Lucene search
+L

41189 matches found

CNVD
CNVD
added 2026/03/02 12:0 a.m.10 views

WordPress Plugin Simple Ajax Chat Information Disclosure Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. An information disclosure vulnerability exists in the WordPress plugin Simple Ajax Chat. The...

5.3CVSS5.6AI score0.00304EPSS
SaveExploits0References1
CNVD
CNVD
added 2026/03/02 12:0 a.m.8 views

Microsoft Outlook Information Disclosure Vulnerability (CNVD-2026-12557)

Microsoft Outlook is a suite of e-mail applications from the American company Microsoft. An information disclosure vulnerability exists in Microsoft Outlook. The vulnerability stems from the application's inadequate protection of sensitive information and can be exploited by an attacker to conduc...

7.5CVSS5.8AI score0.01425EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/03/02 12:0 a.m.23 views

PT-2026-22682

Name of the Vulnerable Software and Affected Versions mem protect affected versions not specified Description A logic error exists in multiple functions within the mem protect.c file, potentially allowing for arbitrary code execution. Successful exploitation could lead to local privilege escalati...

8.4CVSS6.5AI score0.00233EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
added 2026/03/02 12:0 a.m.28 views

PT-2026-22676

Name of the Vulnerable Software and Affected Versions versions prior to 2026-0028 Description An out-of-bounds write issue exists in the pkvm host share guest function within mem protect.c due to an integer overflow. This could allow for local escalation of privilege without requiring additional...

8.4CVSS6.3AI score0.00152EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2026/03/02 12:0 a.m.9 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005492)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005492 advisory. In the Linux kernel, the following vulnerability has been resolved: ipc: fix to protect IPCS lookups using RCU syzbot reported that it discovered a use-after-free...

7.8CVSS6.6AI score0.00157EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/03/02 12:0 a.m.9 views

PT-2026-22679

Name of the Vulnerable Software and Affected Versions mem protect affected versions not specified Description The software contains a possible out-of-bounds write issue stemming from an integer overflow in multiple functions within the mem protect.c file. Successful exploitation of this issue cou...

8.4CVSS6.3AI score0.00152EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/03/02 12:0 a.m.16 views

PT-2026-22678

Name of the Vulnerable Software and Affected Versions Google Android affected versions not specified Description An issue exists in the host check page state range function within mem protect.c that may allow for a local escalation of privilege. The problem is caused by an incorrect bounds check,...

8.4CVSS6.2AI score0.00152EPSS
SaveExploits0References8
GithubExploit
GithubExploit
added 2026/03/01 5:0 p.m.269 views

Exploit for Reliance on Untrusted Inputs in a Security Decision in Microsoft

CVE-2026-21509 Office Kill-Bit Manager PowerShell script to...

7.8CVSS7.2AI score0.72152EPSS
SaveExploits15
RedhatCVE
RedhatCVE
added 2026/03/01 1:43 a.m.10 views

CVE-2026-28272

Kiteworks is a private data network PDN. Prior to version 9.2.0, a vulnerability in Kiteworks Email Protection Gateway allows authenticated administrators to inject malicious scripts through a configuration interface. The stored script executes when users interact with the affected user interface...

8.1CVSS5.9AI score0.00331EPSS
SaveExploits0References1
OSV
OSV
added 2026/03/01 12:0 a.m.8 views

PUB-A-467269839

The register protection of the PowerVR GPU is incorrectly configured. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

4CVSS6.1AI score0.00075EPSS
SaveExploits0References1
OSV
OSV
added 2026/03/01 12:0 a.m.12 views

ASB-A-439996285

In multiple functions of memprotect.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6.1AI score0.00093EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/02/28 7:47 a.m.16 views

CVE-2025-15567

Insufficient protection mechanisms in the Health Module may lead to partial information disclosure...

5.1CVSS5.9AI score0.00134EPSS
SaveExploits0References1
NVD
NVD
added 2026/02/27 9:16 p.m.13 views

CVE-2026-28272

Kiteworks is a private data network PDN. Prior to version 9.2.0, a vulnerability in Kiteworks Email Protection Gateway allows authenticated administrators to inject malicious scripts through a configuration interface. The stored script executes when users interact with the affected user interface...

8.1CVSS0.00331EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/02/27 8:22 p.m.4 views

CVE-2026-28272 Kiteworks Email Protection Gateway has a Cross-site Scripting vulnerability

Kiteworks is a private data network PDN. Prior to version 9.2.0, a vulnerability in Kiteworks Email Protection Gateway allows authenticated administrators to inject malicious scripts through a configuration interface. The stored script executes when users interact with the affected user interface...

8.1CVSS5.9AI score0.00331EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/27 8:22 p.m.7 views

CVE-2026-28272

Kiteworks is a private data network PDN. Prior to version 9.2.0, a vulnerability in Kiteworks Email Protection Gateway allows authenticated administrators to inject malicious scripts through a configuration interface. The stored script executes when users interact with the affected user interface...

8.1CVSS5.9AI score0.00331EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
added 2026/02/27 8:22 p.m.10 views

EUVD-2026-9067

Kiteworks is a private data network PDN. Prior to version 9.2.0, a vulnerability in Kiteworks Email Protection Gateway allows authenticated administrators to inject malicious scripts through a configuration interface. The stored script executes when users interact with the affected user interface...

8.1CVSS5.9AI score0.00331EPSS
SaveExploits0References1
OSV
OSV
added 2026/02/27 8:22 p.m.7 views

CVE-2026-28272 Kiteworks Email Protection Gateway has a Cross-site Scripting vulnerability

Kiteworks is a private data network PDN. Prior to version 9.2.0, a vulnerability in Kiteworks Email Protection Gateway allows authenticated administrators to inject malicious scripts through a configuration interface. The stored script executes when users interact with the affected user interface...

8.1CVSS5.8AI score0.00331EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/02/27 8:22 p.m.30 views

CVE-2026-28272 Kiteworks Email Protection Gateway has a Cross-site Scripting vulnerability

Kiteworks is a private data network PDN. Prior to version 9.2.0, a vulnerability in Kiteworks Email Protection Gateway allows authenticated administrators to inject malicious scripts through a configuration interface. The stored script executes when users interact with the affected user interface...

8.1CVSS0.00331EPSS
SaveExploits0References1
CVE
CVE
added 2026/02/27 8:22 p.m.31 views

CVE-2026-28272

Kiteworks Email Protection Gateway (pre-9.2.0) has a stored XSS vulnerability exploitable by authenticated administrators via a configuration interface. The stored script can execute when users interact with the affected UI, potentially impacting confidentiality and integrity (C=HIGH, I=HIGH) wit...

8.1CVSS5.9AI score0.00331EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2026/02/27 8:21 p.m.19 views

CVE-2026-27824

calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books. Prior to version 9.4.0, the calibre Content Server's brute-force protection mechanism uses a ban key derived from both remoteaddr and the X-Forwarded-For header. Since the X-Forwarded-For header i...

5.3CVSS0.00148EPSS
SaveExploits1References1
Rows per page
Query Builder