Lucene search
+L

118474 matches found

Cvelist
Cvelist
added yesterday33 views

CVE-2026-17540 Bit File Manager < 6.9.1 - Subscriber+ Arbitrary File Read and Deletion via Connector Command Request-Source Mismatch

The File Manager WordPress plugin before 6.9.1 does not properly authorise its file management commands, allowing any authenticated user, such as a subscriber, to read and delete arbitrary files under the WordPress installation directory, which could lead to the disclosure of the site's...

0.00142EPSS
SaveExploits0References1
EUVD
EUVD
added yesterday9 views

EUVD-2026-55041

The File Manager WordPress plugin before 6.9.1 does not properly authorise its file management commands, allowing any authenticated user, such as a subscriber, to read and delete arbitrary files under the WordPress installation directory, which could lead to the disclosure of the site's...

5.4AI score0.00142EPSS
SaveExploits0References1
CVE
CVE
added yesterday21 views

CVE-2026-17540

The File Manager WordPress plugin before 6.9.1 does not properly authorise its file management commands, allowing any authenticated user, such as a subscriber, to read and delete arbitrary files under the WordPress installation directory, which could lead to the disclosure of the site's...

8.8CVSS5.4AI score0.00142EPSS
SaveExploits0References1
NVD
NVD
added yesterday11 views

CVE-2026-72522

libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated the same as high surrogates during Unicode processing in the toUtf16 functions...

6.2CVSS0.00153EPSS
SaveExploits0References3
Cvelist
Cvelist
added yesterday30 views

CVE-2026-72522

libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated the same as high surrogates during Unicode processing in the toUtf16 functions...

6.2CVSS0.00153EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added yesterday5 views

CVE-2026-72522

libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated the same as high surrogates during Unicode processing in the toUtf16 functions...

6.2CVSS5.3AI score0.00153EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added yesterday2 views

Linux Distros Unpatched Vulnerability : CVE-2026-68158

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libceph: Fix multiplication overflow in decodenewupstateweight If a message of type CEPHMSGOSDMAP contains a maliciously corrupted osdmap, out-of-bounds memory...

5.7AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added yesterday2 views

Linux Distros Unpatched Vulnerability : CVE-2026-68402

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: cfg80211: bound element ID read when checking non-inheritance cfg80211iselementinherited reads the first data octet of the candidate element id = elem-dat...

5.6AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added yesterday2 views

Linux Distros Unpatched Vulnerability : CVE-2026-68350

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: carl9170: fix OOB read from off-by-two in TX status handler The bounds check in carl9170txprocessstatus uses i cmd-hdr.len / 2 + 1 which is off by two,...

5.5AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added yesterday1 views

RHEL 9 : mod_http2 (RHSA-2026:50572)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:50572 advisory. The modh2 Apache httpd module implements the HTTP2 protocol h2+h2c on top of libnghttp2 for httpd 2.4 servers. Security Fixes: modhttp2:...

7.5CVSS6.1AI score0.27984EPSS
SaveExploits9References10
Tenable Nessus
Tenable Nessus
added yesterday2 views

Linux Distros Unpatched Vulnerability : CVE-2026-68376

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: fix authhmacs array size in struct sctpcookie The authhmacs array in struct sctpcookie is supposed to store a complete SCTPAUTHHMACALGO parameter, which...

5.9AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added yesterday2 views

Linux Distros Unpatched Vulnerability : CVE-2026-68098

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: bound DACL dedup walk to copied ACEs setntacldacl can stop copying ACEs before consuming the full input DACL when size accounting overflows. When that...

5.8AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added yesterday7 views

Linux Distros Unpatched Vulnerability : CVE-2026-19389

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple integer overflow and underflow vulnerabilities were found in the GStreamer gst-plugins-ugly ASF demuxer asfdemux when parsing header objects from craft...

7.1CVSS5.4AI score0.00243EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added yesterday2 views

Linux Distros Unpatched Vulnerability : CVE-2026-68229

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: cedrus: skip invalid H.264 reference list entries Cedrus consumes H.264 refpiclist0/refpiclist1 entries from the stateless slice control and later uses...

5.4AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added yesterday1 views

Linux Distros Unpatched Vulnerability : CVE-2026-68190

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - staging: rtl8723bs: fix OOB reads in rtwgetwpsie rtwgetwpsie iterates over IE data from network frames without validating that the IE header and payload fit...

5.8AI score
SaveExploits0References2
NVD
NVD
added 2 days ago9 views

CVE-2026-19372

A security flaw has been discovered in Handwriting-OCR handwriting-ocr-mcp-server 0.1.0. Affected by this vulnerability is the function fs.readFileSync of the file src/index.ts of the component uploaddocument. Performing a manipulation of the argument File results in path traversal. Attacking...

5.3CVSS0.0014EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2 days ago28 views

CVE-2026-19372 Handwriting-OCR handwriting-ocr-mcp-server upload_document index.ts fs.readFileSync path traversal

A security flaw has been discovered in Handwriting-OCR handwriting-ocr-mcp-server 0.1.0. Affected by this vulnerability is the function fs.readFileSync of the file src/index.ts of the component uploaddocument. Performing a manipulation of the argument File results in path traversal. Attacking...

5.3CVSS0.0014EPSS
SaveExploits0References6
CVE
CVE
added 2 days ago30 views

CVE-2026-19372

The CVE-2026-19372 entry concerns Handwriting-OCR handwriting-ocr-mcp-server 0.1.0. The vulnerability affects the upload_document component, specifically the function fs.readFileSync in src/index.ts, where manipulating the File argument can trigger path traversal. Local access is required. Both t...

5.3CVSS5.6AI score0.0014EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2 days ago30 views

CVE-2026-19370 bartekke8it56w2 new-mcp geminithinking index.ts fs.readFileSync path traversal

A vulnerability was determined in bartekke8it56w2 new-mcp 0.1.0. This impacts the function fs.writeFileSync/fs.existsSync/fs.readFileSync of the file index.ts of the component geminithinking. This manipulation of the argument sessionCommand/sessionPath causes path traversal. The attack requires...

5.3CVSS0.00138EPSS
SaveExploits0References6
EUVD
EUVD
added 2 days ago9 views

EUVD-2026-54950

A vulnerability has been found in NocteDefensor LudusMCP 1.0.24. Affected by this vulnerability is an unknown functionality of the file src/tools/rangeConfig.ts of the component readrangeconfig. The manipulation of the argument Source leads to server-side request forgery. The attack may be...

6.5CVSS6.2AI score0.00209EPSS
SaveExploits0References6
Rows per page
Query Builder