Lucene search
+L

265335 matches found

RedHat Linux
RedHat Linux
added 5 hours ago3 views

firefox: thunderbird: Privilege escalation in WebExtensions

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in WebExtensions...

8.8CVSS5.3AI score0.00241EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 6 hours ago2 views

CVE-2026-68374

A flaw was found in the Linux kernel's USB core subsystem. A missing synchronization mechanism in the bosdescriptorsread function allows for a use-after-free vulnerability. This occurs when the udev-bos object is accessed while it is simultaneously being freed, potentially leading to a system cra...

7CVSS5.6AI score
SaveExploits0References4
RedhatCVE
RedhatCVE
added 6 hours ago2 views

CVE-2026-68177

A flaw was found in the Linux kernel's tracing module. When a module with an active enable/disable event is removed, its data can be accessed after it has been freed, leading to a use-after-free vulnerability. This could allow a local attacker to cause a denial of service or potentially escalate...

5.3AI score
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 6 hours ago3 views

CVE-2026-18972

An authenticated attacker can spoof another GUI user's identity by sending their request with the custom header "Grpc-Metadata-USER". This can lead to an account takeover attack from a user with low privileges to administrator...

9.6CVSS5.2AI score
SaveExploits0References2
CVE
CVE
added 6 hours ago14 views

CVE-2026-18972

CVE-2026-18972 describes an authenticated identity-spoofing flaw where an attacker can spoof another GUI user by sending a request with the Grpc-Metadata-USER header. This can enable account takeover from a low-privilege user to an administrator. The CVSS 3.1 vector in the document indicates high...

9.6CVSS5.2AI score
SaveExploits0References1
EUVD
EUVD
added 6 hours ago4 views

EUVD-2026-56127

An authenticated attacker can spoof another GUI user's identity by sending their request with the custom header "Grpc-Metadata-USER". This can lead to an account takeover attack from a user with low privileges to administrator...

9.6CVSS5.2AI score
SaveExploits0References1
Cvelist
Cvelist
added 6 hours ago7 views

CVE-2026-69108

A vulnerability has been identified in Siemens License Server SLS All versions V5.1. The affected application is vulnerable to a local privilege escalation due to an insecure sudoers policy. This could allow an attacker to execute arbitrary commands and plant malicious files as root, leading to...

8.3CVSS
SaveExploits0References1
EUVD
EUVD
added 6 hours ago4 views

EUVD-2026-56125

A vulnerability has been identified in Siemens License Server SLS All versions V5.1. The affected application is vulnerable to a local privilege escalation due to an insecure sudoers policy. This could allow an attacker to execute arbitrary commands and plant malicious files as root, leading to...

8.3CVSS5.7AI score
SaveExploits0References1
CVE
CVE
added 6 hours ago11 views

CVE-2026-69108

CVE-2026-69108 affects Siemens License Server (SLS) versions all

8.3CVSS5.7AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 6 hours ago3 views

CVE-2026-69108

A vulnerability has been identified in Siemens License Server SLS All versions V5.1. The affected application is vulnerable to a local privilege escalation due to an insecure sudoers policy. This could allow an attacker to execute arbitrary commands and plant malicious files as root, leading to...

8.3CVSS5.7AI score
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 6 hours ago4 views

CVE-2026-59086

A vulnerability has been identified in Simcenter Nastran All versions V2606. The affected applications contain a stack overflow vulnerability while parsing specially strings as argument for one of the application binaries. This could allow an attacker to execute code in the context of the current...

7.8CVSS5.5AI score
SaveExploits0References2
NVD
NVD
added 6 hours ago3 views

CVE-2026-72609

An SQL injection vulnerability in Koha through 24.11.17, 25.05.12, 25.11.06, and 26.05.01 allows authenticated staff with the acquisition = orderreceive permission to read arbitrary database contents via the orderby request parameter in acqui/parcels.pl. The parameter is passed to...

7.1CVSS
SaveExploits0References2
NVD
NVD
added 6 hours ago4 views

CVE-2026-72595

A broken access control vulnerability in BadChoice Handesk as of 2026-07-10 allows any authenticated agent to update ticket records belonging to other teams via the TicketsController@update endpoint. The endpoint calls no authorize method and performs no team-scoped ownership check. An attacker...

8.1CVSS
SaveExploits0References1
NVD
NVD
added 6 hours ago2 views

CVE-2026-72554

A broken access control vulnerability in Ladybird Web Solution Faveo Helpdesk 2.0.3 allows any self-registered customer to read ticket conversations belonging to other customers via the v1 REST API. The API verifies the existence of the requested ticket but not ownership, enabling any authenticat...

6.5CVSS
SaveExploits0References1
NVD
NVD
added 6 hours ago3 views

CVE-2026-72555

A broken access control vulnerability in Peppermint Lab Peppermint through commit ba6e217 exists because the Config.rolesactive flag defaults to false, causing all permission checks on ticket, client, and user handlers to behave as no-ops on default installations. All authenticated users bypass...

8.1CVSS
SaveExploits0References1
NVD
NVD
added 6 hours ago3 views

CVE-2026-72546

An insecure direct object reference vulnerability in Attendize through commit 9289acb allows any authenticated event organiser to inject attendees and orders into events belonging to other accounts via the postInviteAttendee endpoint. The endpoint loads the target event by ID without scoping the...

7.1CVSS
SaveExploits0References1
NVD
NVD
added 6 hours ago2 views

CVE-2026-72553

A stored cross-site scripting vulnerability in ElkArte Forum 2.0 Beta 1 allows any registered member to inject persistent JavaScript into the profile fields custblurb and custlocate. The fields are saved without HTML encoding and rendered unescaped in profile views visible to administrators. An...

5.4CVSS
SaveExploits0References1
NVD
NVD
added 6 hours ago4 views

CVE-2026-72540

An insecure direct object reference vulnerability in PhotoPrism through commit bb0b933 allows any user with a valid preview token to retrieve the original-resolution cover photo of any album. The AlbumCover handler does not verify that the requesting user is authorized to access the specified alb...

4.3CVSS
SaveExploits0References1
NVD
NVD
added 6 hours ago2 views

CVE-2026-72541

A missing authorization vulnerability in Windmill Labs Windmill through 1.783.0 allows any authenticated workspace member to overwrite any resource type schema via the updateresourcetype endpoint. The endpoint omits the administrator permission check that the corresponding deleteresourcetype...

6.5CVSS
SaveExploits0References1
NVD
NVD
added 6 hours ago3 views

CVE-2026-72534

A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with a source-scoped SCIM provisioning token to gain superuser privileges by provisioning a SCIM group that matches an existing administrator group by name. The SCIM group ingest function adop...

8.8CVSS
SaveExploits0References1
Rows per page
Query Builder