Lucene search
+L

21677 matches found

CNNVD
CNNVD
•added 2026/04/08 12:00 a.m.•21 views

Red Hat Web Terminal 安全漏洞

Red Hat Web Terminal is a browser-based terminal tool developed by the American company Red Hat. There is a security vulnerability in Red Hat Web Terminal, which stems from the fact that the /etc/passwd file was set with writeable group permissions during the build process. This vulnerability cou...

6.4CVSS5.8AI score0.00158EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/04/08 12:00 a.m.•18 views

PT-2026-31307

Name of the Vulnerable Software and Affected Versions Wimi Teamwork On-Premises versions prior to 8.2.0 Description Wimi Teamwork On-Premises versions prior to 8.2.0 contain an insecure direct object reference issue in the /preview.php endpoint. The item id parameter does not have sufficient...

5.3CVSS5.8AI score0.00284EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/04/08 12:00 a.m.•26 views

PT-2026-31312

A container privilege escalation flaw was found in certain OpenShift Update Service OSUS images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, ev...

6.4CVSS6AI score0.00145EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/08 12:00 a.m.•2 views

CVE-2025-57854: Incorrect Default Permissions

A container privilege escalation flaw was found in certain OpenShift Update Service OSUS images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, ev...

6.4CVSS6AI score0.00145EPSS
SaveExploits0References4
CVE
CVE
•added 2026/04/08 12:00 a.m.•35 views

CVE-2025-50664

A buffer overflow vulnerability exists in the D-Link DI-8003 wireless router, specifically in version 16.07.26A1 . The flaw is caused by incorrect boundary checking and improper handling of parameters within the /user_group.asp endpoint. An attacker can exploit this by sending a crafted HTTP GET ...

7.5CVSS6.2AI score0.00605EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2026/04/08 12:00 a.m.•7 views

CVE-2025-50655

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the name parameter in the /thdgroup.asp endpoint...

6AI score0.00516EPSS
SaveExploits0References3
CNVD
CNVD
•added 2026/04/08 12:00 a.m.•13 views

OpenClaw has an unspecified vulnerability (CNVD-2026-16695)

OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw suffers from a security vulnerability that can be exploited by an attacker to bypass groupAllowFrom and requireMention protections in group chats...

9.8CVSS5.7AI score0.00522EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/04/08 12:00 a.m.•11 views

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-006689)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006689 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/i915/gvt: fix vgpu debugfs clean in remove Check carefully on root debugfs available when...

5.5CVSS5.8AI score0.00203EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/08 12:00 a.m.•1 views

CVE-2026-4379: Improper Neutralization of Input During Web Page Generation

The LightPress Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the group attribute in the gallery shortcode in all versions up to, and including, 2.3.4. This is due to the plugin modifying gallery shortcode output to include the group attribute value without proper...

6.4CVSS6AI score0.00331EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/04/08 12:00 a.m.•16 views

PT-2026-31309

Name of the Vulnerable Software and Affected Versions Ansible Automation Platform affected versions not specified Description A container privilege escalation flaw exists in certain images where the /etc/passwd file is created with group-writable permissions during the build process. An attacker...

6.4CVSS5.7AI score0.00179EPSS
SaveExploits0References11
CNNVD
CNNVD
•added 2026/04/08 12:00 a.m.•16 views

D-Link DI-8003 安全漏洞

The D-Link DI-8003 is a wireless router from China-based AUO D-Link. A buffer overflow vulnerability exists in the D-Link DI-8003. The vulnerability is caused due to incorrect boundary checking in the usergroup.asp script and can be exploited by an attacker to cause a denial of service...

7.5CVSS6AI score0.00605EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/04/08 12:00 a.m.•15 views

D-Link DI-8003 安全漏洞

The D-Link DI-8003 is a wireless router from China-based AUO D-Link. The D-Link DI-8003 suffers from a buffer overflow vulnerability caused by incorrect boundary checking in the timegroup.asp script, which can be exploited by an attacker to cause a denial of service...

7.5CVSS6AI score0.00516EPSS
SaveExploits0References3
CNVD
CNVD
•added 2026/04/08 12:00 a.m.•32 views

OpenClaw Access Control Error Vulnerability (CNVD-2026-16624)

OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. A security vulnerability exists in versions prior to OpenClaw 2026.3.12 that stems from a weak authorization issue in the Zalouser whitelisting schema that matches variable group display names instead of stable group...

9.8CVSS5.8AI score0.00564EPSS
SaveExploits0
CNNVD
CNNVD
•added 2026/04/08 12:00 a.m.•22 views

Red Hat OpenShift 安全漏洞

Red Hat OpenShift is a Platform as a Service PaaS cloud computing platform provided by Red Hat Corporation. It supports the construction, testing, deployment, and running of applications. There is a security vulnerability in the Red Hat OpenShift Update Service. This vulnerability stems from the...

6.4CVSS5.8AI score0.00145EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/08 12:00 a.m.•0 views

CVE-2025-57853: Incorrect Default Permissions

A container privilege escalation flaw was found in certain Web Terminal images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a non-root...

6.4CVSS6AI score0.00158EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/04/08 12:00 a.m.•37 views

CVE-2025-50662

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the name parameter in the /urlgroup.asp endpoint...

0.00516EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/08 12:00 a.m.•1 views

CVE-2025-57847: Incorrect Default Permissions

A container privilege escalation flaw was found in certain Ansible Automation Platform images. This issue arises from the /etc/passwd file being created with group-writable permissions during the build process. In certain conditions, an attacker who can execute commands within an affected...

6.4CVSS6.1AI score0.00179EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/04/08 12:00 a.m.•8 views

CVE-2025-50664

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of parameters in the /usergroup.asp endpoint. The attacker can exploit this vulnerability by sending a crafted HTTP GET request with parameters name, mem, pri, and attr...

6.1AI score0.00605EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/04/08 12:00 a.m.•44 views

CVE-2025-50664

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of parameters in the /usergroup.asp endpoint. The attacker can exploit this vulnerability by sending a crafted HTTP GET request with parameters name, mem, pri, and attr...

0.00605EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/04/08 12:00 a.m.•8 views

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-006828)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006828 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group T...

5.5CVSS6.7AI score0.00228EPSS
SaveExploits0References4
Rows per page
Query Builder