Lucene search
+L

5620 matches found

attackerkb
attackerkb
•added 2026/03/02 2:02 a.m.•14 views

CVE-2026-3405

A vulnerability has been found in thinkgem JeeSite up to 5.15.1. The affected element is an unknown function of the component Connection Handler. The manipulation leads to path traversal. It is possible to initiate the attack remotely. The attack is considered to have high complexity. The...

8.1CVSS5.2AI score0.00906EPSS
SaveExploits0References4Affected Software1
EUVD
EUVD
•added 2026/03/02 2:02 a.m.•35 views

EUVD-2026-9138

A vulnerability has been found in thinkgem JeeSite up to 5.15.1. The affected element is an unknown function of the component Connection Handler. The manipulation leads to path traversal. It is possible to initiate the attack remotely. The attack is considered to have high complexity. The...

3.1CVSS5.2AI score0.00906EPSS
SaveExploits0References4
CVE
CVE
•added 2026/03/02 2:02 a.m.•57 views

CVE-2026-3405

CVE-2026-3405 affects thinkgem JeeSite up to 5.15.1, in the Connection Handler component. The issue is a path traversal vulnerability that can be triggered remotely. Documents consistently describe the attack as having high complexity and that exploitability is difficult, with the exploit details...

8.1CVSS4.3AI score0.00906EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2026/03/02 2:02 a.m.•17 views

CVE-2026-3405 thinkgem JeeSite Connection path traversal

A vulnerability has been found in thinkgem JeeSite up to 5.15.1. The affected element is an unknown function of the component Connection Handler. The manipulation leads to path traversal. It is possible to initiate the attack remotely. The attack is considered to have high complexity. The...

2.3CVSS4.9AI score
SaveExploits0References6
Cvelist
Cvelist
•added 2026/03/02 12:02 a.m.•58 views

CVE-2026-3401 SourceCodester Web-based Pharmacy Product Management System session expiration

A weakness has been identified in SourceCodester Web-based Pharmacy Product Management System 1.0. This affects an unknown part. This manipulation causes session expiration. Remote exploitation of the attack is possible. The complexity of an attack is rather high. It is indicated that the...

3.1CVSS0.00513EPSS
SaveExploits1References5
EUVD
EUVD
•added 2026/03/02 12:02 a.m.•28 views

EUVD-2026-9134

A weakness has been identified in SourceCodester Web-based Pharmacy Product Management System 1.0. This affects an unknown part. This manipulation causes session expiration. Remote exploitation of the attack is possible. The complexity of an attack is rather high. It is indicated that the...

3.1CVSS5.2AI score0.00513EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/02 12:00 a.m.•3 views

CVE-2026-3405: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability has been found in thinkgem JeeSite up to 5.15.1. The affected element is an unknown function of the component Connection Handler. The manipulation leads to path traversal. It is possible to initiate the attack remotely. The attack is considered to have high complexity. The...

8.1CVSS4.6AI score0.00906EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/02 12:00 a.m.•39 views

PT-2026-22523

A weakness has been identified in SourceCodester Web-based Pharmacy Product Management System 1.0. This affects an unknown part. This manipulation causes session expiration. Remote exploitation of the attack is possible. The complexity of an attack is rather high. It is indicated that the...

3.1CVSS5.2AI score0.00513EPSS
SaveExploits1References6
CVE
CVE
•added 2026/02/27 5:32 a.m.•64 views

CVE-2026-3293

CVE-2026-3293 affects snowflake-bdb snowflake-jdbc up to 4.0.1, specifically the SdkProxyRoutePlanner (src/main/java/net/snowflake/client/internal/core/SdkProxyRoutePlanner.java) in the JDBC URL Handler. The vulnerability arises from manipulating the nonProxyHosts argument, which can cause ineffi...

5.5CVSS4.5AI score0.00195EPSS
SaveExploits1References8Affected Software1
RedhatCVE
RedhatCVE
•added 2026/02/27 12:41 a.m.•27 views

CVE-2026-3193

A vulnerability was detected in Chia Blockchain 2.1.0. Impacted is an unknown function of the file /sendtransaction. The manipulation results in cross-site request forgery. The attack may be performed from remote. The attack requires a high level of complexity. The exploitability is considered...

3.1CVSS4.8AI score0.00233EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/27 12:00 a.m.•6 views

CVE-2026-3293: Inefficient Regular Expression Complexity

A weakness has been identified in snowflakedb snowflake-jdbc up to 4.0.1. Impacted is the function SdkProxyRoutePlanner of the file src/main/java/net/snowflake/client/internal/core/SdkProxyRoutePlanner.java of the component JDBC URL Handler. Executing a manipulation of the argument nonProxyHosts...

5.5CVSS4.8AI score0.00195EPSS
SaveExploits1References1
EUVD
EUVD
•added 2026/02/26 6:31 p.m.•21 views

EUVD-2026-8866

Inefficient Regular Expression Complexity CWE-1333 in the AI Inference Anonymization Engine in Kibana can lead Denial of Service via Regular Expression Exponential Blowup CAPEC-492...

4.9CVSS5.3AI score0.00525EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/02/26 5:07 p.m.•10 views

CVE-2026-26936 Inefficient Regular Expression Complexity in Kibana Leading to Denial of Service

Inefficient Regular Expression Complexity CWE-1333 in the AI Inference Anonymization Engine in Kibana can lead Denial of Service via Regular Expression Exponential Blowup CAPEC-492...

4.9CVSS5.9AI score0.00525EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/02/26 5:07 p.m.•37 views

CVE-2026-26936 Inefficient Regular Expression Complexity in Kibana Leading to Denial of Service

Inefficient Regular Expression Complexity CWE-1333 in the AI Inference Anonymization Engine in Kibana can lead Denial of Service via Regular Expression Exponential Blowup CAPEC-492...

4.9CVSS0.00525EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/26 12:00 a.m.•6 views

CVE-2026-26936: Inefficient Regular Expression Complexity

Inefficient Regular Expression Complexity CWE-1333 in the AI Inference Anonymization Engine in Kibana can lead Denial of Service via Regular Expression Exponential Blowup CAPEC-492...

7.5CVSS5.8AI score0.00525EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/02/25 6:31 p.m.•24 views

EUVD-2026-8692

A vulnerability was detected in Chia Blockchain 2.1.0. Impacted is an unknown function of the file /sendtransaction. The manipulation results in cross-site request forgery. The attack may be performed from remote. The attack requires a high level of complexity. The exploitability is considered...

3.1CVSS4.8AI score0.00233EPSS
SaveExploits1References4
OSV
OSV
•added 2026/02/25 6:23 p.m.•15 views

CVE-2026-3194

A flaw has been found in Chia Blockchain 2.1.0. The affected element is the function sendtransaction/getprivatekey of the component RPC Server Master Passphrase Handler. This manipulation causes missing authentication. The attack can only be executed locally. The attack's complexity is rated as...

7CVSS4.7AI score0.0024EPSS
SaveExploits1References4
NVD
NVD
•added 2026/02/25 6:23 p.m.•22 views

CVE-2026-3194

A flaw has been found in Chia Blockchain 2.1.0. The affected element is the function sendtransaction/getprivatekey of the component RPC Server Master Passphrase Handler. This manipulation causes missing authentication. The attack can only be executed locally. The attack's complexity is rated as...

7CVSS0.0024EPSS
SaveExploits1References4
OSV
OSV
•added 2026/02/25 5:25 p.m.•22 views

CVE-2026-3192

A security vulnerability has been detected in Chia Blockchain 2.1.0. This issue affects the function authenticate of the file rpcserverbase.py of the component RPC Credential Handler. The manipulation leads to improper authentication. The attack is possible to be carried out remotely. The attack ...

8.1CVSS5.1AI score0.009EPSS
SaveExploits1References3
NVD
NVD
•added 2026/02/25 5:25 p.m.•24 views

CVE-2026-3193

A vulnerability was detected in Chia Blockchain 2.1.0. Impacted is an unknown function of the file /sendtransaction. The manipulation results in cross-site request forgery. The attack may be performed from remote. The attack requires a high level of complexity. The exploitability is considered...

3.1CVSS0.00233EPSS
SaveExploits1References3
Rows per page
Query Builder