Lucene search
+L

225247 matches found

EUVD
EUVD
added 2026/07/17 5:56 p.m.17 views

EUVD-2026-45241

Shopware is an open commerce platform. Prior to 6.6.10.18 and 6.7.10.1, the order state transition features /api/action/order/orderId/state/transition and similar transaction and delivery transition routes in src/Core/Checkout/Order/Api/OrderActionController.php do not declare...

6.5CVSS5.3AI score0.00233EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/07/17 5:56 p.m.48 views

CVE-2026-48014 Shopware: Admin API ACL Bypass in Order State Transition Endpoints

Shopware is an open commerce platform. Prior to 6.6.10.18 and 6.7.10.1, the order state transition features /api/action/order/orderId/state/transition and similar transaction and delivery transition routes in src/Core/Checkout/Order/Api/OrderActionController.php do not declare...

6.5CVSS0.00233EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/07/17 5:56 p.m.12 views

CVE-2026-48014

Shopware is an open commerce platform. Prior to 6.6.10.18 and 6.7.10.1, the order state transition features /api/action/order/orderId/state/transition and similar transaction and delivery transition routes in src/Core/Checkout/Order/Api/OrderActionController.php do not declare...

6.5CVSS5.2AI score0.00233EPSS
SaveExploits0References6Affected Software2
CVE
CVE
added 2026/07/17 5:25 p.m.38 views

CVE-2026-9762

CVE-2026-9762 affects IBM Db2 Client components: the IBM Data Server Driver for JDBC and SQLJ. A remote code execution (RCE) exists when the JDBC URL is under user control. Affected products/versions: Db2 client 11.5.0–11.5.9 and 12.1.0–12.1.4. Root cause identified as CWE-94 (Improper Code Gener...

7.8CVSS6.2AI score0.00165EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/07/17 5:25 p.m.52 views

CVE-2026-9762 IBM® Data Server driver for JDBC and SQLJ is vulnerable to remote code execution when jdbc url is under user control

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution when jdbc url is under user control...

7.8CVSS0.00165EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/07/17 5:25 p.m.14 views

CVE-2026-9762 IBM® Data Server driver for JDBC and SQLJ is vulnerable to remote code execution when jdbc url is under user control

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to remote code execution when jdbc url is under user control...

7.8CVSS6.3AI score0.00165EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/17 5:17 p.m.12 views

CVE-2026-12693

Authorization bypass through User-Controlled key vulnerability in Vimesoft Inc. Enterprise Video Platform allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Enterprise Video Platform: from 3.11.0.0 before 3.25.0...

9.4CVSS0.00264EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/17 5:17 p.m.11 views

CVE-2026-12694

Missing Authorization vulnerability in Vimesoft Inc. Enterprise Video Platform allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Enterprise Video Platform: from 3.11.0.0 before 3.25.0...

9.1CVSS0.00243EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/17 4:59 p.m.14 views

EUVD-2026-45229

Missing Authorization vulnerability in Vimesoft Inc. Enterprise Video Platform allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Enterprise Video Platform: from 3.11.0.0 before 3.25.0...

9.1CVSS5.3AI score0.00243EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/17 4:59 p.m.38 views

CVE-2026-12694 Missing Authorization in Vimesoft's Enterprise Video Platform

Missing Authorization vulnerability in Vimesoft Inc. Enterprise Video Platform allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Enterprise Video Platform: from 3.11.0.0 before 3.25.0...

9.1CVSS0.00243EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/17 4:59 p.m.13 views

CVE-2026-12694

Missing Authorization vulnerability in Vimesoft Inc. Enterprise Video Platform allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Enterprise Video Platform: from 3.11.0.0 before 3.25.0...

9.1CVSS5.3AI score0.00243EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
added 2026/07/17 4:50 p.m.11 views

EUVD-2026-45227

Authorization bypass through User-Controlled key vulnerability in Vimesoft Inc. Enterprise Video Platform allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Enterprise Video Platform: from 3.11.0.0 before 3.25.0...

9.4CVSS5.3AI score0.00264EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/17 4:50 p.m.26 views

CVE-2026-12693

The CVE-2026-12693 entry concerns an Identity/Authorization weakness in Vimesoft Inc.'s Enterprise Video Platform. Affected software: Enterprise Video Platform versions 3.11.0.0 up to, but not including, 3.25.0. The issue is an Authorization bypass via a User-Controlled key, leading to a lack of ...

9.4CVSS5.3AI score0.00264EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/17 4:50 p.m.41 views

CVE-2026-12693 IDOR in Vimesoft's Enterprise Video Platform

Authorization bypass through User-Controlled key vulnerability in Vimesoft Inc. Enterprise Video Platform allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Enterprise Video Platform: from 3.11.0.0 before 3.25.0...

9.4CVSS0.00264EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/17 4:50 p.m.10 views

CVE-2026-12693

Authorization bypass through User-Controlled key vulnerability in Vimesoft Inc. Enterprise Video Platform allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Enterprise Video Platform: from 3.11.0.0 before 3.25.0...

9.4CVSS5.3AI score0.00264EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
added 2026/07/17 3:32 p.m.16 views

EUVD-2026-45195

Dendrite through 0.13.8 contains an improper access control vulnerability in the syncapi /context endpoint syncapi/routing/context.go that allows authenticated local users to access post-leave room state events by exploiting a flawed membership check that evaluates only the RoomExists field while...

5.3CVSS5.4AI score0.0016EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/07/17 3:32 p.m.41 views

CVE-2026-63097 Dendrite 0.13.8 syncapi /context Endpoint Post-Leave State Exposure

Dendrite through 0.13.8 contains an improper access control vulnerability in the syncapi /context endpoint syncapi/routing/context.go that allows authenticated local users to access post-leave room state events by exploiting a flawed membership check that evaluates only the RoomExists field while...

5.3CVSS0.0016EPSS
SaveExploits0References2
NVD
NVD
added 2026/07/17 3:16 p.m.11 views

CVE-2026-51083

Incorrect access control in Proxmox Virtual Environment PVE 9.x qemu-server before 9.1.8 and 8.x before 8.4.8 allows users within limited privileges to obtain hashed passwords via the cloudinit/dump API...

6.5CVSS0.00201EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/17 2:17 p.m.11 views

CVE-2026-16072

A flaw was found in the organization management component of Keycloak. A delegated administrator with permission to manage organizations can create an invitation for a non-existent email address and then retrieve the secret registration link directly through the application programming interface...

4.9CVSS0.00201EPSS
SaveExploits0References2
NVD
NVD
added 2026/07/17 1:19 p.m.16 views

CVE-2026-7189

Insertion of sensitive information into sent data vulnerability in Proliz Software Ltd. Co. Proliz's OBS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Proliz's OBS: before v3.6.0...

7.5CVSS0.00245EPSS
SaveExploits0References1
Rows per page
Query Builder