:Debian:12. Multiple fixed versions available...

8.4CVSS5.5AI score0.00188EPSS
SaveExploits0
Cvelist
Cvelist
•added 2026/08/25 1:30 a.m.•37 views

CVE-2026-56707 Grav Flex Objects 1.4.0 through 1.4.7 Authorization Bypass via Shortcode

Grav Flex Objects plugin versions 1.4.0 through 1.4.7 contain an authorization bypass vulnerability in the flex-objects shortcode that allows users with page-edit access to render any registered Flex collection without permission checks. Attackers can place the shortcode in published pages to...

8.3CVSS0.00375EPSS
SaveExploits0References2
OSV
OSV
•added 2026/08/25 1:30 a.m.•18 views

CVE-2026-56707 Grav Flex Objects 1.4.0 through 1.4.7 Authorization Bypass via Shortcode

Grav Flex Objects plugin versions 1.4.0 through 1.4.7 contain an authorization bypass vulnerability in the flex-objects shortcode that allows users with page-edit access to render any registered Flex collection without permission checks. Attackers can place the shortcode in published pages to...

8.3CVSS5.5AI score
SaveExploits0References4
EUVD
EUVD
•added 2026/08/25 1:30 a.m.•11 views

EUVD-2026-65205

Grav Flex Objects plugin versions 1.4.0 through 1.4.7 contain an authorization bypass vulnerability in the flex-objects shortcode that allows users with page-edit access to render any registered Flex collection without permission checks. Attackers can place the shortcode in published pages to...

8.3CVSS5.4AI score0.00375EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•29 views

PT-2026-81134

Grav Flex Objects plugin versions 1.4.0 through 1.4.7 contain an authorization bypass vulnerability in the flex-objects shortcode that allows users with page-edit access to render any registered Flex collection without permission checks. Attackers can place the shortcode in published pages to...

8.3CVSS5.2AI score0.00375EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•19 views

PT-2026-81309

Name of the Vulnerable Software and Affected Versions Kibana affected versions not specified Description An authorization bypass exists where an authenticated user can reference another user's AI Assistant conversation identifier to access or modify conversations they do not own. This occurs...

4.2CVSS5.8AI score0.00203EPSS
SaveExploits0References9
AstraLinux
AstraLinux
•added 2026/08/24 10:19 a.m.•16 views

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ksmbd: A possible reference count leak in smb2open has been fixed. The reference count of ACLs will cause a leak when memory allocation fails. This issue has been addressed by adding the missing posixaclrelease function...

5.5CVSS5.7AI score0.00193EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/08/24 10:19 a.m.•12 views

Astra Linux – Vulnerability in Redis

Redis is an open-source, in-memory database that persists data on disk. A authenticated user may use a specially crafted Lua script to manipulate the garbage collector, potentially leading to remote code execution. This issue has been fixed in versions 7.4.2, 7.2.7, and 6.2.17. An additional...

9.8CVSS7.2AI score0.08169EPSS
SaveExploits2References2
OSV
OSV
•added 2026/08/24 6:39 a.m.•8 views

ROOT-OS-DEBIAN-13-CVE-2026-54370 CVE-2026-54370 in acl - Patched by Root

Root has patched CVE-2026-54370 in the acl package for Root:Debian:13. Multiple fixed versions available...

7.2CVSS5.5AI score0.00111EPSS
SaveExploits0
OSV
OSV
•added 2026/08/24 6:39 a.m.•11 views

ROOT-OS-DEBIAN-13-CVE-2026-54369 CVE-2026-54369 in acl - Patched by Root

Root has patched CVE-2026-54369 in the acl package for Root:Debian:13. Multiple fixed versions available...

8.4CVSS5.5AI score0.00188EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/08/24 12:00 a.m.•18 views

PT-2026-80974

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the acl general setup Edit ACE function. The vulnerability is caused by copying the name field into a fixed-size buffer without length validation. A remote attacker can trigger this vulnerability via crafted input,...

7.2CVSS6.2AI score0.00683EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/24 12:00 a.m.•21 views

PT-2026-80973

Multiple DrayTek VigorSwitch models contain a buffer overflow vulnerability in the acl general setup Add ACE function. The vulnerability is caused by copying the name field into a fixed-size buffer without length validation. A remote attacker can trigger this vulnerability via crafted input,...

7.2CVSS6.2AI score0.00683EPSS
SaveExploits0References3
NVD
NVD
•added 2026/08/22 3:16 p.m.•15 views

CVE-2026-76607

Joomla Extension - fabrikar.com - Missing ACL check in download element in Fabrik 4.7.2...

10CVSS0.00406EPSS
SaveExploits0References1
NVD
NVD
•added 2026/08/22 3:16 p.m.•17 views

CVE-2026-76596

Joomla Extension - fabrikar.com - Unauthenticated table truncation via list.doempty in Fabrik 4.7.2- The list controllers doemtpy endpoints lacks ACL gates, a plain GET empties the target list's table...

8.7CVSS0.00406EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/22 2:20 p.m.•10 views

CVE-2026-76596 Joomla Extension - fabrikar.com - Unauthenticated table truncation via list.doempty in Fabrik < 4.7.2

Joomla Extension - fabrikar.com - Unauthenticated table truncation via list.doempty in Fabrik 4.7.2- The list controllers doemtpy endpoints lacks ACL gates, a plain GET empties the target list's table...

8.7CVSS5.2AI score0.00406EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/22 2:20 p.m.•33 views

CVE-2026-76596

Fabrik (Joomla extension by fabrikar.com) versions prior to 4.7.2 contain an unauthenticated table truncation vulnerability in the list.doempty endpoint. The list controller's doempty endpoints lack ACL gates , meaning a plain GET request from an unauthenticated attacker can empty the target list...

8.7CVSS5.2AI score0.00406EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/22 2:20 p.m.•38 views

CVE-2026-76596 Joomla Extension - fabrikar.com - Unauthenticated table truncation via list.doempty in Fabrik < 4.7.2

Joomla Extension - fabrikar.com - Unauthenticated table truncation via list.doempty in Fabrik 4.7.2- The list controllers doemtpy endpoints lacks ACL gates, a plain GET empties the target list's table...

8.7CVSS0.00406EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/22 2:15 p.m.•13 views

EUVD-2026-64319

Joomla Extension - fabrikar.com - Missing ACL check in download element in Fabrik 4.7.3 - ???...

10CVSS5.1AI score0.00406EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/22 2:15 p.m.•9 views

CVE-2026-76607 Joomla Extension - fabrikar.com - Missing ACL check in download element in Fabrik < 4.7.2

Joomla Extension - fabrikar.com - Missing ACL check in download element in Fabrik 4.7.2...

10CVSS5.2AI score0.00406EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/22 2:15 p.m.•36 views

CVE-2026-76607 Joomla Extension - fabrikar.com - Missing ACL check in download element in Fabrik < 4.7.2

Joomla Extension - fabrikar.com - Missing ACL check in download element in Fabrik 4.7.2...

10CVSS0.00406EPSS
SaveExploits0References1
Rows per page
Query Builder