Lucene search
+L

497594 matches found

Cvelist
Cvelist
added 2 days ago50 views

CVE-2026-68979 Apache NiFi: Missing Authorization for Components Referenced by Parameter Context Updates

Apache NiFI 1.10.0 through 2.10.0 provide a Parameter Context update REST API method that does not enforce authorization checking on components referencing Parameter values. Updating a Parameter Context can change parameter values that affect referencing components, but framework authorization wa...

5.9CVSS0.00353EPSS
SaveExploits0References1
EUVD
EUVD
added 2 days ago6 views

EUVD-2026-52418

Apache NiFI 1.10.0 through 2.10.0 provide a Parameter Context update REST API method that does not enforce authorization checking on components referencing Parameter values. Updating a Parameter Context can change parameter values that affect referencing components, but framework authorization wa...

5.9CVSS6AI score0.00353EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2 days ago6 views

CVE-2026-68979

Apache NiFI 1.10.0 through 2.10.0 provide a Parameter Context update REST API method that does not enforce authorization checking on components referencing Parameter values. Updating a Parameter Context can change parameter values that affect referencing components, but framework authorization wa...

5.9CVSS6AI score0.00353EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2 days ago6 views

CVE-2026-18632

A security flaw has been discovered in langgenius dify up to 1.14.2. This issue affects the function jinja2.Template of the file api/core/helper/codeexecutor/jinja2/jinja2transformer.py of the component Jinja2 Handler. The manipulation results in improper neutralization of special elements used i...

6.5CVSS6.2AI score0.00376EPSS
SaveExploits0References5Affected Software1
NVD
NVD
added 2 days ago9 views

CVE-2026-59912

Dell Display and Peripheral Manager DDPM Mac, versions prior to 2.3.0.1005, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges and arbitrary code execution...

7.8CVSS0.00102EPSS
SaveExploits0References1
F5 Networks
F5 Networks
added 2 days ago8 views

K000162741: Ruby on Rails Action Pack vulnerability CVE-2026-66066

Security Advisory Description Action Pack is a framework for handling and responding to web requests. In versions prior to 7.2.3.2, 8.0.5.1 and 8.1.3.1, Active Storage does not disable libvips operations marked unsafe for untrusted content, allowing a crafted upload to invoke such an operation...

9.5CVSS8.8AI score0.01701EPSS
SaveExploits6
NVD
NVD
added 2 days ago10 views

CVE-2026-61524

WebsiteBaker CMS before 2.13.10 contains an unrestricted file upload vulnerability in the module installation feature that allows authenticated administrators to achieve remote code execution by uploading a crafted ZIP archive containing a PHP webshell alongside a valid info.php metadata file...

8.6CVSS0.00555EPSS
SaveExploits0References3
NVD
NVD
added 2 days ago10 views

CVE-2026-61523

WebsiteBaker CMS before 2.13.10 contains a code injection vulnerability in the Droplets editor that allows authenticated administrators to inject arbitrary PHP code by submitting malicious content through the droplet Code field, which is written verbatim to a publicly accessible PHP file with no...

8.6CVSS0.00644EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2 days ago4 views

Security Bulletin: IBM QRadar SIEM is vulnerable to remote code execution by privileged users

Summary An authenticated QRadar SIEM administrator can execute arbitrary commands on the QRadar host due to improper validation of user supplied input. Vulnerability Details CVEID:CVE-2026-13477 DESCRIPTION: QRadar could allow an authenticated privileged user to execute arbitrary commands with...

4.7CVSS5.9AI score
SaveExploits0Affected Software1
EUVD
EUVD
added 2 days ago9 views

EUVD-2026-52398

Dell Display and Peripheral Manager DDPM Mac, versions prior to 2.3.0.1005, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges and arbitrary code execution...

7.8CVSS5.8AI score0.00102EPSS
SaveExploits0References1
CVE
CVE
added 2 days ago22 views

CVE-2026-59912

Dell Display and Peripheral Manager (DDPM Mac) prior to 2.3.0.1005 is affected by an Improper Access Control vulnerability. A low-privileged attacker with local access could exploit this to achieve Elevation of Privileges and arbitrary code execution. Affected component: DDPM Mac (Mac version). R...

7.8CVSS5.8AI score0.00102EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2 days ago48 views

CVE-2026-59912

Dell Display and Peripheral Manager DDPM Mac, versions prior to 2.3.0.1005, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges and arbitrary code execution...

7.8CVSS0.00102EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2 days ago6 views

CVE-2026-61524 WebsiteBaker CMS < 2.13.10 File Upload RCE via Module Installation

WebsiteBaker CMS before 2.13.10 contains an unrestricted file upload vulnerability in the module installation feature that allows authenticated administrators to achieve remote code execution by uploading a crafted ZIP archive containing a PHP webshell alongside a valid info.php metadata file...

8.6CVSS6.3AI score0.00555EPSS
SaveExploits0References3
EUVD
EUVD
added 2 days ago9 views

EUVD-2026-52394

WebsiteBaker CMS before 2.13.10 contains an unrestricted file upload vulnerability in the module installation feature that allows authenticated administrators to achieve remote code execution by uploading a crafted ZIP archive containing a PHP webshell alongside a valid info.php metadata file...

8.6CVSS6.3AI score0.00555EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2 days ago43 views

CVE-2026-61524 WebsiteBaker CMS < 2.13.10 File Upload RCE via Module Installation

WebsiteBaker CMS before 2.13.10 contains an unrestricted file upload vulnerability in the module installation feature that allows authenticated administrators to achieve remote code execution by uploading a crafted ZIP archive containing a PHP webshell alongside a valid info.php metadata file...

8.6CVSS0.00555EPSS
SaveExploits0References3
CVE
CVE
added 2 days ago22 views

CVE-2026-61524

CVE-2026-61524 affects WebsiteBaker CMS prior to version 2.13.10. An unrestricted file upload in the module installation feature lets authenticated administrators upload a crafted ZIP containing a PHP webshell and a valid info.php metadata file. The archive is extracted to a web-accessible module...

8.6CVSS6.3AI score0.00555EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2 days ago43 views

CVE-2026-61523 WebsiteBaker CMS < 2.13.10 Code Injection via Droplets Editor

WebsiteBaker CMS before 2.13.10 contains a code injection vulnerability in the Droplets editor that allows authenticated administrators to inject arbitrary PHP code by submitting malicious content through the droplet Code field, which is written verbatim to a publicly accessible PHP file with no...

8.6CVSS0.00644EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2 days ago7 views

CVE-2026-61523 WebsiteBaker CMS < 2.13.10 Code Injection via Droplets Editor

WebsiteBaker CMS before 2.13.10 contains a code injection vulnerability in the Droplets editor that allows authenticated administrators to inject arbitrary PHP code by submitting malicious content through the droplet Code field, which is written verbatim to a publicly accessible PHP file with no...

8.6CVSS6.5AI score0.00644EPSS
SaveExploits0References3
EUVD
EUVD
added 2 days ago6 views

EUVD-2026-52393

WebsiteBaker CMS before 2.13.10 contains a code injection vulnerability in the Droplets editor that allows authenticated administrators to inject arbitrary PHP code by submitting malicious content through the droplet Code field, which is written verbatim to a publicly accessible PHP file with no...

8.6CVSS6.5AI score0.00644EPSS
SaveExploits0References3
NVD
NVD
added 2 days ago9 views

CVE-2026-18718

Ghidra contains an arbitrary code execution vulnerability in the Swift demangler analyzer that allows an attacker to execute arbitrary binaries by supplying a malicious Ghidra project with a crafted Swift tool directory path. When a victim opens the attacker-supplied project, SwiftDemanglerAnalyz...

7.1CVSS0.00206EPSS
SaveExploits1References6
Rows per page
Query Builder