Lucene search
K

61223 matches found

EUVD
EUVD
added yesterday7 views

EUVD-2026-38198

A security vulnerability has been detected in Radware Cyber Controller up to 10.11.0. This affects an unknown part of the component HTML Report Generation. The manipulation leads to HTML injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be...

5.1CVSS5.3AI score
Exploits0References5
NVD
NVD
added 2 days ago6 views

CVE-2026-12812

A security vulnerability has been detected in Radware Cyber Controller up to 10.11.0. This affects an unknown part of the component HTML Report Generation. The manipulation leads to HTML injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be...

5.1CVSS
Exploits0References4
Cvelist
Cvelist
added 2 days ago19 views

CVE-2026-12812 Radware Cyber Controller HTML Report Generation HTML injection

A security vulnerability has been detected in Radware Cyber Controller up to 10.11.0. This affects an unknown part of the component HTML Report Generation. The manipulation leads to HTML injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be...

5.1CVSS
Exploits0References4
NVD
NVD
added 2 days ago7 views

CVE-2026-12808

A vulnerability was determined in Edimax BR-6478AC V2 1.23. This impacts the function stainfo of the file /goform/stainfo of the component POST Request Handler. This manipulation of the argument interface causes command injection. The attack can be initiated remotely. The exploit has been publicl...

6.5CVSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2 days ago5 views

CVE-2026-12808

A vulnerability was determined in Edimax BR-6478AC V2 1.23. This impacts the function stainfo of the file /goform/stainfo of the component POST Request Handler. This manipulation of the argument interface causes command injection. The attack can be initiated remotely. The exploit has been publicl...

6.5CVSS5.7AI score
Exploits0References5Affected Software1
EUVD
EUVD
added 2 days ago8 views

EUVD-2026-38145

A vulnerability was determined in AOMEI Backupper up to 8.3.0. Impacted is an unknown function in the library amwrtdrv.sys of the component Kernel Driver. Executing a manipulation can lead to improper access controls. The attack needs to be launched locally. The exploit has been publicly disclose...

8.5CVSS5.3AI score
Exploits0References5
EUVD
EUVD
added 2 days ago8 views

EUVD-2026-38143

A vulnerability has been found in AOMEI Partition Assistant up to 10.10.1. This vulnerability affects unknown code in the library ampa10.sys of the component Kernel Driver. Such manipulation leads to improper access controls. The attack must be carried out locally. The exploit has been disclosed ...

8.5CVSS5.2AI score
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2 days ago5 views

CVE-2026-12770

A vulnerability was determined in BerriAI litellm up to 1.63.1. The impacted element is an unknown function of the file litellm/proxy/managementendpoints/keymanagementendpoints.py of the component Admin Key Handler. This manipulation causes improper authorization. The attack can be initiated...

5.5CVSS5.5AI score
Exploits0References7Affected Software1
CVE
CVE
added 2 days ago24 views

CVE-2026-12770

CVE-2026-12770 affects BerriAI litellm up to version 1.63.1. The vulnerability resides in an unknown function within litellm/proxy/management_endpoints/key_management_endpoints.py, in the Admin Key Handler component, causing improper authorization. It is exploitable remotely, and public exploitat...

5.5CVSS5.5AI score
Exploits0References7
Circl
Circl
added 5 days ago9 views

CVE-2026-54104

creationtimestamp| type| source ---|---|--- 2026-06-18 18:05:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3molg436wlg2g...

8.8CVSS4.9AI score
Exploits0References1
Cvelist
Cvelist
added 2026/06/16 7:27 p.m.12 views

CVE-2026-46797

...

9.8CVSS0.00483EPSS
Exploits0References1
Nuclei
Nuclei
added 2026/06/16 7:13 a.m.100 views

D-Link Network Attached Storage - Command Injection and Backdoor Account

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, was found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. Affected is an unknown function of the file /cgi-bin/nassharing.cgi of the component HTTP GET Request Handler. The manipulation of the argument...

9.8CVSS7.2AI score0.99997EPSS
Exploits8References5
EUVD
EUVD
added 2026/06/15 4:45 a.m.9 views

EUVD-2026-36693

A vulnerability has been found in Yealink SIP-T46U 108.86.0.118. This affects the function modupgrade.SparePartsUpload of the file /api/upgrade/accupgradebychunk of the component Firmware Chunk Upload handler. Such manipulation of the argument uid leads to stack-based buffer overflow. The attack...

8.6CVSS8.2AI score0.00371EPSS
Exploits0References5
NVD
NVD
added 2026/06/15 4:16 a.m.8 views

CVE-2026-12212

A vulnerability has been found in hcengineering Huly Platform up to 0.7.0. Affected is the function getMailboxSecret of the file server/account/src/operations.ts of the component RPC Interface. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit h...

5.3CVSS0.00207EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/06/15 4:0 a.m.34 views

CVE-2026-12217 DVDFab Virtual Drive Signed Kernel Driver dvdfabio.sys privileges management

A security vulnerability has been detected in DVDFab Virtual Drive 2.0.0.5. Impacted is an unknown function in the library dvdfabio.sys of the component Signed Kernel Driver. The manipulation leads to improper privilege management. An attack has to be approached locally. The exploit has been...

8.5CVSS0.00111EPSS
Exploits0References5
CVE
CVE
added 2026/06/15 3:0 a.m.15 views

CVE-2026-12212

The CVE concerns hcengineering Huly Platform (up to v0.7.0). It affects the RPC Interface component, specifically the getMailboxSecret function in server/account/src/operations.ts. The issue is an improper access control vulnerability that could be triggered remotely. Public disclosure of the exp...

5.3CVSS5AI score0.00207EPSS
Exploits0References4
EUVD
EUVD
added 2026/06/15 12:31 a.m.9 views

EUVD-2026-36671

A vulnerability was determined in GALAYOU Y4 1.0.0. Impacted is an unknown function of the component Web Server. This manipulation causes buffer overflow. The attack is only possible within the local network. The exploit has been publicly disclosed and may be utilized. The vendor was contacted...

8.8CVSS8.3AI score0.0043EPSS
Exploits0References5
EUVD
EUVD
added 2026/06/15 12:31 a.m.10 views

EUVD-2026-36666

A security vulnerability has been detected in GL.iNet GL-MT3000 up to 4.4.5. Affected by this vulnerability is an unknown functionality of the file /usr/bin/oneclickupgrade of the component Online Firmware Upgrade Handler. Such manipulation leads to command injection. The attack can be launched...

9CVSS7.5AI score0.01988EPSS
Exploits0References7
Cvelist
Cvelist
added 2026/06/15 12:15 a.m.32 views

CVE-2026-12200 Ritlabs TinyWeb Server Header libeay32.dll.html stack-based overflow

A security vulnerability has been detected in Ritlabs TinyWeb Server up to 1.94 on Win32. This impacts an unknown function in the library libeay32.dll.html of the component Header Handler. The manipulation of the argument Authorization leads to stack-based buffer overflow. The attack can be...

7.5CVSS0.00324EPSS
Exploits0References5
CVE
CVE
added 2026/06/15 12:0 a.m.14 views

CVE-2026-12198

CVE-2026-12198 affects Microweber up to 2.0.20. The vulnerability is in the API Endpoint file /api_nosession/thumbnail_img, specifically the function userfiles_path, where manipulating the argument cache_path_relative can cause a path traversal. It is possible to launch the attack remotely, and p...

7.5CVSS7.1AI score0.00525EPSS
Exploits0References7
Rows per page
Query Builder