Lucene search
+L

15991 matches found

EUVD
EUVD
•added 2026/09/28 8:15 p.m.•11 views

EUVD-2026-88480

A vulnerability was identified in Eleveo Call Recording Software 9.7.0. This vulnerability affects unknown code of the file /callrec/userAddAction.do of the component User Management. Such manipulation of the argument Username leads to ldap injection. The attack can be executed remotely. The...

5.3CVSS5.4AI score0.00221EPSS
SaveExploits0References5
CVE
CVE
•added 2026/09/28 8:15 p.m.•21 views

CVE-2026-101145

A vulnerability exists in Eleveo Call Recording Software 9.7.0 within the User Management component. Specifically, the file /callrec/userAddAction.do is susceptible to ldap injection due to the improper handling of the Username argument. This flaw can be exploited remotely . An exploit is publicl...

5.3CVSS5.4AI score0.00221EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/09/28 8:15 p.m.•44 views

CVE-2026-101145 Eleveo Call Recording Software User Management userAddAction.do ldap injection

A vulnerability was identified in Eleveo Call Recording Software 9.7.0. This vulnerability affects unknown code of the file /callrec/userAddAction.do of the component User Management. Such manipulation of the argument Username leads to ldap injection. The attack can be executed remotely. The...

5.3CVSS0.00221EPSS
SaveExploits0References5
CVE
CVE
•added 2026/09/28 8:00 p.m.•13 views

CVE-2026-101144

A vulnerability exists in Eleveo Call Recording Software 9.7.0 within the Query Builder component. Specifically, an unknown part of the /callrec/searchAction.do file is susceptible to manipulation, resulting in improper access controls . This flaw allows for remote exploitation , and the exploit ...

6.5CVSS6.2AI score0.00201EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/28 8:00 p.m.•13 views

EUVD-2026-88475

A vulnerability was determined in Eleveo Call Recording Software 9.7.0. This affects an unknown part of the file /callrec/searchAction.do of the component Query Builder. This manipulation causes improper access controls. Remote exploitation of the attack is possible. The exploit has been publicly...

6.5CVSS6.2AI score0.00201EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/09/28 8:00 p.m.•5 views

CVE-2026-101144 Eleveo Call Recording Software Query Builder searchAction.do access control

A vulnerability was determined in Eleveo Call Recording Software 9.7.0. This affects an unknown part of the file /callrec/searchAction.do of the component Query Builder. This manipulation causes improper access controls. Remote exploitation of the attack is possible. The exploit has been publicly...

6.5CVSS5.4AI score0.00201EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/09/28 8:00 p.m.•38 views

CVE-2026-101144 Eleveo Call Recording Software Query Builder searchAction.do access control

A vulnerability was determined in Eleveo Call Recording Software 9.7.0. This affects an unknown part of the file /callrec/searchAction.do of the component Query Builder. This manipulation causes improper access controls. Remote exploitation of the attack is possible. The exploit has been publicly...

6.5CVSS0.00201EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/09/28 7:47 p.m.•4 views

CVE-2026-102004 VxWorks 7

Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in memory corruption within the memory management subsystem. Fixed in Version 26.09...

7.8CVSS6.1AI score0.0011EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/28 7:47 p.m.•37 views

CVE-2026-102004 VxWorks 7

Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in memory corruption within the memory management subsystem. Fixed in Version 26.09...

7.8CVSS0.0011EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/28 7:47 p.m.•5 views

EUVD-2026-88467

Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in memory corruption within the memory management subsystem. Fixed in Version 26.09...

7.8CVSS6.1AI score0.0011EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/28 7:47 p.m.•21 views

CVE-2026-102004

Wind River VxWorks 7 versions prior to 26.09 are vulnerable to a memory corruption flaw within the memory management subsystem . The vulnerability is triggered by providing specific arguments to certain system calls . This issue can lead to high impacts on confidentiality, integrity, and availabi...

7.8CVSS6.1AI score0.0011EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/28 7:15 p.m.•14 views

CVE-2026-101141

A cross-site scripting (XSS) vulnerability exists in Eleveo Call Recording Software 9.7.0 within the Play Audio Page component. The flaw is located in an unknown function of the file /callrec/audio.jsp , where an attacker can remotely manipulate the viewRoleId/cfType argument to execute the attac...

5.1CVSS3.6AI score0.00191EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/28 7:15 p.m.•10 views

EUVD-2026-88446

A flaw has been found in Eleveo Call Recording Software 9.7.0. Affected is an unknown function of the file /callrec/audio.jsp of the component Play Audio Page. Executing a manipulation of the argument viewRoleId/cfType can lead to cross site scripting. The attack can be launched remotely. The...

5.1CVSS3.6AI score0.00191EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/09/28 7:15 p.m.•7 views

CVE-2026-101141 Eleveo Call Recording Software Play Audio audio.jsp cross site scripting

A flaw has been found in Eleveo Call Recording Software 9.7.0. Affected is an unknown function of the file /callrec/audio.jsp of the component Play Audio Page. Executing a manipulation of the argument viewRoleId/cfType can lead to cross site scripting. The attack can be launched remotely. The...

5.1CVSS3.8AI score0.00191EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/09/28 7:15 p.m.•37 views

CVE-2026-101141 Eleveo Call Recording Software Play Audio audio.jsp cross site scripting

A flaw has been found in Eleveo Call Recording Software 9.7.0. Affected is an unknown function of the file /callrec/audio.jsp of the component Play Audio Page. Executing a manipulation of the argument viewRoleId/cfType can lead to cross site scripting. The attack can be launched remotely. The...

5.1CVSS0.00191EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/28 6:48 p.m.•10 views

EUVD-2026-88440

Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the IPNET subsystem failing to properly release allocated kernel memory and system file descriptors before terminating the calling application. Fixed in Version 26.09...

5.5CVSS5.8AI score0.00098EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/28 6:48 p.m.•37 views

CVE-2026-97686 VxWorks 7 Memory Resource leak

Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the IPNET subsystem failing to properly release allocated kernel memory and system file descriptors before terminating the calling application. Fixed in Version 26.09...

5.5CVSS0.00098EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/28 12:00 a.m.•6 views

CVE-2026-102006: Missing Release of Memory after Effective Lifetime

In Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the process management subsystem failing to properly release allocated kernel memory before terminating the calling application. Fixed in Version 26.09...

5.5CVSS5.9AI score0.00098EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/28 12:00 a.m.•4 views

CVE-2026-102004: Out-of-bounds Write

Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in memory corruption within the memory management subsystem. Fixed in Version 26.09...

7.8CVSS6.1AI score0.0011EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/28 12:00 a.m.•6 views

PT-2026-102344

Name of the Vulnerable Software and Affected Versions Eleveo Call Recording Software version 9.7.0 Description Improper access controls exist within the Query Builder component, specifically affecting the '/callrec/searchAction.do' endpoint. This flaw allows for remote exploitation. Recommendatio...

6.5CVSS5.9AI score0.00201EPSS
SaveExploits0References7
Rows per page
Query Builder