Lucene search
+L

67680 matches found

CVE
CVE
•added 2026/09/07 1:57 a.m.•23 views

CVE-2026-20507

A use after free vulnerability exists in the Audio HAL component, which could lead to a local escalation of privilege . A malicious actor who has already obtained System privilege can exploit this flaw to increase their privileges further. The vulnerability does not require user interaction for e...

6.7CVSS5.9AI score0.00114EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/07 1:45 a.m.•10 views

EUVD-2026-72192

A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/suptransac.php. Performing a manipulation of the argument companyname results in sql injection. It is possible to initiate the attack remotely...

6.5CVSS6.5AI score0.00333EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/07 1:00 a.m.•13 views

EUVD-2026-72189

A security flaw has been discovered in liufee FeehiCMS up to 2.1.1. This affects the function catchImage of the file backend/widgets/ueditor/Uploader.php of the component UEditor. The manipulation of the argument source results in server-side request forgery. The attack can be executed remotely...

5.8CVSS5AI score0.00396EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/09/07 12:45 a.m.•11 views

CVE-2026-86239 liufee FeehiCMS UEditor Widget UeditorAction.php init unrestricted upload

A vulnerability was identified in liufee FeehiCMS up to 2.1.1. The impacted element is the function UeditorAction::init of the file backend/widgets/ueditor/UeditorAction.php of the component UEditor Widget. The manipulation leads to unrestricted upload. Remote exploitation of the attack is...

6.9CVSS5.3AI score0.00532EPSS
SaveExploits0References6
CVE
CVE
•added 2026/09/07 12:45 a.m.•22 views

CVE-2026-86239

liufee FeehiCMS (up to version 2.1.1 ) is affected by an unrestricted file upload vulnerability in the UEditor Widget component, specifically in the function UeditorAction::init within the file backend/widgets/ueditor/UeditorAction.php. The flaw allows remote, unauthenticated attackers to upload ...

6.9CVSS5.3AI score0.00532EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/09/07 12:45 a.m.•45 views

CVE-2026-86239 liufee FeehiCMS UEditor Widget UeditorAction.php init unrestricted upload

A vulnerability was identified in liufee FeehiCMS up to 2.1.1. The impacted element is the function UeditorAction::init of the file backend/widgets/ueditor/UeditorAction.php of the component UEditor Widget. The manipulation leads to unrestricted upload. Remote exploitation of the attack is...

6.9CVSS0.00532EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/07 12:45 a.m.•12 views

EUVD-2026-72187

A vulnerability was identified in liufee FeehiCMS up to 2.1.1. The impacted element is the function UeditorAction::init of the file backend/widgets/ueditor/UeditorAction.php of the component UEditor Widget. The manipulation leads to unrestricted upload. Remote exploitation of the attack is...

6.9CVSS5.3AI score0.00532EPSS
SaveExploits0References6
OSV
OSV
•added 2026/09/07 12:45 a.m.•12 views

CVE-2026-86239 liufee FeehiCMS UEditor Widget UeditorAction.php init unrestricted upload

A vulnerability was identified in liufee FeehiCMS up to 2.1.1. The impacted element is the function UeditorAction::init of the file backend/widgets/ueditor/UeditorAction.php of the component UEditor Widget. The manipulation leads to unrestricted upload. Remote exploitation of the attack is...

6.9CVSS5.3AI score
SaveExploits0References8
EUVD
EUVD
•added 2026/09/07 12:30 a.m.•20 views

EUVD-2026-72178

A security vulnerability has been detected in JeecgBoot up to 3.9.3. This vulnerability affects the function exportXls of the file jeecg-boot/jeecg-boot-module/jeecg-boot-module-airag/src/main/java/org/jeecg/modules/airag/llm/controller/AiragModelController.java. Such manipulation of the argument...

5.3CVSS5AI score0.00394EPSS
SaveExploits0References9
NVD
NVD
•added 2026/09/07 12:17 a.m.•13 views

CVE-2026-86233

A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. Affected by this issue is some unknown functionality of the file /pages/usdel.php?type=user. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The...

6.5CVSS0.00333EPSS
SaveExploits0References6
Redos
Redos
•added 2026/09/07 12:00 a.m.•10 views

ROS-20260907-73-0056

The vulnerability in Erlang is related to errors in the certificate verification process. Exploitation of this vulnerability can be carried out remotely...

6.3CVSS5.8AI score0.00321EPSS
SaveExploits0
Redos
Redos
•added 2026/09/07 12:00 a.m.•10 views

ROS-20260907-73-0028

The vulnerability in perl-DBI is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.5CVSS7.4AI score0.0063EPSS
SaveExploits0
Redos
Redos
•added 2026/09/07 12:00 a.m.•10 views

ROS-20260907-73-0054

The vulnerability in Erlang is related to errors in the certificate verification process. Exploitation of this vulnerability can be carried out remotely...

8CVSS7.3AI score0.00351EPSS
SaveExploits0
Redos
Redos
•added 2026/09/07 12:00 a.m.•9 views

ROS-20260907-73-0095

The vulnerability in dotnet8.0 is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to send hidden HTTP requests remotely a type of HTTP request smuggling attack...

5.9CVSS6.5AI score0.00749EPSS
SaveExploits0
Redos
Redos
•added 2026/09/07 12:00 a.m.•9 views

ROS-20260907-73-0042

The vulnerability in Erlang is related to incorrect input of configuration data. Exploitation of this vulnerability can be carried out remotely...

8.2CVSS7.3AI score0.00481EPSS
SaveExploits0
Redos
Redos
•added 2026/09/07 12:00 a.m.•13 views

ROS-20260907-73-0508

The vulnerability in perl-Crypt-DSA is related to insufficient entropy. Exploitation of this vulnerability can be carried out remotely...

7.3CVSS7.3AI score0.00407EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•19 views

PT-2026-86632

A vulnerability was detected in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This vulnerability affects the function register of the file auth.php. Performing a manipulation of the argument role results in improper privilege management. Remote exploitation of the...

6.9CVSS5.7AI score0.00484EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•24 views

PT-2026-86759

ell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized...

8.1CVSS5.8AI score0.00468EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/07 12:00 a.m.•20 views

PT-2026-86761

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Credentials vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...

7.7CVSS5.9AI score0.00343EPSS
SaveExploits0References2
Redos
Redos
•added 2026/09/07 12:00 a.m.•10 views

ROS-20260907-73-0065

The vulnerability of the NewKeyring function in the Go programming language is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

9.1CVSS6.6AI score0.00487EPSS
SaveExploits0
Rows per page
Query Builder