Lucene search
K

376 matches found

RedhatCVE
RedhatCVE
added 4 days ago4 views

CVE-2025-15024

Improper Control of Generation of Code 'Code Injection' vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Automation System allows Remote Code Inclusion. This issue affects Library Automation System: from v.19.5 before v.22....

8.8CVSS5.6AI score0.00045EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 4 days ago5 views

CVE-2026-9157

Improper input validation, Unrestricted upload of file with dangerous type vulnerability in Gmission Web Fax allows Remote Code Inclusion. This issue affects Web Fax: from 3.0 before 3.1...

8.6CVSS5.5AI score0.00027EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 4 days ago5 views

CVE-2026-6787

Use of Hard-coded Cryptographic Key vulnerability in WatchGuard Agent on Windows allows Inclusion of Code in Existing Process.This issue affects WatchGuard Agent: before 1.25.03.0000...

8.5CVSS5.5AI score0.00015EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 4 days ago6 views

CVE-2026-39440

Improper Control of Generation of Code 'Code Injection' vulnerability in Funnelforms LLC FunnelFormsPro allows Remote Code Inclusion.This issue affects FunnelFormsPro: from n/a through 3.8.1...

9.9CVSS5.5AI score0.00022EPSS
Exploits1References1
NVD
NVD
added 2026/05/21 9:16 a.m.8 views

CVE-2026-9157

Improper input validation, Unrestricted upload of file with dangerous type vulnerability in Gmission Web Fax allows Remote Code Inclusion. This issue affects Web Fax: from 3.0 before 3.1...

8.6CVSS0.00027EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/21 8:7 a.m.7 views

CVE-2026-9157

Improper input validation, Unrestricted upload of file with dangerous type vulnerability in Gmission Web Fax allows Remote Code Inclusion. This issue affects Web Fax: from 3.0 before 3.1...

8.6CVSS5.8AI score0.00027EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/05/21 12:0 a.m.5 views

PT-2026-42443

Improper input validation, Unrestricted upload of file with dangerous type vulnerability in Gmission Web Fax allows Remote Code Inclusion. This issue affects Web Fax: from 3.0 before 3.1...

8.6CVSS5.8AI score0.00027EPSS
Exploits0References2
EUVD
EUVD
added 2026/05/14 5:48 p.m.5 views

EUVD-2025-209859

Improper Control of Generation of Code 'Code Injection' vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Automation System allows Remote Code Inclusion. This issue affects Library Automation System: from v.19.5 before v.22....

8.8CVSS5.8AI score0.00045EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/14 5:48 p.m.2 views

CVE-2025-15024

Improper Control of Generation of Code 'Code Injection' vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Automation System allows Remote Code Inclusion. This issue affects Library Automation System: from v.19.5 before v.22....

8.8CVSS5.8AI score0.00045EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2026/05/14 5:48 p.m.10 views

CVE-2025-15024

The CVE-2025-15024 entry concerns the Library Automation System from Yordam Information Technology (library management software). Affected versions are 19.5 up to but not including 22.1. The vulnerability is described as an improper control of code generation, i.e., a Code Injection issue that en...

8.8CVSS5.8AI score0.00045EPSS
Exploits0References1
NVD
NVD
added 2026/05/06 4:16 p.m.3 views

CVE-2026-6787

Use of Hard-coded Cryptographic Key vulnerability in WatchGuard Agent on Windows allows Inclusion of Code in Existing Process.This issue affects WatchGuard Agent: before 1.25.03.0000...

8.5CVSS0.00015EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/06 3:46 p.m.2 views

CVE-2026-6787

Use of Hard-coded Cryptographic Key vulnerability in WatchGuard Agent on Windows allows Inclusion of Code in Existing Process.This issue affects WatchGuard Agent: before 1.25.03.0000...

8.5CVSS5.8AI score0.00015EPSS
Exploits0References2
CVE
CVE
added 2026/05/06 3:46 p.m.6 views

CVE-2026-6787

The CVE-2026-6787 issue affects WatchGuard Agent on Windows prior to version 1.25.03.0000. It is a local, low-privilege vulnerability caused by a hard-coded cryptographic key that allows inclusion of code into an existing process, with high impact to confidentiality, integrity, and availability. ...

8.5CVSS5.8AI score0.00015EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2026/05/06 3:46 p.m.37 views

CVE-2026-6787 Usage of a hard-coded cryptographic key in WatchGuard Agent allows inclusion of code into existing process

Use of Hard-coded Cryptographic Key vulnerability in WatchGuard Agent on Windows allows Inclusion of Code in Existing Process.This issue affects WatchGuard Agent: before 1.25.03.0000...

8.5CVSS0.00015EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/05/06 3:46 p.m.5 views

CVE-2026-6787 Usage of a hard-coded cryptographic key in WatchGuard Agent allows inclusion of code into existing process

Use of Hard-coded Cryptographic Key vulnerability in WatchGuard Agent on Windows allows Inclusion of Code in Existing Process.This issue affects WatchGuard Agent: before 1.25.03.0000...

8.5CVSS5.8AI score0.00015EPSS
Exploits0References1
EUVD
EUVD
added 2026/04/23 3:38 p.m.1 views

EUVD-2026-25220

Improper Control of Generation of Code 'Code Injection' vulnerability in Funnelforms LLC FunnelFormsPro allows Remote Code Inclusion.This issue affects FunnelFormsPro: from n/a through 3.8.1...

9.9CVSS5.8AI score0.00022EPSS
Exploits1References2
NVD
NVD
added 2026/04/23 1:16 p.m.2 views

CVE-2026-39440

Improper Control of Generation of Code 'Code Injection' vulnerability in Funnelforms LLC FunnelFormsPro allows Remote Code Inclusion.This issue affects FunnelFormsPro: from n/a through 3.8.1...

9.9CVSS0.00022EPSS
Exploits1References1
Cvelist
Cvelist
added 2026/04/23 12:11 p.m.32 views

CVE-2026-39440 WordPress FunnelFormsPro plugin <= 3.8.1 - Remote Code Execution (RCE) vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in Funnelforms LLC FunnelFormsPro allows Remote Code Inclusion.This issue affects FunnelFormsPro: from n/a through 3.8.1...

9.9CVSS0.00022EPSS
Exploits1References1
CVE
CVE
added 2026/04/23 12:11 p.m.26 views

CVE-2026-39440

Summary: CVE-2026-39440 affects the WordPress plugin FunnelFormsPro (FunnelForms LLC) up to version 3.8.1. The issue is an improper control of code generation (code injection) that enables Remote Code Inclusion, effectively a Remote Code Execution vulnerability. The description indicates the affe...

9.9CVSS5.8AI score0.00022EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2026/04/23 12:0 a.m.10 views

PT-2026-34660

Name of the Vulnerable Software and Affected Versions FunnelFormsPro versions n/a through 3.8.1 Description Improper Control of Generation of Code allows Remote Code Inclusion, which enables an attacker to inject and execute arbitrary code. Recommendations At the moment, there is no information...

9.9CVSS6.1AI score0.00022EPSS
Exploits1References4
Rows per page
Query Builder