Lucene search
+L

68105 matches found

OSV
OSV
added 2026/08/26 3:35 a.m.11 views

ROOT-OS-DEBIAN-13-CVE-2025-68307 CVE-2025-68307 in linux - Patched by Root

Root has patched CVE-2025-68307 in the linux package for Root:Debian:13. Multiple fixed versions available...

5.5CVSS6AI score0.00188EPSS
SaveExploits0
OSV
OSV
added 2026/08/26 3:35 a.m.13 views

ROOT-OS-DEBIAN-13-CVE-2025-68287 CVE-2025-68287 in linux - Patched by Root

Root has patched CVE-2025-68287 in the linux package for Root:Debian:13. Multiple fixed versions available...

6.1AI score0.00227EPSS
SaveExploits0
OSV
OSV
added 2026/08/26 3:35 a.m.10 views

ROOT-OS-DEBIAN-13-CVE-2019-15213 CVE-2019-15213 in linux - Patched by Root

Root has patched CVE-2019-15213 in the linux package for Root:Debian:13. Multiple fixed versions available...

4.9CVSS6.4AI score0.0063EPSS
SaveExploits1
OSV
OSV
added 2026/08/26 3:35 a.m.9 views

ROOT-OS-DEBIAN-13-CVE-2025-71204 CVE-2025-71204 in linux - Patched by Root

Root has patched CVE-2025-71204 in the linux package for Root:Debian:13. Multiple fixed versions available...

5.5CVSS5.7AI score0.0028EPSS
SaveExploits0
OSV
OSV
added 2026/08/26 3:35 a.m.7 views

ROOT-OS-DEBIAN-13-CVE-2025-39812 CVE-2025-39812 in linux - Patched by Root

Root has patched CVE-2025-39812 in the linux package for Root:Debian:13. Multiple fixed versions available...

5.5CVSS6.2AI score0.00172EPSS
SaveExploits0
CVE
CVE
added 2026/08/26 3:14 a.m.31 views

CVE-2026-29988

Milesight IoT devices (multiple models, affected firmware versions) are vulnerable to cleartext transmission of sensitive information through the NFC interface. An unauthenticated attacker with physical proximity can read LoRaWAN ABP NwkSKey , AppSKey , and D2D keys via a simple NFC read operatio...

8.3CVSS5.1AI score0.0015EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/26 3:14 a.m.6 views

EUVD-2026-66229

A cleartext transmission of sensitive information vulnerability in the NFC interface of multiple Milesight IoT device models running affected firmware versions allows an unauthenticated attacker with physical proximity to retrieve LoRaWAN ABP NwkSKey and AppSKey values and D2D keys via an NFC rea...

8.3CVSS5AI score0.0015EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/26 2:51 a.m.5 views

EUVD-2026-66228

duplicate record...

8.3CVSS5.1AI score
SaveExploits0
Nuclei
Nuclei
added 2026/08/26 2:49 a.m.71 views

pgAdmin 4 - Authentication Bypass

pgAdmin 4 versions 8.11 and earlier are vulnerable to a security flaw in OAuth2 authentication. This vulnerability allows an attacker to potentially obtain the client ID and secret, leading to unauthorized access to user data. id: CVE-2024-9014 info: name: pgAdmin 4 - Authentication Bypass author...

9.9CVSS8.5AI score0.09685EPSS
SaveExploits2References3
Nuclei
Nuclei
added 2026/08/26 2:49 a.m.18 views

OpenProject < 12.5.4 - Project Identifiers Exposure

OpenProject versions before 12.5.6 generate a publicly accessible robots.txt file revealing project identifiers, even if the instance is set to 'Login required', letting attackers gather project info, exploit requires no authentication. id: CVE-2023-33960 info: name: OpenProject 12.5.4 - Project...

7.5CVSS7.4AI score0.01257EPSS
SaveExploits0References3
Nuclei
Nuclei
added 2026/08/26 2:49 a.m.22 views

vLLM <= 0.23.0 - Anthropic Router Heap Address Information Leak

vLLM = 0.23.0 incompletely fixes CVE-2026-22778. The original fix added sanitizemessage to the OpenAI router but the Anthropic-compatible router /v1/messages echoes strexc directly. id: CVE-2026-54236 info: name: vLLM = 0.23.0 - Anthropic Router Heap Address Information Leak author: kenlacroix...

9.8CVSS6.4AI score0.03723EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/08/26 2:49 a.m.39 views

RestroPress 3.0.0-3.2.1 - Authentication Bypass

RestroPress Online Food Ordering System WordPress plugin 3.0.0 to 3.1.9.2 contains an authentication bypass caused by exposure of user private tokens and API data via /wp-json/wp/v2/users endpoint, letting unauthenticated attackers forge JWT tokens and authenticate as other users including...

9.8CVSS8.6AI score0.02196EPSS
SaveExploits6References2
Nuclei
Nuclei
added 2026/08/26 2:49 a.m.74 views

G Auto-Hyperlink <= 1.0.1 - SQL Injection

The G Auto-Hyperlink WordPress plugin through 1.0.1 does not sanitise or escape an 'id' GET parameter before using it in a SQL statement, to select data to be displayed in the admin dashboard, leading to an authenticated SQL injection id: CVE-2021-24627 info: name: G Auto-Hyperlink = 1.0.1 - SQL...

7.2CVSS7.3AI score0.06561EPSS
SaveExploits2References4
Nuclei
Nuclei
added 2026/08/26 2:49 a.m.331 views

phpfastcache - phpinfo Resource Exposure

phpinfo is susceptible to resource exposure in unprotected composer vendor folders via phpfastcache/phpfastcache. id: CVE-2021-37704 info: name: phpfastcache - phpinfo Resource Exposure author: whoever severity: medium description: phpinfo is susceptible to resource exposure in unprotected compos...

5.4CVSS5AI score0.06132EPSS
SaveExploits1References6
Nuclei
Nuclei
added 2026/08/26 2:49 a.m.86 views

Reolink E1 Zoom Camera <=3.0.0.716 - Information Disclosure

Reolink E1 Zoom camera through 3.0.0.716 is susceptible to information disclosure. The web server discloses its configuration via the /conf/ directory that is mapped to a publicly accessible path. An attacker with network-level access to the camera can can download the entire NGINX/FastCGI...

7.5CVSS7.7AI score0.03729EPSS
SaveExploits4References5
Nuclei
Nuclei
added 2026/08/26 2:49 a.m.94 views

Linear eMerge E3-Series - Information Disclosure

Linear eMerge E3-Series devices are susceptible to information disclosure. Admin credentials are stored in clear text at the endpoint /test.txt in situations where the default admin credentials have been changed. An attacker can obtain admin credentials, access the admin dashboard, control buildi...

8.2CVSS8.7AI score0.06987EPSS
SaveExploits3References5
Nuclei
Nuclei
added 2026/08/26 2:49 a.m.77 views

TCExam <= 14.8.1 - Sensitive Information Exposure

When installed following the default/recommended settings, TCExam = 14.8.1 allowed unauthenticated users to access the /cache/backup/ directory, which includes sensitive database backup files. id: CVE-2021-20114 info: name: TCExam = 14.8.1 - Sensitive Information Exposure author: push4d severity:...

7.5CVSS7.5AI score0.05973EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/08/26 2:49 a.m.113 views

D-Link DIR-3040 1.13B03 - Information Disclosure

D-Link DIR-3040 1.13B03 is susceptible to information disclosure in the Syslog functionality. A specially crafted HTTP network request can lead to the disclosure of sensitive information. An attacker can obtain access to user accounts and access sensitive information, modify data, and/or execute...

6.5CVSS6.2AI score0.32385EPSS
SaveExploits1References4
Nuclei
Nuclei
added 2026/08/26 2:49 a.m.46 views

INTELBRAS TELEFONE IP TIP200 60.61.75.22 - Local File Inclusion

INTELBRAS TELEFONE IP TIP200 version 60.61.75.22 is vulnerable to information disclosure, allowing unauthenticated attackers to access sensitive device information and configuration data via a direct request to the /cgi-bin/exportsettings.sh endpoint. id: CVE-2020-24285 info: name: INTELBRAS...

7.5CVSS7.5AI score0.04376EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/08/26 2:49 a.m.43 views

Trinity Audio <= 5.21.0 - Information Exposure

The Trinity Audio Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.21.0 via the /admin/inc/phpinfo.php file that gets created on install. This makes it possible for...

5.3CVSS5.3AI score0.00937EPSS
SaveExploits1References2
Rows per page
Query Builder