Lucene search
+L

266082 matches found

CVE
CVE
•added 2026/09/30 8:13 p.m.•39 views

CVE-2026-102132

A vulnerability in Kiteworks Core allows for privilege escalation due to improper access control within an administrative import function. The system fails to verify if a requesting administrator is authorized to create the specific privileged integration credential being imported. Consequently, ...

7.2CVSS5.8AI score0.0103EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2026/09/30 8:09 p.m.•37 views

CVE-2026-102149

The Kiteworks Email Protection Gateway is vulnerable to an improper access control issue because it fails to sufficiently restrict which account a certificate can be assigned to. An attacker could exploit this to associate a certificate with another user's account, compromising the confidentialit...

9.4CVSS5.8AI score0.00239EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2026/09/30 8:09 p.m.•14 views

CVE-2026-102149 Kiteworks Email Protection Gateway Improper Access Control

Kiteworks Email Protection Gateway did not sufficiently restrict which account a certificate could be assigned to. This could allow an attacker to associate a certificate with another user's account, affecting the confidentiality and integrity of that account's encrypted mail and, where...

9.4CVSS5.8AI score0.00239EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/30 8:09 p.m.•50 views

CVE-2026-102149 Kiteworks Email Protection Gateway Improper Access Control

Kiteworks Email Protection Gateway did not sufficiently restrict which account a certificate could be assigned to. This could allow an attacker to associate a certificate with another user's account, affecting the confidentiality and integrity of that account's encrypted mail and, where...

9.4CVSS0.00239EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/30 8:09 p.m.•16 views

EUVD-2026-90383

A stored cross-site scripting XSS weakness in Kiteworks Core could allow an unauthenticated attacker to store crafted content that later executes arbitrary JavaScript in the authenticated session of an administrator who views the affected page. This could have permitted the attacker to gain full...

9.3CVSS5.9AI score0.00452EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/30 8:09 p.m.•66 views

CVE-2026-102147

A stored cross-site scripting (XSS) weakness exists in Kiteworks Core that allows an unauthenticated attacker to inject and store crafted content. When an administrator views the affected page, the content executes arbitrary JavaScript within their authenticated session. This vulnerability could ...

9.3CVSS5.9AI score0.00452EPSS
SaveExploits0References2Affected Software1
osv_cleanstart
osv_cleanstart
•added 2026/09/30 6:22 p.m.•14 views

CLEANSTART-2026-YR55229 Git is a revision control system

Security vulnerability affects the git package. Git is a revision control system...

9.8CVSS6.4AI score0.0071EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/09/30 6:21 p.m.•8 views

CLEANSTART-2026-BE00083 Git is a revision control system

Security vulnerability affects the git package. Git is a revision control system...

9.8CVSS7.1AI score0.05609EPSS
SaveExploits2References3
osv_cleanstart
osv_cleanstart
•added 2026/09/30 6:20 p.m.•10 views

CLEANSTART-2026-JB28862 Git is a revision control system

Security vulnerability affects the git package. Git is a revision control system...

9.8CVSS7.4AI score0.01026EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart
•added 2026/09/30 6:19 p.m.•12 views

CLEANSTART-2026-MV02449 Git is a revision control system

Security vulnerability affects the git package. Git is a revision control system...

9.8CVSS6.3AI score0.00519EPSS
SaveExploits1References3
NVD
NVD
•added 2026/09/30 6:18 p.m.•14 views

CVE-2026-102375

Missing Authorization vulnerability in Optimole Optimole optimole-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Optimole: from n/a through 4.2.14...

6.5CVSS0.00264EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/30 6:18 p.m.•17 views

CVE-2026-102397

Unauthenticated Broken Access Control in Ultimate Maps by Supsystic = 1.5.5 versions...

6.5CVSS0.00159EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/30 5:39 p.m.•53 views

CVE-2026-102375 WordPress Optimole plugin <= 4.2.14 - Broken Access Control vulnerability

Missing Authorization vulnerability in Optimole Optimole optimole-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Optimole: from n/a through 4.2.14...

6.5CVSS0.00264EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/30 5:39 p.m.•11 views

CVE-2026-102375 WordPress Optimole plugin <= 4.2.14 - Broken Access Control vulnerability

Missing Authorization vulnerability in Optimole Optimole optimole-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Optimole: from n/a through 4.2.14...

6.5CVSS6AI score0.00264EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/30 5:39 p.m.•23 views

EUVD-2026-90221

Subscriber Broken Access Control in Optimole = 4.2.14 versions...

6.5CVSS5.8AI score0.00264EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/30 5:39 p.m.•32 views

CVE-2026-102375

The Optimole plugin for WordPress (versions

6.5CVSS6AI score0.00264EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/30 5:38 p.m.•54 views

CVE-2026-102397 WordPress Ultimate Maps by Supsystic plugin <= 1.5.5 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Ultimate Maps by Supsystic = 1.5.5 versions...

6.5CVSS0.00159EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/30 5:38 p.m.•20 views

EUVD-2026-90213

Unauthenticated Broken Access Control in Ultimate Maps by Supsystic = 1.5.5 versions...

6.5CVSS5.8AI score0.00159EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/30 5:38 p.m.•28 views

CVE-2026-102397

The WordPress Ultimate Maps by Supsystic plugin, version 1.5.5 and below , is affected by an unauthenticated Broken Access Control vulnerability. While the vulnerability allows for unauthorized access, the provided documents do not specify the exact component, root cause, or practical consequence...

6.5CVSS5.8AI score0.00159EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/30 5:38 p.m.•15 views

CVE-2026-102397 WordPress Ultimate Maps by Supsystic plugin <= 1.5.5 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Ultimate Maps by Supsystic = 1.5.5 versions...

6.5CVSS5.8AI score0.00159EPSS
SaveExploits0References1
Rows per page
Query Builder