Lucene search
+L

20665 matches found

NVD
NVD
added 2026/09/08 6:20 p.m.7 views

CVE-2026-79904

Photoshop Mobile is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to access unauthorized files or directories outside the intende...

5CVSS0.0013EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/08 6:20 p.m.8 views

CVE-2026-76196

Photoshop Mobile is affected by a Session Fixation vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain access to sensitive resources. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user...

7.4CVSS0.002EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/08 6:20 p.m.5 views

CVE-2026-70579

Out-of-bounds read in Windows Mobile Broadband allows an unauthorized attacker to disclose information over a network...

7.5CVSS0.01049EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/08 5:27 p.m.23 views

CVE-2026-79904 Photoshop Mobile | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

Photoshop Mobile is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to access unauthorized files or directories outside the intende...

5CVSS0.0013EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/08 5:27 p.m.9 views

CVE-2026-76196

Photoshop Mobile is affected by a Session Fixation vulnerability (CWE-384) that could result in privilege escalation , allowing an attacker to gain access to sensitive resources. Exploitation requires user interaction — specifically, a victim must interact with a malicious webpage — and additiona...

7.4CVSS5.7AI score0.002EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2026/09/08 5:27 p.m.11 views

CVE-2026-79904

Photoshop Mobile is affected by a Path Traversal (CWE-22) vulnerability caused by improper limitation of a pathname to a restricted directory, which could result in a security feature bypass . A low-privileged attacker could access unauthorized files or directories outside intended restrictions. ...

5CVSS5.7AI score0.0013EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/09/08 5:27 p.m.28 views

CVE-2026-76196 Photoshop Mobile | Session Fixation (CWE-384)

Photoshop Mobile is affected by a Session Fixation vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain access to sensitive resources. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user...

7.4CVSS0.002EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/08 5:17 p.m.20 views

CVE-2026-70579

CVE-2026-70579 is an out-of-bounds read in Windows Mobile Broadband that allows an unauthorized, remote attacker to disclose information over a network without requiring user interaction or prior authentication. The assigned CVSS 3.1 base score is 7.5 (HIGH) with vector AV:N/AC:L/PR:N/UI:N/S:U/C:...

7.5CVSS5.7AI score0.01049EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/08 5:17 p.m.6 views

EUVD-2026-73656

Out-of-bounds read in Windows Mobile Broadband allows an unauthorized attacker to disclose information over a network...

7.5CVSS5.7AI score0.01049EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/08 3:18 p.m.13 views

CVE-2026-18851

Missing authorization in Ivanti Endpoint Manager Mobile before version 12.10.0.0, 12.9.0.2, and 12.8.0.4 allows a remote authenticated attacker to escalate their privileges to admin...

8.8CVSS0.01024EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/09/08 12:00 a.m.11 views

PT-2026-87092

Ivanti Patches 10 Flaws Across EPMM, Neurons ITSM and Sentry Including Unauthenticated RCE https://t.co/gNAWhXgUsO "The EPMM advisory addresses CVE-2026-18851, a high-severity missing authorization vulnerability with a CVSS score of 8.8. Classified as CWE-862…"...

8.8CVSS5.8AI score0.01024EPSS
SaveExploits0References5
OSV
OSV
added 2026/09/07 6:57 p.m.5 views

CLSA-2026-1788807441 TuxCare security update for jquery-mobile (1 CVE)

TuxCare rebuilt jquery-mobile to address 1 CVE. Fixed in 1.4.5-tuxcare.1...

5.7AI score
SaveExploits0
NVD
NVD
added 2026/09/07 1:20 p.m.8 views

CVE-2026-6223

Improper restriction of excessive authentication attempts vulnerability in Bahçelievler Muncipality BiHayat App allows Authentication Bypass. This issue affects BiHayat App: from 2.1.7 through 07092026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

9.4CVSS0.00441EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/07 12:30 p.m.8 views

EUVD-2026-72369

Improper restriction of excessive authentication attempts vulnerability in Bahçelievler Muncipality BiHayat App allows Authentication Bypass. This issue affects BiHayat App: from 2.1.7 through 07092026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

9.4CVSS5.7AI score0.00441EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/07 12:30 p.m.11 views

CVE-2026-6223

CVE-2026-6223 is a CRITICAL (CVSS 9.4) improper restriction of excessive authentication attempts vulnerability in the Bahçelievler Municipality BiHayat App (versions 2.1.7 through 07092026), allowing an OTP bypass that leads to full authentication bypass. The vector is network-based with no privi...

9.4CVSS5.7AI score0.00441EPSS
SaveExploits0References1
OSV
OSV
added 2026/09/07 4:56 a.m.7 views

MAL-2026-16038 Malicious code in scw-mobile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f92fe2c0fe1acd783b5612c30ba1976c68c421b6451a68d150928e5166c362e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.8AI score
SaveExploits0References1
NVD
NVD
added 2026/09/04 8:17 p.m.5 views

CVE-2026-85643

A flaw has been found in code-projects Online Shopping System 1.0. Impacted is the function mysqliquery of the file admin/adduser.php. Executing a manipulation of the argument mobile can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used...

5.8CVSS0.0021EPSS
SaveExploits0References6
NVD
NVD
added 2026/09/04 8:17 p.m.5 views

CVE-2026-53604

nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. Prior to version 0.3.8, the web handler renderMobileBundle passes the real pki.CAResolver directly into mobilebundle.Build. Inside Build, resolver.LoadByID decrypts the CA's ed25519 private key into a pki.CAManager, but Build...

7.1CVSS0.00116EPSS
SaveExploits0References3
OSV
OSV
added 2026/09/04 7:40 p.m.7 views

CVE-2026-53604 nebula-mesh: CA private key not zeroized on web mobile-bundle error paths

nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. Prior to version 0.3.8, the web handler renderMobileBundle passes the real pki.CAResolver directly into mobilebundle.Build. Inside Build, resolver.LoadByID decrypts the CA's ed25519 private key into a pki.CAManager, but Build...

7.1CVSS5.9AI score
SaveExploits0References5
Cvelist
Cvelist
added 2026/09/04 7:40 p.m.36 views

CVE-2026-53604 nebula-mesh: CA private key not zeroized on web mobile-bundle error paths

nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. Prior to version 0.3.8, the web handler renderMobileBundle passes the real pki.CAResolver directly into mobilebundle.Build. Inside Build, resolver.LoadByID decrypts the CA's ed25519 private key into a pki.CAManager, but Build...

7.1CVSS0.00116EPSS
SaveExploits0References3
Rows per page
Query Builder