Lucene search
+L

54831 matches found

RedHat Linux
RedHat Linux
added 2026/07/27 7:22 p.m.4 views

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: go-fdo-client: go-fdo-client-1.0.0-2.1.hum1 aarch64, x8664 go-fdo-client-1.0.0-2.1.hum1.src src Security Fixes: go-fdo-client: CVE-2026-56852...

7.5CVSS7.2AI score0.00446EPSS
SaveExploits0References3
NVD
NVD
added 2026/07/27 7:17 p.m.13 views

CVE-2026-66031

Ekushey Project Manager CRM through version 5.0 contains a stored cross-site scripting vulnerability that allows authenticated client users to inject arbitrary HTML and JavaScript by entering malicious payloads into the Reply Ticket field. Attackers can craft and store malicious scripts that...

5.4CVSS0.00165EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2026/07/27 6:20 p.m.10 views

libssh2: libssh2: Arbitrary code execution via double-free in SFTP session

A flaw was found in libssh2. A malicious SSH Secure Shell server can exploit a double-free vulnerability in the sftpopen function. This flaw allows the server to corrupt the heap memory of an authenticated client when it opens an SFTP SSH File Transfer Protocol session. This heap corruption can...

8.8CVSS6.4AI score0.00288EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/07/27 6:20 p.m.10 views

libssh2: libssh2: Denial of service or information disclosure via malformed SSH publickey response

A flaw in libssh2 allows a malicious SSH server to send a malformed public key response, triggering an invalid memory cleanup. This can cause the connecting client application to crash or leak information...

8.3CVSS6.9AI score0.00277EPSS
SaveExploits0References7
NVD
NVD
added 2026/07/27 6:17 p.m.11 views

CVE-2026-66029

Ekushey Project Manager CRM through version 5.0 contains a stored cross-site scripting vulnerability that allows authenticated client users to inject arbitrary HTML and JavaScript by entering malicious payloads into the client Name field on the Edit Profile page without sanitization. Attackers ca...

5.4CVSS0.00165EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/07/27 6:9 p.m.9 views

EUVD-2026-49397

Ekushey Project Manager CRM through version 5.0 contains a stored cross-site scripting vulnerability that allows authenticated client users to inject arbitrary HTML and JavaScript by entering malicious payloads into the Reply Ticket field. Attackers can craft and store malicious scripts that...

5.4CVSS6AI score0.00165EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/07/27 6:9 p.m.31 views

CVE-2026-66031 Ekushey Project Manager CRM 5.0 Stored XSS via Reply Ticket Field

Ekushey Project Manager CRM through version 5.0 contains a stored cross-site scripting vulnerability that allows authenticated client users to inject arbitrary HTML and JavaScript by entering malicious payloads into the Reply Ticket field. Attackers can craft and store malicious scripts that...

5.4CVSS0.00165EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/07/27 6:9 p.m.8 views

CVE-2026-66031

Ekushey Project Manager CRM through version 5.0 contains a stored cross-site scripting vulnerability that allows authenticated client users to inject arbitrary HTML and JavaScript by entering malicious payloads into the Reply Ticket field. Attackers can craft and store malicious scripts that...

5.4CVSS6AI score0.00165EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/07/27 6:6 p.m.40 views

CVE-2026-66030 Ekushey Project Manager CRM 5.0 Stored XSS via Ticket Title Field

Ekushey Project Manager CRM through version 5.0 ccontains a stored cross-site scripting vulnerability that allows authenticated client users to inject arbitrary HTML and JavaScript by entering malicious payloads into the Ticket Title field on the Create New Ticket page. Attackers can craft and...

5.4CVSS0.00165EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/07/27 6:6 p.m.7 views

CVE-2026-66030

Ekushey Project Manager CRM through version 5.0 ccontains a stored cross-site scripting vulnerability that allows authenticated client users to inject arbitrary HTML and JavaScript by entering malicious payloads into the Ticket Title field on the Create New Ticket page. Attackers can craft and...

5.4CVSS6AI score0.00165EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/07/27 6:6 p.m.9 views

EUVD-2026-49395

Ekushey Project Manager CRM through version 5.0 contains a stored cross-site scripting vulnerability that allows authenticated client users to inject arbitrary HTML and JavaScript by entering malicious payloads into the Ticket Title field on the Create New Ticket page. Attackers can craft and sto...

5.4CVSS6AI score0.00165EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/07/27 6:2 p.m.8 views

CVE-2026-66029

Ekushey Project Manager CRM through version 5.0 contains a stored cross-site scripting vulnerability that allows authenticated client users to inject arbitrary HTML and JavaScript by entering malicious payloads into the client Name field on the Edit Profile page without sanitization. Attackers ca...

5.4CVSS6AI score0.00165EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/07/27 6:2 p.m.9 views

EUVD-2026-49393

Ekushey Project Manager CRM through version 5.0 contains a stored cross-site scripting vulnerability that allows authenticated client users to inject arbitrary HTML and JavaScript by entering malicious payloads into the client Name field on the Edit Profile page without sanitization. Attackers ca...

5.4CVSS6AI score0.00165EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/07/27 6:2 p.m.35 views

CVE-2026-66029 Ekushey Project Manager CRM 5.0 Stored XSS via Client Name Field

Ekushey Project Manager CRM through version 5.0 contains a stored cross-site scripting vulnerability that allows authenticated client users to inject arbitrary HTML and JavaScript by entering malicious payloads into the client Name field on the Edit Profile page without sanitization. Attackers ca...

5.4CVSS0.00165EPSS
SaveExploits0References3
CVE
CVE
added 2026/07/27 6:2 p.m.15 views

CVE-2026-66029

CVE-2026-66029 affects Ekushey Project Manager CRM up to version 5.0. A stored cross-site scripting (XSS) vulnerability exists in the client management flow: authenticated client users can inject arbitrary HTML/JavaScript by entering payloads into the client Name field on the Edit Profile page, w...

5.4CVSS6AI score0.00165EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/07/27 6:0 p.m.8 views

CVE-2026-66028 Ekushey Project Manager CRM 5.0 Missing Uniqueness Constraint via Client Email

Ekushey Project Manager CRM through version 5.0 contains a missing uniqueness constraint vulnerability that allows authenticated administrators to create duplicate client accounts with identical email and password credentials. Attackers can exploit the lack of email field uniqueness enforcement t...

7.1CVSS5.9AI score0.00321EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/27 5:48 p.m.7 views

CVE-2026-64643 Next.js: Unauthenticated Disclosure of Internal Server Function endpoints

Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 through 16.2.10, Next.js applications using App Router, Server Actions use server or use cache endpoints can be disclosed bypassing any authentication on the pages where these...

6.3CVSS5.8AI score
SaveExploits0References7
ATTACKERKB
ATTACKERKB
added 2026/07/27 5:48 p.m.9 views

CVE-2026-64643

Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 through 16.2.10, Next.js applications using App Router, Server Actions use server or use cache endpoints can be disclosed bypassing any authentication on the pages where these...

6.3CVSS5.7AI score0.00516EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2026/07/27 4:17 p.m.5 views

DEBIAN-CVE-2026-55953

The Erlang/OTP ssl TLS 1.2 and earlier and DTLS client does not verify that the cipher suite selected by the server in ServerHello was among the suites offered by the client in ClientHello. The client-side tlshandshake:hello/5 handler validates the negotiated protocol version and the downgrade...

9.1CVSS5.5AI score0.00245EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/27 3:21 p.m.9 views

EUVD-2026-49323

The Erlang/OTP ssl TLS 1.2 and earlier and DTLS client does not verify that the cipher suite selected by the server in ServerHello was among the suites offered by the client in ClientHello. The client-side tlshandshake:hello/5 handler validates the negotiated protocol version and the downgrade...

9.1CVSS5.9AI score0.00245EPSS
SaveExploits0References7
Rows per page
Query Builder