Lucene search
+L

2963 matches found

CNVD
CNVD
•added 2026/02/04 12:00 a.m.•21 views

Cisco Identity Services Engine Cross-Site Scripting Vulnerability (CNVD-2026-12674)

Cisco Identity Services Engine Cisco ISE is an environment-aware platform ISE Identity Services Engine from Cisco. The platform collects real-time information from the network, users, and devices, and develops and enforces policies to regulate the network. The Cisco Identity Services Engine Cisco...

4.8CVSS5.7AI score0.00271EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/02/03 12:00 a.m.•27 views

PT-2026-5757

Name of the Vulnerable Software and Affected Versions Brocade Fabric OS versions prior to 9.2.1c2 Description A security issue exists in the authentication and management services of Brocade Fabric OS. An authenticated remote attacker with administrative privileges can execute arbitrary commands ...

8.5CVSS6.4AI score0.00647EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/01/29 2:28 p.m.•21 views

EUVD-2020-30904

MedDream PACS Server 6.8.3.751 contains an authenticated remote code execution vulnerability that allows authorized users to upload malicious PHP files. Attackers can exploit the uploadImage.php endpoint by authenticating and uploading a PHP shell to execute arbitrary system commands with elevate...

8.8CVSS6.7AI score0.00592EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/01/29 12:00 a.m.•24 views

PT-2026-5284

MedDream PACS Server 6.8.3.751 contains an authenticated remote code execution vulnerability that allows authorized users to upload malicious PHP files. Attackers can exploit the uploadImage.php endpoint by authenticating and uploading a PHP shell to execute arbitrary system commands with elevate...

8.8CVSS6.9AI score0.00592EPSS
SaveExploits0References4
NVD
NVD
•added 2026/01/28 4:15 a.m.•22 views

CVE-2026-1514

Official Document Management System developed by 2100 Technology has a Incorrect Authorization vulnerability, allowing authenticated remote attackers to modify front-end code to read all official documents...

7.1CVSS0.00295EPSS
SaveExploits0References2
CVE
CVE
•added 2026/01/28 3:39 a.m.•56 views

CVE-2026-1514

Technical details are not publicly available in the provided documents (no affected version, patch info, or exploit details). Monitor for updates.

7.1CVSS5.8AI score0.00295EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/28 12:00 a.m.•7 views

CVE-2026-1514: Incorrect Authorization

Official Document Management System developed by 2100 Technology has a Incorrect Authorization vulnerability, allowing authenticated remote attackers to modify front-end code to read all official documents...

7.1CVSS5.8AI score0.00295EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/28 12:00 a.m.•23 views

2100 Technology Official Document Management System Security Vulnerabilities

The 2100 Technology Official Document Management System is a document management software developed by 2100 Technology in Taiwan, China. The 2100 Technology Official Document Management System has a security vulnerability, which stems from improper authorization. This vulnerability could allow...

7.1CVSS5.8AI score0.00295EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/01/27 9:23 a.m.•26 views

CVE-2026-1427

Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server...

8.8CVSS6.2AI score0.01424EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/27 9:23 a.m.•26 views

CVE-2026-1428

Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server...

8.8CVSS6.1AI score0.01397EPSS
SaveExploits0References1
OSV
OSV
•added 2026/01/26 9:15 a.m.•16 views

CVE-2026-1429

Single Sign-On Portal System developed by WellChoose has a Reflected Cross-site Scripting vulnerability, allowing authenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks...

5.4CVSS6.1AI score0.00247EPSS
SaveExploits0References2
NVD
NVD
•added 2026/01/26 8:16 a.m.•18 views

CVE-2026-1427

Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server...

8.8CVSS0.01424EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/01/26 8:14 a.m.•42 views

CVE-2026-1428 WellChoose|Single Sign-On Portal System - OS Command Injection

Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server...

8.8CVSS0.01397EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/01/26 8:14 a.m.•12 views

CVE-2026-1428

Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server...

8.8CVSS6.1AI score0.01397EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/01/26 8:06 a.m.•11 views

CVE-2026-1427

Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server...

8.8CVSS6.1AI score0.01424EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/01/26 8:06 a.m.•44 views

CVE-2026-1427 WellChoose|Single Sign-On Portal System - OS Command Injection

Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server...

8.8CVSS0.01424EPSS
SaveExploits0References2
CVE
CVE
•added 2026/01/26 8:06 a.m.•46 views

CVE-2026-1427

CVE-2026-1427 concerns the WellChoose Single Sign-On Portal System, where an OS Command Injection flaw allows authenticated remote attackers to inject and execute arbitrary commands on the server. The connected sources identify the affected product (WellChoose SSO Portal System), and the root cau...

8.8CVSS6.2AI score0.01424EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/26 12:00 a.m.•6 views

CVE-2026-1427: Improper Neutralization of Special Elements used in an OS Command

Single Sign-On Portal System developed by WellChoose has a OS Command Injection vulnerability, allowing authenticated remote attackers to inject arbitrary OS commands and execute them on the server...

8.8CVSS6.2AI score0.01424EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/24 3:17 a.m.•27 views

CVE-2026-0785

ALGO 8180 IP Audio Alerter API Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is required to exploit this vulnerability. The specific flaw...

8.8CVSS6.5AI score0.01414EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/24 3:17 a.m.•23 views

CVE-2026-0782

ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is required to exploit this vulnerability. The specific fla...

8.8CVSS6.5AI score0.01666EPSS
SaveExploits0References1
Rows per page
Query Builder