Lucene search
+L

4129 matches found

Vulnrichment
Vulnrichment
•added 2026/06/11 10:32 a.m.•23 views

CVE-2026-8464 Path traversal in Neuron Soft Golem OEE MES

Golem OEE MES is vulnerable to an unauthenticated path traversal flaw. This vulnerability allows an attacker in the same local network to read arbitrary files from the server's operating system by manipulating HTTP request paths. This issue has been fixed in version 11.6.0...

8.3CVSS6AI score0.00204EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/06/11 10:32 a.m.•28 views

EUVD-2026-36234

Golem OEE MES is vulnerable to an unauthenticated path traversal flaw. This vulnerability allows an attacker in the same local network to read arbitrary files from the server's operating system by manipulating HTTP request paths. This issue has been fixed in version 11.6.0...

8.3CVSS5.5AI score0.00204EPSS
SaveExploits0References2
CVE
CVE
•added 2026/06/11 10:32 a.m.•63 views

CVE-2026-8464

CVE-2026-8464 : Golem OEE MES is affected by an unauthenticated path-traversal vulnerability that could allow an attacker in the same local network to read arbitrary files from the server by manipulating HTTP request paths. The issue is fixed in version 11.6.0. Affected product: Golem OEE MES; vu...

8.3CVSS6AI score0.00204EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/06/11 10:32 a.m.•55 views

CVE-2026-8464 Path traversal in Neuron Soft Golem OEE MES

Golem OEE MES is vulnerable to an unauthenticated path traversal flaw. This vulnerability allows an attacker in the same local network to read arbitrary files from the server's operating system by manipulating HTTP request paths. This issue has been fixed in version 11.6.0...

8.3CVSS0.00204EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/11 12:00 a.m.•4 views

CVE-2026-12014: Use After Free

Use after free in Cast in Google Chrome prior to 149.0.7827.115 allowed an attacker on the local network segment to potentially perform a sandbox escape via malicious network traffic. Chromium security severity: High...

8.3CVSS8.5AI score0.00174EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/11 12:00 a.m.•9 views

CVE-2026-8464: Improper Limitation of a Pathname to a Restricted Directory

Golem OEE MES is vulnerable to an unauthenticated path traversal flaw. This vulnerability allows an attacker in the same local network to read arbitrary files from the server's operating system by manipulating HTTP request paths. This issue has been fixed in version 11.6.0...

8.3CVSS5.9AI score0.00204EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/06/11 12:00 a.m.•34 views

Neuron Golem OEE MES path traversal vulnerability

Neuron Golem OEE MES is a manufacturing execution system and equipment integrated efficiency management platform developed by the Polish company Neuron. The Neuron Golem OEE MES has a path traversal vulnerability, which stems from a path traversal flaw. This vulnerability could allow attackers...

8.3CVSS6.1AI score0.00204EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/06/11 12:00 a.m.•39 views

PT-2026-48654

Golem OEE MES is vulnerable to an unauthenticated path traversal flaw. This vulnerability allows an attacker in the same local network to read arbitrary files from the server's operating system by manipulating HTTP request paths. This issue has been fixed in version 11.6.0...

8.3CVSS5.5AI score0.00204EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/06/11 12:00 a.m.•43 views

Google Chrome Resource Management Error Vulnerability

Google Chrome is a web browser developed by Google. It primarily provides features for web browsing, extension support, and multi-platform synchronization. There is a resource management vulnerability in Google Chrome. This vulnerability stems from the Cast component’s failure to properly handle...

8.3CVSS7.5AI score0.00174EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/06/10 9:04 p.m.•25 views

CVE-2026-9211

An unauthenticated user on the local network can gain control of the router and make unauthorized changes to its operation...

8.8CVSS5.5AI score0.00235EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/06/10 9:04 p.m.•27 views

CVE-2026-9210

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality...

7.1CVSS5.8AI score0.00216EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/06/10 9:04 p.m.•32 views

CVE-2026-9212

Insufficient authentication and input validation in the listed NETGEAR models allow users connected to the local network to execute commands impacting the product's confidentiality or change certain configurations...

8.3CVSS6.2AI score0.0027EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/06/10 9:02 p.m.•25 views

CVE-2026-3088

Unauthenticated users on the local network can cause the router to become unavailable by sending specially crafted requests...

7.1CVSS5.5AI score0.00357EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/06/10 9:02 p.m.•29 views

CVE-2026-0418

Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network to tamper with the system...

6.8CVSS5.4AI score0.00245EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/06/10 9:00 p.m.•27 views

CVE-2026-0413

A buffer overflow vulnerability due to insufficient input validation in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality...

6.8CVSS5.8AI score0.00323EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/06/10 9:00 p.m.•25 views

CVE-2026-0416

An insufficient input validation vulnerability in certain NETGEAR router models as listed allows an authenticated administrator with local network access to submit crafted input that bypasses intended management interface restrictions, resulting in unauthorized modification of protected router...

6.8CVSS5.4AI score0.0018EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/06/10 9:00 p.m.•25 views

CVE-2026-0410

Authenticated administrators connected to the local network can gain elevated access to the router and make unauthorized changes to router software and functionality...

5.7CVSS5.4AI score0.00219EPSS
SaveExploits0References1
NVD
NVD
•added 2026/06/10 4:17 p.m.•48 views

CVE-2026-48860

Reliance on IP Address for Authentication vulnerability in Erlang/OTP ssl inettlsdist module allows unauthenticated bypass of the distribution-over-TLS LAN allowlist. The inettlsdist:checkip/1 function, which enforces a LAN allowlist for Erlang distribution over TLS, calls inet:sockname/1 instead...

7.5CVSS0.0021EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/06/10 1:55 p.m.•45 views

EUVD-2026-36033

A flaw was found in assisted-migration-agent. An unauthenticated attacker, located on the same local area network LAN, can exploit a path traversal vulnerability. By crafting a specially designed gzipped tarball, the attacker can bypass security checks and write arbitrary files to the system. Thi...

9.6CVSS5.7AI score0.00288EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/06/10 1:55 p.m.•59 views

CVE-2026-53476 Assisted-migration-agent: vddk tarball chained-symlink arbitrary file write

A flaw was found in assisted-migration-agent. An unauthenticated attacker, located on the same local area network LAN, can exploit a path traversal vulnerability. By crafting a specially designed gzipped tarball, the attacker can bypass security checks and write arbitrary files to the system. Thi...

9.6CVSS0.00288EPSS
SaveExploits0References3
Rows per page
Query Builder