Lucene search
+L

3147 matches found

CVE
CVE
•added 2026/10/01 2:45 a.m.•16 views

CVE-2026-103533

A path traversal vulnerability exists in the database-servers API Endpoint of David-Crty databasement versions up to 1.7.1 . The flaw is located in the app/Http/Requests/Api/V1/RestoreRequest.php file and stems from the improper handling of the schema_name argument. An attacker can potentially la...

4.3CVSS4.4AI score0.0029EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2026/10/01 2:45 a.m.•42 views

CVE-2026-103533 David-Crty databasement database-servers API Endpoint RestoreRequest.php 511 path traversal

A vulnerability was found in David-Crty databasement up to 1.7.1. This impacts the function https:/github.com/David-Crty/databasement/pull/511 of the file app/Http/Requests/Api/V1/RestoreRequest.php of the component database-servers API Endpoint. The manipulation of the argument schemaname result...

4.3CVSS0.0029EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2026/10/01 2:45 a.m.•9 views

CVE-2026-103533 David-Crty databasement database-servers API Endpoint RestoreRequest.php 511 path traversal

A vulnerability was found in David-Crty databasement up to 1.7.1. This impacts the function https:/github.com/David-Crty/databasement/pull/511 of the file app/Http/Requests/Api/V1/RestoreRequest.php of the component database-servers API Endpoint. The manipulation of the argument schemaname result...

4.3CVSS4.4AI score0.0029EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/10/01 12:00 a.m.•9 views

PT-2026-103938

HCL BigFix Service Management is affected by an Information Disclosure vulnerability because an exposed API endpoint exposes sensitive internal database information. This information could enable an attacker to facilitate targeted database attacks...

5.3CVSS5.9AI score0.0024EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/30 2:12 p.m.•21 views

CVE-2026-18783

The Trex MES software by Trex Digital Smart Manufacturing Systems Inc. is vulnerable to an Authentication Bypass due to missing server-side authentication on a REST API endpoint . This vulnerability allows unauthorized access to critical functions. The issue affects versions through 2026-09-29 . ...

8.8CVSS5.9AI score0.00353EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/29 8:17 p.m.•16 views

CVE-2026-76738

A buffer overflow vulnerability exists in the API endpoint of HPE Networking Instant On that could allow an authenticated attacker with administrative privileges to cause a denial of service. Successful exploitation could allow an attacker to interrupt the normal operation of the affected service...

2.7CVSS0.00231EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/29 8:17 p.m.•16 views

CVE-2026-76729

A format string vulnerability in the API endpoint of HPE Networking Instant ON APs could allow an authenticated remote attacker with high privileges to cause memory corruption with a modified input. Successful exploitation could allow an attacker to provoke a denial-of-service condition or remote...

6.6CVSS0.00423EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/29 8:17 p.m.•12 views

CVE-2026-76733

A denial-of-service vulnerability exists in the API endpoint of HPE Networking Instant On that could allow an authenticated attacker with administrative privileges to cause a denial of service. Successful exploitation could allow an attacker to interrupt the normal operation of the affected...

4.9CVSS0.0031EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/29 8:17 p.m.•21 views

CVE-2026-76726

An authentication bypass vulnerability in the API endpoint of HPE Networking Instant ON could allow an unauthenticated remote attacker to bypass network access controls if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to obtain...

8.1CVSS0.00362EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/29 8:17 p.m.•15 views

CVE-2026-76728

A vulnerability in the API endpoint of HPE Networking Instant ON APs could allow an authenticated remote attacker with high privileges to conduct a server-side request forgery SSRF attack. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the...

7.2CVSS0.00507EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/29 7:28 p.m.•8 views

CVE-2026-76738 Authenticated Buffer Overflow Vulnerability in the API Endpoint of HPE Networking Instant On Causes Denial-of-Service

A buffer overflow vulnerability exists in the API endpoint of HPE Networking Instant On that could allow an authenticated attacker with administrative privileges to cause a denial of service. Successful exploitation could allow an attacker to interrupt the normal operation of the affected service...

2.7CVSS6.1AI score0.00231EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/29 7:28 p.m.•15 views

EUVD-2026-89357

A buffer overflow vulnerability exists in the API endpoint of HPE Networking Instant On that could allow an authenticated attacker with administrative privileges to cause a denial of service. Successful exploitation could allow an attacker to interrupt the normal operation of the affected service...

2.7CVSS6.1AI score0.00231EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/29 7:28 p.m.•24 views

CVE-2026-76738

A buffer overflow vulnerability exists in the API endpoint of HPE Networking Instant On . This flaw allows an authenticated attacker with administrative privileges to cause a denial of service (DoS) by interrupting the normal operation of the affected service. While the service is impacted, it is...

2.7CVSS6.1AI score0.00231EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/29 7:28 p.m.•42 views

CVE-2026-76738 Authenticated Buffer Overflow Vulnerability in the API Endpoint of HPE Networking Instant On Causes Denial-of-Service

A buffer overflow vulnerability exists in the API endpoint of HPE Networking Instant On that could allow an authenticated attacker with administrative privileges to cause a denial of service. Successful exploitation could allow an attacker to interrupt the normal operation of the affected service...

2.7CVSS0.00231EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/29 7:28 p.m.•6 views

CVE-2026-76733 Authenticated Denial-of-Service Vulnerability in HPE Networking Instant On API Endpoint

A denial-of-service vulnerability exists in the API endpoint of HPE Networking Instant On that could allow an authenticated attacker with administrative privileges to cause a denial of service. Successful exploitation could allow an attacker to interrupt the normal operation of the affected...

4.9CVSS5.9AI score0.0031EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/29 7:28 p.m.•17 views

CVE-2026-76733

A denial-of-service vulnerability exists in the API endpoint of HPE Networking Instant On . An authenticated attacker with administrative privileges can exploit this flaw to interrupt the normal operation of the affected service. The service is designed to resume operation automatically without m...

4.9CVSS5.9AI score0.0031EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/29 7:28 p.m.•41 views

CVE-2026-76733 Authenticated Denial-of-Service Vulnerability in HPE Networking Instant On API Endpoint

A denial-of-service vulnerability exists in the API endpoint of HPE Networking Instant On that could allow an authenticated attacker with administrative privileges to cause a denial of service. Successful exploitation could allow an attacker to interrupt the normal operation of the affected...

4.9CVSS0.0031EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/29 7:28 p.m.•9 views

EUVD-2026-89352

A denial-of-service vulnerability exists in the API endpoint of HPE Networking Instant On that could allow an authenticated attacker with administrative privileges to cause a denial of service. Successful exploitation could allow an attacker to interrupt the normal operation of the affected...

4.9CVSS5.9AI score0.0031EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/29 7:28 p.m.•13 views

CVE-2026-76729 Authenticated Format String Vulnerability allows Memory Corruption in HPE Networking Instant ON API Endpoint

A format string vulnerability in the API endpoint of HPE Networking Instant ON APs could allow an authenticated remote attacker with high privileges to cause memory corruption with a modified input. Successful exploitation could allow an attacker to provoke a denial-of-service condition or remote...

6.6CVSS6.5AI score0.00423EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/29 7:28 p.m.•32 views

CVE-2026-76729

A format string vulnerability exists in the API endpoint of HPE Networking Instant ON APs . An authenticated remote attacker with high privileges can provide modified input to cause memory corruption . This could lead to a denial-of-service (DoS) condition or remote code execution (RCE) within th...

6.6CVSS6.5AI score0.00423EPSS
SaveExploits0References1
Rows per page
Query Builder