Lucene search
K

56 matches found

Vulnrichment
Vulnrichment
added 2026/05/11 4:3 p.m.6 views

CVE-2026-33359 Meari unauthenticated alert image access in cloud object storage

In Meari IoT Cloud alert image storage on Alibaba OSS latest observed; storage service version not disclosed, motion snapshots are retrievable without authentication, signed URLs, or expiry enforcement. URLs function as direct object references and remain valid beyond expected operational windows...

7.5CVSS5.8AI score0.00293EPSS
Exploits0References2
Fedora
Fedora
added 2026/04/30 1:30 a.m.2 views

[SECURITY] Fedora 42 Update: podman-5.8.2-1.fc42

podman Pod Manager is a fully featured container engine that is a simple daemonless tool. podman provides a Docker-CLI comparable command line that eases the transition from other container engines and allows the management of pods, containers and images. Simply put: alias docker=3Dpodman. Most...

7.5CVSS6.2AI score0.00274EPSS
Exploits0
EUVD
EUVD
added 2026/04/08 12:30 a.m.3 views

EUVD-2026-19956

The Smart Slider 3 plugin for WordPress is vulnerable to unauthorized access and modification of data due to missing capability checks on multiple wpajaxsmart-slider3 controller actions in all versions up to, and including, 3.5.1.33. The displayadminajax method does not call checkForCap which...

5.4CVSS5.9AI score0.00357EPSS
Exploits0References8
ATTACKERKB
ATTACKERKB
added 2026/04/07 9:26 p.m.2 views

CVE-2026-4065

The Smart Slider 3 plugin for WordPress is vulnerable to unauthorized access and modification of data due to missing capability checks on multiple wpajaxsmart-slider3 controller actions in all versions up to, and including, 3.5.1.33. The displayadminajax method does not call checkForCap which...

5.9AI score0.00357EPSS
Exploits0References8
Cvelist
Cvelist
added 2026/04/07 9:26 p.m.21 views

CVE-2026-4065 Smart Slider 3 <= 3.5.1.33 - Missing Authorization to Authenticated (Contributor+) Slider Data Read and Image Record Manipulation

The Smart Slider 3 plugin for WordPress is vulnerable to unauthorized access and modification of data due to missing capability checks on multiple wpajaxsmart-slider3 controller actions in all versions up to, and including, 3.5.1.33. The displayadminajax method does not call checkForCap which...

5.4CVSS0.00357EPSS
Exploits0References7
CVE
CVE
added 2026/04/07 9:26 p.m.6 views

CVE-2026-4065

The Smart Slider 3 WordPress plugin (versions up to 3.5.1.33) suffers unauthorized access and data modification due to missing capability checks across multiple wp_ajax_smart-slider3 actions. The display_admin_ajax() path omits checkForCap() (unfiltered_html required), and several controller acti...

5.4CVSS5.9AI score0.00357EPSS
Exploits0References7
CNNVD
CNNVD
added 2026/04/07 12:0 a.m.4 views

WordPress plugin Smart Slider 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

5.4CVSS5.8AI score0.00357EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2026/04/07 12:0 a.m.3 views

PT-2026-31034

The Smart Slider 3 plugin for WordPress is vulnerable to unauthorized access and modification of data due to missing capability checks on multiple wp ajax smart-slider3 controller actions in all versions up to, and including, 3.5.1.33. The display admin ajax method does not call checkForCap which...

5.4CVSS5.9AI score0.00357EPSS
Exploits0References10
CNNVD
CNNVD
added 2026/01/20 12:0 a.m.5 views

MedDream PACS Premium 安全漏洞

MedDream PACS Premium is an enterprise-class image storage and management server suite from MedDream. MedDream PACS Premium suffers from a cross-site scripting vulnerability that is caused by improper validation of user-supplied input by the sendOruReport feature. An attacker could exploit the...

6.1CVSS5.9AI score0.00317EPSS
Exploits1References1
CNNVD
CNNVD
added 2026/01/20 12:0 a.m.3 views

MedDream PACS Premium 安全漏洞

MedDream PACS Premium is an enterprise-class image storage and management server suite from MedDream. An arbitrary file read vulnerability exists in MedDream PACS Premium, which can be exploited by an attacker to cause arbitrary files to be read...

9.6CVSS5.9AI score0.00436EPSS
Exploits1References1
Fedora
Fedora
added 2025/11/25 1:42 a.m.7 views

[SECURITY] Fedora 42 Update: podman-5.7.0-1.fc42

podman Pod Manager is a fully featured container engine that is a simple daemonless tool. podman provides a Docker-CLI comparable command line that eases the transition from other container engines and allows the management of pods, containers and images. Simply put: alias docker=3Dpodman. Most...

7.5CVSS7.1AI score0.00586EPSS
Exploits0
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-23315

Malicious code in bioql PyPI...

9.1CVSS6.3AI score0.00475EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-23316

Malicious code in bioql PyPI...

6.2CVSS6.3AI score0.0019EPSS
Exploits1References3
Fedora
Fedora
added 2025/09/10 3:8 a.m.6 views

[SECURITY] Fedora 43 Update: podman-5.6.1-1.fc43

podman Pod Manager is a fully featured container engine that is a simple daemonless tool. podman provides a Docker-CLI comparable command line that eases the transition from other container engines and allows the management of pods, containers and images. Simply put: alias docker=3Dpodman. Most...

8.1CVSS6.9AI score0.01008EPSS
Exploits0
Fedora
Fedora
added 2025/09/10 12:53 a.m.5 views

[SECURITY] Fedora 42 Update: podman-5.6.1-1.fc42

podman Pod Manager is a fully featured container engine that is a simple daemonless tool. podman provides a Docker-CLI comparable command line that eases the transition from other container engines and allows the management of pods, containers and images. Simply put: alias docker=3Dpodman. Most...

8.1CVSS7.3AI score0.01008EPSS
Exploits0
Fedora
Fedora
added 2025/09/09 1:41 a.m.7 views

[SECURITY] Fedora 41 Update: podman-5.6.1-1.fc41

podman Pod Manager is a fully featured container engine that is a simple daemonless tool. podman provides a Docker-CLI comparable command line that eases the transition from other container engines and allows the management of pods, containers and images. Simply put: alias docker=3Dpodman. Most...

8.1CVSS6.9AI score0.01008EPSS
Exploits0
NVD
NVD
added 2025/07/31 9:15 p.m.5 views

CVE-2025-48072

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. Version 3.3.2 is vulnerable to a heap-based buffer overflow during a read operation due to bad pointer math when decompressing DWAA-packed scan-line EXR...

9.1CVSS0.00475EPSS
Exploits1References3
CVE
CVE
added 2025/07/31 8:25 p.m.33 views

CVE-2025-48073

OpenEXR 3.3.2 is vulnerable when reading a deep scanline image with a large sample count in reduceMemory mode, potentially crashing the target application via a NULL pointer dereference in a write operation. The issue is caused during the write path in ScanLineProcess::run_fill when the sample bu...

6.2CVSS6.4AI score0.0019EPSS
Exploits1References2Affected Software1
Debian CVE
Debian CVE
added 2025/07/31 8:25 p.m.4 views

CVE-2025-48073

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In version 3.3.2, when reading a deep scanline image with a large sample count in reduceMemory mode, it is possible to crash a target application with a...

6.2CVSS5.3AI score0.0019EPSS
Exploits1
CVE
CVE
added 2025/07/31 8:13 p.m.24 views

CVE-2025-48071

OpenEXR vulnerability CVE-2025-48071 is a heap-based buffer overflow in the EXR write/decompression path for ZIPS-packed deep scanline data when a forged chunk header causes the unpacked size to be inconsistent with the actual uncompressed data. The issue resides in OpenEXR’s chunk parsing and un...

8.4CVSS7AI score0.00299EPSS
Exploits1References3Affected Software1
Rows per page
Query Builder