Lucene search
+L

24227 matches found

Vulnrichment
Vulnrichment
•added 2026/09/04 11:49 a.m.•15 views

CVE-2026-19043 Authorization Bypass Critical POS Management Functions in Menulux Software's Menulux Portal

Missing Authorization vulnerability in Menulux Software Inc. Menulux Portal allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Menulux Portal: before 20260903211448...

4.3CVSS5.8AI score0.00197EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/04 11:44 a.m.•16 views

CVE-2026-18957 Stored XSS in Menulux Software's Menulux Portal

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Menulux Software Inc. Menulux Portal allows Stored XSS. This issue affects Menulux Portal: before 20260903211448...

5.4CVSS5.8AI score0.00162EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/04 11:44 a.m.•44 views

CVE-2026-18957 Stored XSS in Menulux Software's Menulux Portal

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Menulux Software Inc. Menulux Portal allows Stored XSS. This issue affects Menulux Portal: before 20260903211448...

5.4CVSS0.00162EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/04 11:44 a.m.•20 views

CVE-2026-18957

Menulux Portal by Menulux Software Inc. is affected by a Stored XSS vulnerability caused by improper neutralization of input during web page generation. The issue affects versions prior to 20260903211448 , which appears to be the remediation release. The vulnerability is rated CVSS 5.4 (MEDIUM) w...

5.4CVSS5.8AI score0.00162EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/04 11:44 a.m.•13 views

EUVD-2026-71037

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Menulux Software Inc. Menulux Portal allows Stored XSS. This issue affects Menulux Portal: before 20260903211448...

5.4CVSS5.3AI score0.00162EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/04 8:17 a.m.•15 views

CVE-2026-6217

Use of a One-Way hash without a salt vulnerability in Pik Online Software Solutions Inc. Pik Online Portal allows Cryptanalysis. This issue affects Pik Online Portal: through 3.5.1...

6.3CVSS0.00179EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/04 7:27 a.m.•47 views

CVE-2026-6217 Information Disclosure in Pik Online Software's Portal

Use of a One-Way hash without a salt vulnerability in Pik Online Software Solutions Inc. Pik Online Portal allows Cryptanalysis. This issue affects Pik Online Portal: through 3.5.1...

6.3CVSS0.00179EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/04 7:27 a.m.•24 views

CVE-2026-6217

Pik Online Portal (by Pik Online Software Solutions Inc.) is vulnerable to information disclosure via use of a one-way hash without a salt , allowing cryptanalysis of hashed data. The issue affects versions through 3.5.1 . The CVSS 3.1 score is 6.3 (MEDIUM) , with a network attack vector, low com...

6.3CVSS5.8AI score0.00179EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/04 7:27 a.m.•14 views

EUVD-2026-70952

Use of a One-Way hash without a salt vulnerability in Pik Online Software Solutions Inc. Pik Online Portal allows Cryptanalysis. This issue affects Pik Online Portal: through 3.5.1...

6.3CVSS5.2AI score0.00179EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/04 7:27 a.m.•13 views

CVE-2026-6217 Information Disclosure in Pik Online Software's Portal

Use of a One-Way hash without a salt vulnerability in Pik Online Software Solutions Inc. Pik Online Portal allows Cryptanalysis. This issue affects Pik Online Portal: through 3.5.1...

6.3CVSS5.8AI score0.00179EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/04 12:00 a.m.•40 views

CVE-2026-78849

Cross Site Scripting vulnerability in Netgate pfSense Plus software versions = 26.03 pfSense CE software versions = 2.8.1 allows a remote attacker to execute arbitrary code via the captiveportalstatus.widget.php file...

0.00501EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/04 12:00 a.m.•23 views

PT-2026-85515

Plaintext storage of a password vulnerability in Menulux Software Inc. Menulux Portal allows Retrieve Embedded Sensitive Data. This issue affects Menulux Portal: before 20260903211448...

7.1CVSS5.1AI score0.00211EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/04 12:00 a.m.•9 views

CVE-2026-78849

Cross Site Scripting vulnerability in Netgate pfSense Plus software versions = 26.03 pfSense CE software versions = 2.8.1 allows a remote attacker to execute arbitrary code via the captiveportalstatus.widget.php file...

6.7AI score0.00501EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/04 12:00 a.m.•3 views

CVE-2026-19080: Observable Response Discrepancy

Observable response discrepancy vulnerability in Menulux Software Inc. Menulux Portal allows Account Footprinting. This issue affects Menulux Portal: before 20260903211448...

7.5CVSS5.8AI score0.00303EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/04 12:00 a.m.•5 views

CVE-2026-19051: Plaintext Storage of a Password

Plaintext storage of a password vulnerability in Menulux Software Inc. Menulux Portal allows Retrieve Embedded Sensitive Data. This issue affects Menulux Portal: before 20260903211448...

7.1CVSS5.8AI score0.00211EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/04 12:00 a.m.•3 views

CVE-2026-19043: Missing Authorization

Missing Authorization vulnerability in Menulux Software Inc. Menulux Portal allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Menulux Portal: before 20260903211448...

4.3CVSS5.8AI score0.00197EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/04 12:00 a.m.•3 views

CVE-2026-6217: Use of a One-Way Hash without a Salt

Use of a One-Way hash without a salt vulnerability in Pik Online Software Solutions Inc. Pik Online Portal allows Cryptanalysis. This issue affects Pik Online Portal: through 3.5.1...

6.3CVSS5.8AI score0.00179EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/04 12:00 a.m.•26 views

PT-2026-85432

Use of a One-Way hash without a salt vulnerability in Pik Online Software Solutions Inc. Pik Online Portal allows Cryptanalysis. This issue affects Pik Online Portal: through 3.5.1...

6.3CVSS5.2AI score0.00179EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/04 12:00 a.m.•20 views

PT-2026-85476

Missing Authorization vulnerability in Menulux Software Inc. Menulux Portal allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Menulux Portal: before 20260903211448...

4.3CVSS5.1AI score0.00197EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/04 12:00 a.m.•36 views

CVE-2026-78849

A Cross Site Scripting (XSS) vulnerability exists in Netgate pfSense Plus software (versions <= 26.03) and pfSense CE software (versions

5.4CVSS6.7AI score0.00501EPSS
SaveExploits0References3
Rows per page
Query Builder