Lucene search
+L

1980 matches found

OSV
OSV
added 2026/03/26 12:37 p.m.9 views

CLSA-2026-1774528630 openssh: Fix of 3 CVEs

CVE-2018-20685: fix a vulnerability scp client where a malicious server could bypass intended access restrictions and modify target directory permissions via crafted filenames - CVE-2019-6109: fix scp client where a malicious server could manipulate the client's progress display output due to...

6.8CVSS7AI score0.58204EPSS
SaveExploits9References1
NVD
NVD
added 2026/03/12 1:16 p.m.8 views

CVE-2026-2513

A vulnerability exists in Progress Flowmon ADS versions prior to 12.5.5 and 13.0.3, whereby an administrator who clicks a malicious link provided by an attacker may inadvertently trigger unintended actions within their authenticated web session...

8.6CVSS0.00286EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/03/12 1:0 p.m.3 views

CVE-2026-2514 Possibility of unintended actions when viewing maliciously crafted network data in Progress Flowmon ADS web application

In Progress Flowmon ADS versions prior to 12.5.5 and 13.0.3, a vulnerability exists whereby an adversary with access to Flowmon monitoring ports may craft malicious network data that, when processed by Flowmon ADS and viewed by an authenticated user, could result in unintended actions being...

8.6CVSS5.8AI score0.00189EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/03/12 12:58 p.m.4 views

CVE-2026-2513 Possibility of unintended actions when an administrator clicks a malicious link in the Progress Flowmon ADS web application

A vulnerability exists in Progress Flowmon ADS versions prior to 12.5.5 and 13.0.3, whereby an administrator who clicks a malicious link provided by an attacker may inadvertently trigger unintended actions within their authenticated web session...

8.6CVSS5.8AI score0.00286EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/03/12 12:58 p.m.28 views

CVE-2026-2513 Possibility of unintended actions when an administrator clicks a malicious link in the Progress Flowmon ADS web application

A vulnerability exists in Progress Flowmon ADS versions prior to 12.5.5 and 13.0.3, whereby an administrator who clicks a malicious link provided by an attacker may inadvertently trigger unintended actions within their authenticated web session...

8.6CVSS0.00286EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/12 12:58 p.m.7 views

CVE-2026-2513

A vulnerability exists in Progress Flowmon ADS versions prior to 12.5.5 and 13.0.3, whereby an administrator who clicks a malicious link provided by an attacker may inadvertently trigger unintended actions within their authenticated web session...

8.6CVSS5.8AI score0.00286EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2026/03/12 12:58 p.m.14 views

CVE-2026-2513

Progress Flowmon ADS vulnerable in versions prior to 12.5.5 and 13.0.3. An administrator who clicks a malicious link within an authenticated web session may trigger unintended actions, exposing high-severity risk (CVSS 8.6; Network vector, user interaction required). The advisory does not include...

8.6CVSS5.8AI score0.00286EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/03/12 12:0 a.m.17 views

PT-2026-24948

A vulnerability exists in Progress Flowmon ADS versions prior to 12.5.5 and 13.0.3, whereby an administrator who clicks a malicious link provided by an attacker may inadvertently trigger unintended actions within their authenticated web session...

8.6CVSS5.8AI score0.00286EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/03/12 12:0 a.m.16 views

PT-2026-36463

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.0.0-rc2-next-20260310 Description An issue exists in the btrfs file system where the kernel fails to validate the root item invariant when reading it from disk. Specifically, if drop progress.objectid is...

5.5CVSS5.8AI score0.00114EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/03/06 7:54 a.m.7 views

CVE-2026-28034

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Progress progress allows PHP Local File Inclusion.This issue affects Progress: from n/a through = 1.2...

8.1CVSS5.8AI score0.00403EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2026/03/05 12:31 p.m.165 views

Exploit for Cross-site Scripting in Bdtask Multi_Store_Inventory_Management_System

CVE-2024-2997 Scanner !Versionhttps://img.shields.io/badge...

5.4CVSS6AI score0.01215EPSS
SaveExploits6
EUVD
EUVD
added 2026/03/05 6:30 a.m.8 views

EUVD-2026-9696

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Progress progress allows PHP Local File Inclusion.This issue affects Progress: from n/a through = 1.2...

5.9AI score0.00403EPSS
SaveExploits0References2
NVD
NVD
added 2026/03/05 6:16 a.m.7 views

CVE-2026-28034

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Progress progress allows PHP Local File Inclusion.This issue affects Progress: from n/a through = 1.2...

8.1CVSS0.00403EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/03/05 5:54 a.m.33 views

CVE-2026-28034 WordPress Progress theme <= 1.2 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Progress progress allows PHP Local File Inclusion.This issue affects Progress: from n/a through = 1.2...

8.1CVSS0.00403EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/03/05 5:54 a.m.3 views

CVE-2026-28034 WordPress Progress theme <= 1.2 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Progress progress allows PHP Local File Inclusion.This issue affects Progress: from n/a through = 1.2...

8.1CVSS5.8AI score0.00403EPSS
SaveExploits0References1
CVE
CVE
added 2026/03/05 5:54 a.m.16 views

CVE-2026-28034

CVE-2026-28034 : An improper control of filename for include/require statements in PHP ('PHP Remote File Inclusion') affects the ThemeREX Progress WordPress theme, specifically Progress versions

8.1CVSS5.9AI score0.00403EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2026/03/05 12:57 a.m.172 views

Exploit for Cross-site Scripting in Bdtask Multi_Store_Inventory_Management_System

CVE-2024-2997 Scanner !Versionhttps://img.shields.io/badge...

5.4CVSS6AI score0.01215EPSS
SaveExploits6
CNNVD
CNNVD
added 2026/03/05 12:0 a.m.9 views

WordPress plugin Progress 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

8.1CVSS5.8AI score0.00403EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/03/05 12:0 a.m.9 views

PT-2026-23316

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Progress progress allows PHP Local File Inclusion.This issue affects Progress: from n/a through = 1.2...

5.9AI score0.00403EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2026/03/02 8:44 p.m.174 views

Exploit for Cross-site Scripting in Bdtask Multi_Store_Inventory_Management_System

CVE-2024-2997 Scanner !Versionhttps://img.shields.io/badge...

5.4CVSS6AI score0.01215EPSS
SaveExploits6
Rows per page
Query Builder