Lucene search
+L

10823 matches found

Cvelist
Cvelist
added 2026/05/27 5:10 p.m.51 views

CVE-2026-45715 Budibase: SSRF Bypass via HTTP Redirect in REST Datasource Integration

Budibase is an open-source low-code platform. Prior to 3.38.1, the REST datasource integration packages/server/src/integrations/rest.ts follows HTTP redirects without re-checking the IP blacklist, allowing an authenticated Builder to access internal services cloud metadata, databases by redirecti...

7.7CVSS0.00258EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2026/05/27 5:0 p.m.14 views

WordPress Smart Online Order for Clover plugin <= 1.6.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by she11f in WordPress Plugin Smart Online Order for Clover versions = 1.6.0...

7.1CVSS5.8AI score0.00152EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2026/05/27 3:33 p.m.10 views

GHSA-RF8W-7C3G-7H3G Jenkins GitHub Integration Plugin has a cross-site request forgery (CSRF) vulnerability

Jenkins GitHub Integration Plugin 0.7.3 and earlier does not require POST requests for an HTTP endpoint, resulting in a cross-site request forgery CSRF vulnerability. This vulnerability allows attackers to trigger a build for a pull request. GitHub Integration Plugin 0.7.4 requires POST requests...

4.3CVSS5.7AI score0.00105EPSS
SaveExploits0References3
OSV
OSV
added 2026/05/27 3:16 p.m.11 views

CVE-2026-48925

A cross-site request forgery CSRF vulnerability in Jenkins GitHub Integration Plugin 0.7.3 and earlier allows attackers to attackers to trigger a build for a pull request...

4.3CVSS5.8AI score
SaveExploits0References1
NVD
NVD
added 2026/05/27 3:16 p.m.19 views

CVE-2026-48925

A cross-site request forgery CSRF vulnerability in Jenkins GitHub Integration Plugin 0.7.3 and earlier allows attackers to attackers to trigger a build for a pull request...

4.3CVSS0.00105EPSS
SaveExploits0References1
NVD
NVD
added 2026/05/27 3:16 p.m.20 views

CVE-2026-44972

GuardDog is a CLI tool to identify malicious PyPI packages. From 2.6.0 to 2.9.0, GuardDog includes attacker-controlled filenames, file locations, messages, and code snippets in its default human-readable output without escaping terminal control characters. A malicious package can therefore inject...

5CVSS0.00113EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/05/27 2:42 p.m.12 views

CVE-2026-44972 GuardDog: Unsanitized human-readable scan output allows terminal escape injection from malicious package content

GuardDog is a CLI tool to identify malicious PyPI packages. From 2.6.0 to 2.9.0, GuardDog includes attacker-controlled filenames, file locations, messages, and code snippets in its default human-readable output without escaping terminal control characters. A malicious package can therefore inject...

5CVSS5.9AI score0.00113EPSS
SaveExploits0References1
NVD
NVD
added 2026/05/27 2:17 p.m.18 views

CVE-2026-46054

In the Linux kernel, the following vulnerability has been resolved: selinux: fix overlayfs mmap and mprotect access checks The existing SELinux security model for overlayfs is to allow access if the current task is able to access the top level file the "user" file and the mounter's credentials ar...

7.1CVSS0.00118EPSS
SaveExploits0References12
Vulnrichment
Vulnrichment
added 2026/05/27 2:13 p.m.12 views

CVE-2026-48925

A cross-site request forgery CSRF vulnerability in Jenkins GitHub Integration Plugin 0.7.3 and earlier allows attackers to attackers to trigger a build for a pull request...

5.7AI score0.00105EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/05/27 2:13 p.m.55 views

CVE-2026-48925

A cross-site request forgery CSRF vulnerability in Jenkins GitHub Integration Plugin 0.7.3 and earlier allows attackers to attackers to trigger a build for a pull request...

0.00105EPSS
SaveExploits0References1
CVE
CVE
added 2026/05/27 2:13 p.m.38 views

CVE-2026-48925

CVE-2026-48925 is a CSRF vulnerability in the Jenkins GitHub Integration Plugin, affected

4.3CVSS5.7AI score0.00105EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/27 1:56 p.m.10 views

CVE-2026-7876

IBM Aspera HSTS for CP4I 1.5.1 through 1.5.19...

5.8AI score0.00312EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2026/05/27 1:56 p.m.33 views

CVE-2026-7876

CVE-2026-7876 is an authentication bypass in IBM Aspera High-Speed Transfer Server for Cloud Pak for Integration (CP4I). Affected CP4I HSTS versions are 1.5.1–1.5.19. The vulnerability (CWE-287) could allow a transfer client to access files in the server’s local storage that should be restricted....

9.1CVSS5.3AI score0.00312EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/05/27 1:56 p.m.18 views

CVE-2026-7876 Authentication bypass vulnerability found in Aspera High-Speed Transfer Server for Cloud Pak for Integration

IBM Aspera HSTS for CP4I 1.5.1 through 1.5.19 is affected by an authentication bypass vulnerability. A transfer client may be able to take advantage of this vulnerability to access files in the server's local storage that they should not have access to, when specific restriction settings are not ...

5.5AI score0.00312EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/05/27 1:56 p.m.57 views

CVE-2026-7876 Authentication bypass vulnerability found in Aspera High-Speed Transfer Server for Cloud Pak for Integration

IBM Aspera HSTS for CP4I 1.5.1 through 1.5.19 is affected by an authentication bypass vulnerability. A transfer client may be able to take advantage of this vulnerability to access files in the server's local storage that they should not have access to, when specific restriction settings are not ...

0.00312EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/05/27 1:56 p.m.13 views

EUVD-2026-32506

IBM Aspera HSTS for CP4I 1.5.1 through 1.5.19...

5.8AI score0.00312EPSS
SaveExploits0References1
Wiz blog
Wiz blog
added 2026/05/27 1:52 p.m.27 views

Commit to Compromise: A New Threat Actor Targeting the Cryptocurrency Industry's Software Development Infrastructure

Wiz CIRT and Wiz Research detail JINX-0164, a threat actor using LinkedIn social engineering, custom macOS malware, and CI/CD hijacking to target cryptocurrency organizations...

5.8AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2026/05/27 1:41 p.m.25 views

Important: Red Hat Security Advisory: Red Hat Developer Hub 1.8.7 release.

Red Hat Developer Hub 1.8.7 has been released. Red Hat Developer Hub RHDH is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters AKS, EKS, GKE. The core features of RHDH include a single...

10CVSS5.8AI score0.00808EPSS
SaveExploits8References32
NVD
NVD
added 2026/05/27 4:16 a.m.23 views

CVE-2026-2254

Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.2.0.6 and 11.0.0.0, including 9.3.x and 8.3.x, does not apply ACLs on certain API endpoints related to platform mail notfications...

6.3CVSS0.00154EPSS
SaveExploits0References1
NVD
NVD
added 2026/05/27 4:16 a.m.19 views

CVE-2026-2253

Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.2.0.7 and 11.0.0.0, including 9.3.x and 8.3.x, does not prevent certain XML parsers from resolving external entities...

7.7CVSS0.00201EPSS
SaveExploits0References1
Rows per page
Query Builder