Lucene search
+L

21421 matches found

CVE
CVE
•added 2026/04/08 12:00 a.m.•35 views

CVE-2025-50664

A buffer overflow vulnerability exists in the D-Link DI-8003 wireless router, specifically in version 16.07.26A1 . The flaw is caused by incorrect boundary checking and improper handling of parameters within the /user_group.asp endpoint. An attacker can exploit this by sending a crafted HTTP GET ...

7.5CVSS6.2AI score0.00605EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2026/04/08 12:00 a.m.•7 views

CVE-2025-50655

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the name parameter in the /thdgroup.asp endpoint...

6AI score0.00516EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/04/08 12:00 a.m.•11 views

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-006689)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006689 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/i915/gvt: fix vgpu debugfs clean in remove Check carefully on root debugfs available when...

5.5CVSS5.8AI score0.00203EPSS
SaveExploits0References4
CNVD
CNVD
•added 2026/04/08 12:00 a.m.•13 views

OpenClaw has an unspecified vulnerability (CNVD-2026-16695)

OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw suffers from a security vulnerability that can be exploited by an attacker to bypass groupAllowFrom and requireMention protections in group chats...

9.8CVSS5.7AI score0.00522EPSS
SaveExploits0
CNNVD
CNNVD
•added 2026/04/08 12:00 a.m.•16 views

D-Link DI-8003 安全漏洞

The D-Link DI-8003 is a wireless router from China-based AUO D-Link. A buffer overflow vulnerability exists in the D-Link DI-8003. The vulnerability is caused due to incorrect boundary checking in the usergroup.asp script and can be exploited by an attacker to cause a denial of service...

7.5CVSS6AI score0.00605EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/04/08 12:00 a.m.•15 views

D-Link DI-8003 安全漏洞

The D-Link DI-8003 is a wireless router from China-based AUO D-Link. The D-Link DI-8003 suffers from a buffer overflow vulnerability caused by incorrect boundary checking in the timegroup.asp script, which can be exploited by an attacker to cause a denial of service...

7.5CVSS6AI score0.00516EPSS
SaveExploits0References3
CNVD
CNVD
•added 2026/04/08 12:00 a.m.•32 views

OpenClaw Access Control Error Vulnerability (CNVD-2026-16624)

OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. A security vulnerability exists in versions prior to OpenClaw 2026.3.12 that stems from a weak authorization issue in the Zalouser whitelisting schema that matches variable group display names instead of stable group...

9.8CVSS5.8AI score0.00564EPSS
SaveExploits0
CNNVD
CNNVD
•added 2026/04/08 12:00 a.m.•22 views

Red Hat OpenShift 安全漏洞

Red Hat OpenShift is a Platform as a Service PaaS cloud computing platform provided by Red Hat Corporation. It supports the construction, testing, deployment, and running of applications. There is a security vulnerability in the Red Hat OpenShift Update Service. This vulnerability stems from the...

6.4CVSS5.8AI score0.00145EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/08 12:00 a.m.•0 views

CVE-2025-57853: Incorrect Default Permissions

A container privilege escalation flaw was found in certain Web Terminal images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a non-root...

6.4CVSS6AI score0.00158EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/04/08 12:00 a.m.•43 views

CVE-2025-50664

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of parameters in the /usergroup.asp endpoint. The attacker can exploit this vulnerability by sending a crafted HTTP GET request with parameters name, mem, pri, and attr...

0.00605EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/04/08 12:00 a.m.•37 views

CVE-2025-50662

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the name parameter in the /urlgroup.asp endpoint...

0.00516EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/08 12:00 a.m.•1 views

CVE-2026-4379: Improper Neutralization of Input During Web Page Generation

The LightPress Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the group attribute in the gallery shortcode in all versions up to, and including, 2.3.4. This is due to the plugin modifying gallery shortcode output to include the group attribute value without proper...

6.4CVSS6AI score0.00331EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/04/08 12:00 a.m.•8 views

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-006828)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006828 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group T...

5.5CVSS6.7AI score0.00228EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/04/08 12:00 a.m.•16 views

PT-2026-31309

Name of the Vulnerable Software and Affected Versions Ansible Automation Platform affected versions not specified Description A container privilege escalation flaw exists in certain images where the /etc/passwd file is created with group-writable permissions during the build process. An attacker...

6.4CVSS5.7AI score0.00179EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/08 12:00 a.m.•1 views

CVE-2025-57847: Incorrect Default Permissions

A container privilege escalation flaw was found in certain Ansible Automation Platform images. This issue arises from the /etc/passwd file being created with group-writable permissions during the build process. In certain conditions, an attacker who can execute commands within an affected...

6.4CVSS6.1AI score0.00179EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/04/08 12:00 a.m.•8 views

CVE-2025-50664

A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of parameters in the /usergroup.asp endpoint. The attacker can exploit this vulnerability by sending a crafted HTTP GET request with parameters name, mem, pri, and attr...

6.1AI score0.00605EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2026/04/07 10:55 p.m.•16 views

WordPress LightPress Lightbox plugin <= 2.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'group' Shortcode Attribute vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'group' Shortcode Attribute vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin WP jQuery Lightbox versions = 2.3.4...

6.4CVSS5.9AI score0.00331EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2026/04/07 9:18 p.m.•20 views

CVE-2026-34765 Electron named window.open targets not scoped to the opener's browsing context

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.5, 40.8.5, 41.1.0, and 42.0.0-alpha.5, when a renderer calls window.open with a target name, Electron did not correctly scope the named-window lookup to the opener's browsing...

6CVSS6.2AI score
SaveExploits0References3
EUVD
EUVD
•added 2026/04/07 6:31 p.m.•16 views

EUVD-2025-209275

yaffa v2.0.0 is vulnerable to Cross Site Scripting XSS. An attacker can inject malicious JavaScript into the "Add Account Group" function on the account-group page, allowing execution of arbitrary script in the context of users who view the affected page...

6.2AI score0.00271EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2026/04/07 6:31 p.m.•19 views

yaffa vulnerable to Cross Site Scripting

yaffa v2.0.0 is vulnerable to Cross Site Scripting XSS. An attacker can inject malicious JavaScript into the "Add Account Group" function on the account-group page, allowing execution of arbitrary script in the context of users who view the affected page...

6.1CVSS6.1AI score0.00271EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder