Lucene search
+L

1265713 matches found

Vulnrichment
Vulnrichment
•added 2026/09/18 4:21 p.m.•7 views

CVE-2026-93338 Grandstream GWN7660ELR < 1.0.27.6 Information Disclosure via SNMP Default Community String

Grandstream GWN7660ELR before firmware version 1.0.27.6 contains an information disclosure vulnerability that allows unauthenticated remote attackers to obtain sensitive system information by querying the SNMP v2c service configured with the default community string 'public'. Attackers can query...

6.9CVSS5.9AI score0.00533EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/18 4:17 p.m.•7 views

CVE-2026-93736

Mealie before 3.21.0 fails to validate user ownership in the ratings and favorites endpoints, allowing authenticated attackers to read any user's recipe ratings and favorites by specifying arbitrary user IDs in the URL path. Attackers can access private recipe identifiers, rating values, and...

5.3CVSS0.00387EPSS
SaveExploits0References8
NVD
NVD
•added 2026/09/18 4:17 p.m.•14 views

CVE-2026-84448

libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, the public heifregionitemaddregioninlinemaskdata function in libheif/api/libheif/heifregions.cc accepts maskdatalen without verifying that it equals the byte count required by width and height. A later...

4CVSS0.00154EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/18 4:17 p.m.•8 views

DEBIAN-CVE-2026-84448

libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, the public heifregionitemaddregioninlinemaskdata function in libheif/api/libheif/heifregions.cc accepts maskdatalen without verifying that it equals the byte count required by width and height. A later...

4CVSS6.1AI score0.00154EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/18 4:17 p.m.•12 views

CVE-2026-84398

CM2507 IP cameras accept an empty password for a privileged account exposed through its ONVIF management service. An attacker with network access to the affected device could access privileged management functions and obtain device, user, media-profile, and stream configuration information...

8.7CVSS0.00409EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/18 4:17 p.m.•12 views

CVE-2026-59956

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.20.0, 3.1.15.0, and 3.2.0.3-beta1, An uncompressed 16-bit iff image with a z-buffer makes iffinput::readimg allocate a temporary scanline from...

6.1CVSS0.00171EPSS
SaveExploits0References5
OSV
OSV
•added 2026/09/18 4:17 p.m.•6 views

DEBIAN-CVE-2026-59956

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.20.0, 3.1.15.0, and 3.2.0.3-beta1, An uncompressed 16-bit iff image with a z-buffer makes iffinput::readimg allocate a temporary scanline from...

6.1CVSS6AI score0.00171EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/18 4:17 p.m.•11 views

CVE-2026-1030

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 generates an error message that includes sensitive information about its environment, users, or associated data...

4.3CVSS0.00215EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/18 4:17 p.m.•10 views

CVE-2026-1025

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials...

6.1CVSS0.00181EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/18 4:17 p.m.•14 views

CVE-2026-1029

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials...

5.4CVSS0.00162EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/18 4:17 p.m.•12 views

CVE-2026-1037

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially...

6.1CVSS0.00197EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/18 4:17 p.m.•9 views

CVE-2026-1031

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially...

6.1CVSS0.00197EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/18 4:17 p.m.•8 views

CVE-2026-11537

IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to obtain sensitive information about the file system through the FileTransfer servlet...

4.3CVSS0.00185EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/18 4:17 p.m.•7 views

CVE-2025-36421

IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 transmits data in clear text that could allow an attacker to obtain sensitive information using man in the middle techniques...

5.9CVSS0.00158EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/18 4:17 p.m.•6 views

CVE-2025-33147

IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 could allow an attacker on a shared network to obtain sensitive information caused by insecure network communication...

5.9CVSS0.00165EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/18 4:17 p.m.•6 views

CVE-2025-33141

IBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 006 could allow an authenticated user to obtain sensitive information from backup files due to incorrect permissions assignment...

6.5CVSS0.00275EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/18 4:17 p.m.•5 views

CVE-2025-36076

IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 stores sensitive information in source code could be used by an authenticated user in further attacks against the system...

4.3CVSS0.00215EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/09/18 4:17 p.m.•9 views

CVE-2026-84448

libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, the public heifregionitemaddregioninlinemaskdata function in libheif/api/libheif/heifregions.cc accepts maskdatalen without verifying that it equals the byte count required by width and height. A later...

4CVSS6.1AI score0.00154EPSS
SaveExploits0References4
OSV
OSV
•added 2026/09/18 4:17 p.m.•4 views

UBUNTU-CVE-2026-84448

libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, the public heifregionitemaddregioninlinemaskdata function in libheif/api/libheif/heifregions.cc accepts maskdatalen without verifying that it equals the byte count required by width and height. A later...

4CVSS6.1AI score0.00154EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2026/09/18 4:17 p.m.•6 views

CVE-2026-59956

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.20.0, 3.1.15.0, and 3.2.0.3-beta1, An uncompressed 16-bit iff image with a z-buffer makes iffinput::readimg allocate a temporary scanline from...

6.1CVSS6AI score0.00171EPSS
SaveExploits0References7
Rows per page
Query Builder