Lucene search
+L

13781 matches found

CNNVD
CNNVD
•added 2026/04/29 12:00 a.m.•31 views

WordPress Plugin BetterDocs 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

5.3CVSS5.8AI score0.0031EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/29 12:00 a.m.•38 views

PT-2026-35903

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPDeveloper BetterDocs betterdocs allows Retrieve Embedded Sensitive Data.This issue affects BetterDocs: from n/a through = 4.3.10...

5.3CVSS5.2AI score0.0031EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/29 12:00 a.m.•4 views

CVE-2026-42644: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPDeveloper BetterDocs betterdocs allows Retrieve Embedded Sensitive Data.This issue affects BetterDocs: from n/a through = 4.3.10...

5.3CVSS5.8AI score0.0031EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/04/28 9:00 p.m.•21 views

Embedded Malicious Code

Overview @cap-js/postgres is a CDS database service for Postgres Affected versions of this package are vulnerable to Embedded Malicious Code that conceals an obfuscated payload designed to steal developer credentials during the package installation. The malicious versions and their contents are...

9.8CVSS5.8AI score
SaveExploits0References2
OSV
OSV
•added 2026/04/27 1:32 p.m.•14 views

CLSA-2026-1777296725 Fix CVE(s): CVE-2026-35414

SECURITY UPDATE: mishandling of authorizedkeys principals option - debian/patches/CVE-2026-35414.patch: replace matchlist with xstrdup + strsep + exact strcmp in matchprincipalsoption in auth2-pubkey.c, so certificate principals containing embedded commas are no longer wrongly cross-matched. -...

8.1CVSS6.8AI score0.00243EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2026/04/27 12:30 p.m.•27 views

Apache Camel Vulnerable to Authentication Bypass Using an Alternate Path or Channel

When authentication is enabled on the Apache Camel embedded HTTP server or embedded management server camel-platform-http-main and a non-root context path such as /api or /admin is configured via camel.server.path or camel.management.path, the BasicAuthenticationConfigurer and...

8.2CVSS5.9AI score0.01033EPSS
SaveExploits1References10Affected Software1
NVD
NVD
•added 2026/04/27 10:16 a.m.•26 views

CVE-2026-40022

When authentication is enabled on the Apache Camel embedded HTTP server or embedded management server camel-platform-http-main and a non-root context path such as /api or /admin is configured via camel.server.path or camel.management.path, the BasicAuthenticationConfigurer and...

8.2CVSS0.01033EPSS
SaveExploits1References6
EUVD
EUVD
•added 2026/04/27 9:40 a.m.•24 views

EUVD-2026-25807

When authentication is enabled on the Apache Camel embedded HTTP server or embedded management server camel-platform-http-main and a non-root context path such as /api or /admin is configured via camel.server.path or camel.management.path, the BasicAuthenticationConfigurer and...

8.2CVSS5.9AI score0.01033EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2026/04/27 9:40 a.m.•15 views

CVE-2026-40022

When authentication is enabled on the Apache Camel embedded HTTP server or embedded management server camel-platform-http-main and a non-root context path such as /api or /admin is configured via camel.server.path or camel.management.path, the BasicAuthenticationConfigurer and...

5.9AI score0.01033EPSS
SaveExploits1References2Affected Software1
NVD
NVD
•added 2026/04/27 9:16 a.m.•20 views

CVE-2026-42379

Insertion of Sensitive Information Into Sent Data vulnerability in WPDeveloper Templately allows Retrieve Embedded Sensitive Data.This issue affects Templately: from n/a through 3.6.1...

7.7CVSS0.00371EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/04/27 8:26 a.m.•54 views

CVE-2026-42379 WordPress Templately plugin <= 3.6.1 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in WPDeveloper Templately allows Retrieve Embedded Sensitive Data.This issue affects Templately: from n/a through 3.6.1...

7.7CVSS0.00371EPSS
SaveExploits0References1
CVE
CVE
•added 2026/04/27 8:26 a.m.•35 views

CVE-2026-42379

CVE-2026-42379 affects the WordPress WPDeveloper Templately plugin

7.7CVSS5.8AI score0.00371EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/04/27 8:26 a.m.•18 views

EUVD-2026-25797

Insertion of Sensitive Information Into Sent Data vulnerability in WPDeveloper Templately allows Retrieve Embedded Sensitive Data.This issue affects Templately: from n/a through 3.6.1...

7.7CVSS5.2AI score0.00371EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/27 12:00 a.m.•6 views

CVE-2026-42379: Insertion of Sensitive Information Into Sent Data

Insertion of Sensitive Information Into Sent Data vulnerability in WPDeveloper Templately allows Retrieve Embedded Sensitive Data.This issue affects Templately: from n/a through 3.6.1...

7.7CVSS5.8AI score0.00371EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/04/27 12:00 a.m.•41 views

PT-2026-35374

Insertion of Sensitive Information Into Sent Data vulnerability in WPDeveloper Templately allows Retrieve Embedded Sensitive Data.This issue affects Templately: from n/a through 3.6.1...

7.7CVSS5.2AI score0.00371EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/04/27 12:00 a.m.•22 views

PT-2026-35385

Name of the Vulnerable Software and Affected Versions Apache Camel versions 4.14.1 through 4.14.5 Apache Camel versions 4.18.0 through 4.18.1 Description When authentication is enabled on the embedded HTTP server or embedded management server camel-platform-http-main and a non-root context path...

8.2CVSS5.8AI score0.01033EPSS
SaveExploits1References17
Fedora
Fedora
•added 2026/04/25 1:57 a.m.•21 views

[SECURITY] Fedora 44 Update: cef-146.0.11^chromium146.0.7680.177-2.fc44

CEF is an embeddable build of Chromium, powered by WebKit Blink...

9.6CVSS7AI score0.00703EPSS
SaveExploits2
Fedora
Fedora
•added 2026/04/25 1:52 a.m.•29 views

[SECURITY] Fedora 44 Update: rauc-1.15.2-1.fc44

RAUC is a lightweight update client that runs on your Embedded Linux device and reliably controls the procedure of updating your device with a new firmwa re revision. RAUC is also the tool on your host system that lets you create, inspect and modify update artifacts for your device. Service is no...

7.2CVSS5.9AI score0.00229EPSS
SaveExploits0
Packet Storm News
Packet Storm News
•added 2026/04/25 12:00 a.m.•33 views

UNSEEN: A Cross-Stack LLM Unlearning Defense against AR-LLM Social Engineering Attacks

Emerging AR-LLM-based Social Engineering attack e.g., SEAR is at the edge of posing great threats to real-world social life. In such AR-LLM-SE attack, the attacker can leverage AR Augmented Reality glass to capture the image and vocal information of the target, using the LLM to identify the targe...

5.4AI score
SaveExploits0
NVD
NVD
•added 2026/04/24 8:16 p.m.•28 views

CVE-2026-41503

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.4.3, an out-of-bounds read vulnerability in bacnet-stack's ReadPropertyMultiple service property decoder allows unauthenticated remote attackers to read past allocated buffer boundaries by sending an RP...

8.7CVSS0.00597EPSS
SaveExploits2References1
Rows per page
Query Builder