Lucene search
+L

2786 matches found

RedhatCVE
RedhatCVE
added 2026/01/07 9:35 a.m.15 views

CVE-2019-7941

Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Information Exposure Through an Error Message vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current user...

7.5CVSS6.5AI score0.03121EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:34 a.m.15 views

CVE-2019-7847

Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Improper Restriction of XML External Entity Reference 'XXE' vulnerability. Successful exploitation could lead to Arbitrary read access to the file system in the context of the current user...

7.5CVSS6.6AI score0.03251EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:34 a.m.9 views

CVE-2019-7843

Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Insufficient input validation vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current user...

7.5CVSS6.6AI score0.03207EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/06 12:19 a.m.6 views

CVE-2025-66376

Zimbra Collaboration ZCS 10 before 10.0.18 and 10.1 before 10.1.13 allows Classic UI stored XSS via Cascading Style Sheets CSS @import directives in an HTML e-mail message...

7.2CVSS6AI score0.21621EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/05 3:15 p.m.8 views

CVE-2025-66376

Zimbra Collaboration ZCS 10 before 10.0.18 and 10.1 before 10.1.13 allows Classic UI stored XSS via Cascading Style Sheets CSS @import directives in an HTML e-mail message...

7.2CVSS0.21621EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/01/05 12:0 a.m.16 views

PT-2026-1290

Name of the Vulnerable Software and Affected Versions Zimbra Collaboration ZCS versions prior to 10.0.18 Zimbra Collaboration ZCS versions prior to 10.1.13 Description The software contains a stored cross-site scripting XSS issue within the Classic UI. This occurs due to Cascading Style Sheets CS...

7.2CVSS6.1AI score0.21621EPSS
SaveExploits0References71
CVE
CVE
added 2026/01/05 12:0 a.m.75 views

CVE-2025-66376

CVE-2025-66376 affects Zimbra Collaboration (ZCS) 10 before 10.0.18 and 10.1 before 10.1.13. The issue is a stored cross-site scripting (XSS) in the Classic UI caused by CSS @import directives in HTML emails. Impact is described as stored XSS in the Classic UI; no exploit details are provided bey...

7.2CVSS5.6AI score0.21621EPSS
SaveIn wildExploits0References6Affected Software1
OSV
OSV
added 2026/01/05 12:0 a.m.9 views

CVE-2025-66376

Zimbra Collaboration ZCS 10 before 10.0.18 and 10.1 before 10.1.13 allows Classic UI stored XSS via Cascading Style Sheets CSS @import directives in an HTML e-mail message...

7.2CVSS5.9AI score0.21621EPSS
SaveExploits0References8
Packet Storm
Packet Storm
added 2026/01/02 12:0 a.m.578 views

📄 Zimbra Collaboration 10.0 / 10.1 Local File Inclusion

This is a proof of concept exploiting a local file inclusion vulnerability existing in the Webmail Classic UI of Zimbra Collaboration ZCS versions 10.0 and 10.1. The issue is due to improper handling of user-supplied request parameters in the RestFilter servlet. zimbramail-CVE-2025-68645-poc A...

8.8CVSS6.7AI score0.31769EPSS
SaveExploits5
GithubExploit
GithubExploit
added 2026/01/01 10:29 a.m.297 views

Exploit for CVE-2025-68645

zimbramail-CVE-2025-68645-poc A proof-of-concept exp...

8.8CVSS7AI score0.31769EPSS
SaveExploits5
RedhatCVE
RedhatCVE
added 2025/12/23 12:25 a.m.21 views

CVE-2025-68645

A Local File Inclusion LFI vulnerability exists in the Webmail Classic UI of Zimbra Collaboration ZCS 10.0 and 10.1 because of improper handling of user-supplied request parameters in the RestFilter servlet. An unauthenticated remote attacker can craft requests to the /h/rest endpoint to influenc...

8.8CVSS7.2AI score0.31769EPSS
SaveExploits5References1
NVD
NVD
added 2025/12/22 6:16 p.m.9 views

CVE-2025-68645

A Local File Inclusion LFI vulnerability exists in the Webmail Classic UI of Zimbra Collaboration ZCS 10.0 and 10.1 because of improper handling of user-supplied request parameters in the RestFilter servlet. An unauthenticated remote attacker can craft requests to the /h/rest endpoint to influenc...

8.8CVSS0.31769EPSS
SaveExploits5References3
Cvelist
Cvelist
added 2025/12/22 12:0 a.m.36 views

CVE-2025-68645

A Local File Inclusion LFI vulnerability exists in the Webmail Classic UI of Zimbra Collaboration ZCS 10.0 and 10.1 because of improper handling of user-supplied request parameters in the RestFilter servlet. An unauthenticated remote attacker can craft requests to the /h/rest endpoint to influenc...

0.31769EPSS
SaveExploits5References2
Vulnrichment
Vulnrichment
added 2025/12/22 12:0 a.m.4 views

CVE-2025-68645

A Local File Inclusion LFI vulnerability exists in the Webmail Classic UI of Zimbra Collaboration ZCS 10.0 and 10.1 because of improper handling of user-supplied request parameters in the RestFilter servlet. An unauthenticated remote attacker can craft requests to the /h/rest endpoint to influenc...

6.8AI score0.31769EPSS
SaveExploits5References2
CVE
CVE
added 2025/12/22 12:0 a.m.211 views

CVE-2025-68645

Summary: CVE-2025-68645 is a Local File Inclusion in Zimbra Collaboration (ZCS) Webmail Classic UI (10.0/10.1) caused by improper handling in the RestFilter servlet. An unauthenticated attacker can craft requests to the /h/rest endpoint to influence internal request dispatching and include arbitr...

8.8CVSS6.8AI score0.31769EPSS
SaveIn wildExploits5References3Affected Software1
OSV
OSV
added 2025/12/22 12:0 a.m.8 views

CVE-2025-68645

A Local File Inclusion LFI vulnerability exists in the Webmail Classic UI of Zimbra Collaboration ZCS 10.0 and 10.1 because of improper handling of user-supplied request parameters in the RestFilter servlet. An unauthenticated remote attacker can craft requests to the /h/rest endpoint to influenc...

8.8CVSS6.8AI score0.31769EPSS
SaveExploits5References5
OSV
OSV
added 2025/12/15 7:42 p.m.6 views

CVE-2025-12035 Bluetooth: Integer Overflow in Bluetooth Classic (BR/EDR) L2CAP

An integer overflow condition exists in Bluetooth Host stack, within the btbraclrecv routine a critical path for processing inbound BR/EDR L2CAP traffic...

6.5CVSS6AI score0.00188EPSS
SaveExploits0References4
GithubExploit
GithubExploit
added 2025/12/08 2:10 p.m.213 views

Exploit for CVE-2025-63895

JXLInfotainmentCVE-2025-63895 CVE-2025-63895 Attack N...

6.9AI score0.00279EPSS
SaveExploits2
GithubExploit
GithubExploit
added 2025/12/08 2:10 p.m.184 views

Exploit for CVE-2025-63895

JXLInfotainment-CVE-2025-63895 CVE-2025-63896 Attack...

6.9AI score0.00279EPSS
SaveExploits3
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2025/12/05 5:12 a.m.9 views

Multiple vulnerabilities in ABB Terra AC Wallbox

Overview Terra AC Wallbox provided by ABB contains the following vulnerability. Heap-based buffer overflow CWE-122 - CVE-2025-10504 Classic buffer overflow CWE-120 - CVE-2025-12142 Stack-based buffer overflow CWE-121 - CVE-2025-12143 Ryo Kato of Panasonic reported this vulnerability to IPA...

6.9CVSS7.4AI score0.00202EPSS
SaveExploits0References6
Rows per page
Query Builder