Lucene search
+L

30034 matches found

CVE
CVE
added 2026/07/17 2:31 a.m.29 views

CVE-2026-15159

Affected software: Ninja Forms - Excel Export plugin for WordPress. Vulnerability type: Insecure Direct Object Reference via the spreadsheet_export_form_id parameter. Root cause: missing validation on a user controlled key. Versions affected: all versions up to and including 3.3.6. Impact: authen...

4.3CVSS6AI score0.00178EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/07/17 12:0 a.m.15 views

PT-2026-60805

Name of the Vulnerable Software and Affected Versions Chat2DB versions prior to 5.3.0 Description An insecure direct object reference occurs when the application provides direct access to objects based on user-supplied input. In the 'GET /api/connection/datasource/id' endpoint, the handler calls...

7.1CVSS5.9AI score0.00231EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/17 12:0 a.m.16 views

PT-2026-60832

The HCL DFMPro, DFXAnalytics and DFXServer installers are affected by ‘Insecure file permissions Leading to Privilege Escalation’ vulnerability, which enables any logged-in non-administrative user to overwrite or replace the executable file with a malicious binary...

3.3CVSS5.3AI score0.00074EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/07/17 12:0 a.m.15 views

PT-2026-60779

osTicket versions v1.18.3 and v1.17.7 contain a Broken Object Level Authorization BOLA leading to Insecure Direct Object Reference IDOR in the AJAX ticket-management subsystem...

7.1CVSS5.3AI score0.00312EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/07/17 12:0 a.m.13 views

PT-2026-60859

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.0 Description An issue exists due to insecure default configuration and incomplete enforcement of the server-side request forgery SSRF protection mechanism. SSRF is a flaw that allows an attacker to...

7.7CVSS5.3AI score0.00201EPSS
SaveExploits0References3
NVD
NVD
added 2026/07/16 7:16 p.m.13 views

CVE-2026-46513

Frogman provides headless PBX control through MCP and HTTP API. Prior to 1.6.2, Frogman stored API tokens generated by Tools/CreateApiToken.php:33-36 as raw bin2hexrandombytes32 strings in ocapitokens, and Frogman.class.php:78 authenticated the X-Frogman-Token header by comparing it with the stor...

7.4CVSS0.00261EPSS
SaveExploits0References4
CVE
CVE
added 2026/07/16 5:58 p.m.20 views

CVE-2026-46351

BigBlueButton (open-source virtual classroom) prior to 3.0.21 used insufficiently secure randomness to generate conference sessionToken values in bbb-common-web/src/main/java/org/bigbluebutton/api/Util.java and bigbluebutton-web/grails-app/controllers/org/bigbluebutton/web/controllers/ApiControll...

8.1CVSS6.1AI score0.00258EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/16 5:58 p.m.8 views

CVE-2026-46351 BigBlueButton: Insecure Randomness allows to guess user's conference session token and impersonate them

BigBlueButton is an open-source virtual classroom. Prior to 3.0.21, bbb-web generated conference sessionToken values with insufficiently secure randomness in bbb-common-web/src/main/java/org/bigbluebutton/api/Util.java and...

8.1CVSS6.1AI score
SaveExploits0References5
Cvelist
Cvelist
added 2026/07/16 5:58 p.m.44 views

CVE-2026-46351 BigBlueButton: Insecure Randomness allows to guess user's conference session token and impersonate them

BigBlueButton is an open-source virtual classroom. Prior to 3.0.21, bbb-web generated conference sessionToken values with insufficiently secure randomness in bbb-common-web/src/main/java/org/bigbluebutton/api/Util.java and...

8.1CVSS0.00258EPSS
SaveExploits0References3
CVE
CVE
added 2026/07/16 4:48 p.m.22 views

CVE-2026-9046

CVE-2026-9046 describes an insecure-permissions issue affecting Windows deployments of Legion Zone and Lenovo App Store (Chinese market). When installed on a non-system partition, a local user could potentially execute arbitrary code due to insufficient access controls. The vulnerability is class...

7.3CVSS6.3AI score0.00085EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/16 4:48 p.m.14 views

EUVD-2026-44975

A potential insecure permissions vulnerability was reported in Legion Zone and the Lenovo App Store Windows applications, distributed exclusively in the Chinese market, that when installed on a non‑system partition, could allow a local user to execute arbitrary code...

7.3CVSS6.3AI score0.00085EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/16 4:9 p.m.14 views

CVE-2026-55548

In Yamcs, CVE-2026-55548 affects the PacketsApi.exportPackets endpoint. The root cause was failure to enforce per-packet ReadPacket privileges when a request supplied an empty packet-name list, causing no WHERE pname IN filter and the onTuple handler to stream packets without per-row authorizatio...

4.3CVSS6.1AI score0.00247EPSS
SaveExploits1References5Affected Software1
CVE
CVE
added 2026/07/16 3:42 p.m.115 views

CVE-2026-45695

Kopia prior to version 0.23.0 is vulnerable to unauthenticated remote command execution via SSH ProxyCommand Injection when the HTTP server runs with --without-password. An attacker can send requests to /api/v1/repo/exists, causing the server to forward attacker-supplied SFTP storage configuratio...

9.8CVSS6.1AI score0.00348EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/07/16 3:42 p.m.36 views

CVE-2026-45695 Kopia: Unauthenticated RCE via SSH ProxyCommand Injection when --insecure --without-password is used

Kopia is a cross-platform backup tool for Windows, macOS, and Linux with fast incremental backups, client-side end-to-end encryption, compression, and data deduplication. Prior to 0.23.0, Kopia's HTTP server started with --without-password accepts unauthenticated requests to /api/v1/repo/exists a...

9.8CVSS0.00348EPSS
SaveExploits0References4
F5 Networks
F5 Networks
added 2026/07/16 3:34 p.m.11 views

K000162299: Reactor Netty vulnerability CVE-2026-41715

Security Advisory Description In specific scenarios involving HTTP redirects from a secure to an insecure endpoint, the Reactor Netty HTTP client may leak credentials. In order for this to happen, the HTTP client must have been explicitly configured to follow redirects. Affected versions: Reactor...

6.1CVSS6.1AI score0.00172EPSS
SaveExploits0
OSV
OSV
added 2026/07/16 3:12 p.m.5 views

CVE-2026-57205 SimpleChat: Authenticated users can access other users' profile metadata through user IDOR endpoints

SimpleChat is a secure AI conversation application with personal and group workspaces for document-grounded interactions. Prior to 0.241.203, the authenticated GET /api/user/info/ and GET /api/user/profile-image/ endpoints in application/singleapp/routebackendusers.py accepted a caller-supplied...

4.3CVSS5.3AI score
SaveExploits0References5
Veracode
Veracode
added 2026/07/16 5:28 a.m.15 views

Cross-site Scripting (XSS)

EasyAdmin is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to insufficient restrictions on uploaded file types and serving uploaded files inline from the public web root, which allows an attacker to upload malicious HTML or SVG files that execute JavaScript in an administrator'...

5.3AI score
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2026/07/16 12:0 a.m.27 views

PT-2026-60521

Name of the Vulnerable Software and Affected Versions Legion Zone affected versions not specified Lenovo App Store affected versions not specified Description Insecure permissions in the Legion Zone and Lenovo App Store Windows applications, distributed exclusively in the Chinese market, may allo...

7.3CVSS5.9AI score0.00085EPSS
SaveExploits0References3
Snyk
Snyk
added 2026/07/15 5:33 p.m.10 views

Incorrect Permission Assignment for Critical Resource

Overview garminconnect is a Python 3 API wrapper for Garmin Connect Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource due to insecure file-system permissions being set on the OAuth token store by the dump function. An attacker can gain...

8.4CVSS5.4AI score
SaveExploits0References2
CVE
CVE
added 2026/07/15 2:52 p.m.21 views

CVE-2026-61828

Affected software: NixOS/Nixpkgs’ MySQL service module (services.mysql). Vulnerability: The module initialization process could set up the MySQL data directory in a way that allows local unprivileged users (e.g., web or CGI processes on the same host) to log in as root without a password when usi...

8.5CVSS6.1AI score0.00107EPSS
SaveExploits0References7
Rows per page
Query Builder