Lucene search
+L

5976 matches found

Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.3 views

PT-2026-71582

Unauthenticated Local File Inclusion in Foton Core = 1.1.1 versions...

8.1CVSS5.2AI score0.00348EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/13 12:00 a.m.3 views

PT-2026-71680

In Zimbra Collaboration before 10.1.17, a local file inclusion LFI vulnerability exists in the Zimbra Classic Web Client due to improper validation of the fu request parameter. An unauthenticated attacker can exploit this vulnerability by supplying a crafted path, potentially allowing unauthorize...

3.1CVSS5.3AI score0.00201EPSS
SaveExploits0References3
Chainguard
Chainguard
added 2026/08/12 8:24 p.m.9 views

CVE-2026-68930 vulnerabilities

Vulnerabilities for packages: yazi...

6.5CVSS5.2AI score0.00213EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2026/08/12 6:42 p.m.5 views

CVE-2026-18952

Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might allow an authenticated remote user to perform server-side request forgery and read local files via a crafted URL parameter to the threat intel source configuration endpoint...

8.6CVSS5.3AI score0.0032EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/08/12 1:17 p.m.6 views

CVE-2026-47231

Admidio is an open-source user management solution. Prior to version 5.0.10, modules/documents-files.php gates state-changing modes by checking that the actor has hasUploadRight on the URL parameter folderuuid. The movesave handler then operates on a separate URL parameter fileuuid and calls...

8.1CVSS5.4AI score0.00212EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/08/12 1:17 p.m.31 views

CVE-2026-47231 Admidio has IDOR in `documents-files.php` `mode=move_save` that lets any folder-uploader exfiltrate files from private folders

Admidio is an open-source user management solution. Prior to version 5.0.10, modules/documents-files.php gates state-changing modes by checking that the actor has hasUploadRight on the URL parameter folderuuid. The movesave handler then operates on a separate URL parameter fileuuid and calls...

8.1CVSS0.00212EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/12 1:17 p.m.7 views

EUVD-2026-57208

Admidio is an open-source user management solution. Prior to version 5.0.10, modules/documents-files.php gates state-changing modes by checking that the actor has hasUploadRight on the URL parameter folderuuid. The movesave handler then operates on a separate URL parameter fileuuid and calls...

8.1CVSS5.4AI score0.00212EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/12 1:17 p.m.5 views

CVE-2026-47231 Admidio has IDOR in `documents-files.php` `mode=move_save` that lets any folder-uploader exfiltrate files from private folders

Admidio is an open-source user management solution. Prior to version 5.0.10, modules/documents-files.php gates state-changing modes by checking that the actor has hasUploadRight on the URL parameter folderuuid. The movesave handler then operates on a separate URL parameter fileuuid and calls...

8.1CVSS5.4AI score
SaveExploits0References3
Wolfi
Wolfi
added 2026/08/11 8:23 p.m.8 views

CVE-2026-69207 vulnerabilities

Vulnerabilities for packages: langfuse...

5.3CVSS5.2AI score0.00653EPSS
SaveExploits0
NVD
NVD
added 2026/08/11 8:18 p.m.10 views

CVE-2026-73235

FreeCAD is a free and open-source multiplatform 3D parametric modeler. Prior to 1.1.2, the Xerces SAX2 XMLReader constructed in src/Base/Reader.cpp by Base::XMLReader::XMLReader parses attacker-controlled Document.xml from a crafted .FCStd archive without disabling default external entity...

6.1CVSS0.00125EPSS
SaveExploits0References6
NVD
NVD
added 2026/08/11 6:17 p.m.9 views

CVE-2016-20097

Weaver Fanwei E-cology 8.0 contains a SQL injection vulnerability in the SignatureDownLoad servlet that allows unauthenticated remote attackers to read arbitrary files by injecting a UNION SELECT payload into the markId GET parameter, which is concatenated unsanitized into a SQL query. Attackers...

8.7CVSS0.0047EPSS
SaveExploits0References5
IBM Security Bulletins
IBM Security Bulletins
added 2026/08/11 4:19 p.m.13 views

Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale and the Management GUI are now fixed in 5.2.3.9 or higher and 6.0.1.1 or higher

Summary The following vulnerabilities, which can affect IBM Storage Scale and the Management GUI and could provide weaker-than-expected security, are now fixed in Storage Scale 5.2.3.9 or higher and 6.0.1.1 or higher. CVE-2026-19483, CVE-2026-13460 Vulnerability Details CVEID:CVE-2026-19483...

7.5CVSS5.4AI score0.00282EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2026/08/11 1:19 p.m.11 views

CVE-2026-72773

n8n before 2.31.5 and 2.32.x before 2.32.1 contain a path-confinement bypass in the @n8n/computer-use file-search searchfiles tool. A crafted search pattern can bypass the base-directory confinement check and expand to locations outside the configured directory, causing the tool to return the nam...

4.9CVSS0.00381EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/11 1:19 p.m.10 views

CVE-2026-72766

n8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 contain a type confusion vulnerability in the Send Email node, which does not enforce that its message fields are strings. A crafted non-string value supplied from a workflow expression into the text or HTML body field can be...

8.2CVSS0.00278EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/08/11 12:17 p.m.10 views

CVE-2026-72773

n8n before 2.31.5 and 2.32.x before 2.32.1 contain a path-confinement bypass in the @n8n/computer-use file-search searchfiles tool. A crafted search pattern can bypass the base-directory confinement check and expand to locations outside the configured directory, causing the tool to return the nam...

4.9CVSS5.4AI score0.00381EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/08/11 12:17 p.m.10 views

CVE-2026-72766

n8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 contain a type confusion vulnerability in the Send Email node, which does not enforce that its message fields are strings. A crafted non-string value supplied from a workflow expression into the text or HTML body field can be...

8.2CVSS5.5AI score0.00278EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/11 12:17 p.m.6 views

EUVD-2026-56145

n8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 contain a type confusion vulnerability in the Send Email node, which does not enforce that its message fields are strings. A crafted non-string value supplied from a workflow expression into the text or HTML body field can be...

8.2CVSS5.5AI score0.00278EPSS
SaveExploits0References2
Chainguard
Chainguard
added 2026/08/11 2:17 a.m.14 views

GHSA-9XWG-3R6F-JCX2 vulnerabilities

Vulnerabilities for packages: open-webui...

5.2AI score
SaveExploits0
Chainguard
Chainguard
added 2026/08/11 2:17 a.m.15 views

CVE-2026-61632 vulnerabilities

Vulnerabilities for packages: open-webui...

5.3CVSS5.1AI score0.00403EPSS
SaveExploits0
CVE
CVE
added 2026/08/11 12:17 a.m.61 views

CVE-2026-58248

The CVE describes an XML External Entity (XXE) injection in SAP BusinessObjects Business Intelligence Platform (Web Intelligence). A low-privileged attacker can upload a specially crafted spreadsheet as a data source; when processed, the component resolves external references and exposes contents...

6.5CVSS5.3AI score0.00281EPSS
SaveExploits0References2
Rows per page
Query Builder