23583 matches found
CVE-2021-27670
Appspace 6.2.4 allows SSRF via the api/v1/core/proxy/jsonprequest url parameter...
CVE-2021-27722
An issue was discovered in Nsasoft US LLC SpotAuditor 5.3.5. The program can be crashed by entering 300 bytes char data into the "Key" or "Name" field while registering...
CVE-2021-27821
The Web Interface for OpenWRT LuCI version 19.07 and lower has been discovered to have a cross-site scripting vulnerability which can lead to attackers carrying out arbitrary code execution...
CVE-2021-27931
LumisXP aka Lumis Experience Platform before 10.0.0 allows unauthenticated blind XXE via an API request to PageControllerXml.jsp. One can send a request crafted with an XXE payload and achieve outcomes such as reading local server files or denial of service...
CVE-2021-27984
In Pluck-4.7.15 admin background a remote command execution vulnerability exists when uploading files...
CVE-2026-30162
Cross Site Scripting xss vulnerability in Timo 2.0.3 via crafted links in the title field...
CVE-2026-29934
creationtimestamp| type| source ---|---|--- 2026-03-26 17:24:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhy4ohoqaj2d...
CVE-2025-14513
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.11 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an unauthenticated user to cause a denial of service condition due to improper input validation when processing specially crafted JSON...
CVE-2026-4838
creationtimestamp| type| source ---|---|--- 2026-03-26 06:43:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhwytil3tk2s...
BELL-CVE-2026-23351
Bulletin has no description...
CVE-2026-30162
Cross Site Scripting xss vulnerability in Timo 2.0.3 via crafted links in the title field...
CVE-2026-33918 OpenEMR Missing Authorization on Claim File Download Endpoint
OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, the billing file-download endpoint interface/billing/getclaimfile.php only verifies that the caller has a valid session and CSRF token, but does not check any ACL...
CVE-2025-62512
creationtimestamp| type| source ---|---|--- 2026-03-24 10:46:50+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-62512.yaml 2026-03-25 21:03:01+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mhvyfwjqy72i...
CVE-2026-23482
creationtimestamp| type| source ---|---|--- 2026-03-23 22:54:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhr5puj2272f 2026-04-27 12:07:05+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-23482.yaml...
CVE-2025-71263
creationtimestamp| type| source ---|---|--- 2026-03-23 17:01:18+00:00| seen| https://bsky.app/profile/krutonium.social.treehouse.systems.ap.brid.gy/post/3mhqjxjbr7in2...
CVE-2026-4589
creationtimestamp| type| source ---|---|--- 2026-03-23 16:37:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhqimy7lgs2g...
Advisory ROSA-SA-2026-3247
software: libreoffice 24.8.7.2 OS: ROSA-CHROME unaffected versions = libreoffice-24.8.7.2 affected versions libreoffice-24.8.7.2 CVE-ID: CVE-2025-2866 BDU-ID: 2025-05910 CVE-Crit: CRITICAL CVE-DESC.: A vulnerability in the LibreOffice office suite is related to incorrect cryptographic signature...
CVE-2026-4553
creationtimestamp| type| source ---|---|--- 2026-03-21 17:07:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116268258506979437 2026-03-22 15:16:04+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4553 2026-03-22 18:28:08+00:00| seen|...