Lucene search
+L

118416 matches found

ATTACKERKB
ATTACKERKB
added 3 days ago9 views

CVE-2026-16955

The AI Engine WordPress plugin before 3.6.6 does not confine a caller-supplied file path before reading it and forwarding the contents to an external service, allowing users with a subscriber-level account to read arbitrary files from the server and exfiltrate them off-host. Reaching the issue at...

5.4AI score0.00158EPSS
SaveExploits0References1
Cvelist
Cvelist
added 3 days ago32 views

CVE-2026-16955 AI Engine < 3.6.6 - Subscriber+ Arbitrary File Read via Audio Transcription

The AI Engine WordPress plugin before 3.6.6 does not confine a caller-supplied file path before reading it and forwarding the contents to an external service, allowing users with a subscriber-level account to read arbitrary files from the server and exfiltrate them off-host. Reaching the issue at...

0.00158EPSS
SaveExploits0References1
EUVD
EUVD
added 3 days ago12 views

EUVD-2026-54745

The AI Engine WordPress plugin before 3.6.6 does not confine a caller-supplied file path before reading it and forwarding the contents to an external service, allowing users with a subscriber-level account to read arbitrary files from the server and exfiltrate them off-host. Reaching the issue at...

5.4AI score0.00158EPSS
SaveExploits0References1
NVD
NVD
added 4 days ago9 views

CVE-2026-11743

The SF32LB MPI QSPI NOR flash driver drivers/flash/flashsf32lbmpiqspinor.c validated the flash offset and length on its read and write paths with the test offset + size data-size. Because offset is a signed offt while size is unsigned, a negative offset is converted to a large unsigned value and...

6.6CVSS0.00105EPSS
SaveExploits0References2
NVD
NVD
added 4 days ago9 views

CVE-2026-47663

Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, Pathling's typed CRUD/search/batch FHIR surface allows an authenticated caller with only coarse operation authorities to act on...

8.7CVSS0.00239EPSS
SaveExploits0References1
EUVD
EUVD
added 4 days ago10 views

EUVD-2026-54682

The SF32LB MPI QSPI NOR flash driver drivers/flash/flashsf32lbmpiqspinor.c validated the flash offset and length on its read and write paths with the test offset + size data-size. Because offset is a signed offt while size is unsigned, a negative offset is converted to a large unsigned value and...

6.6CVSS5.7AI score0.00105EPSS
SaveExploits0References2
CVE
CVE
added 4 days ago43 views

CVE-2026-11743

The CVE concerns the SF32LB MPI QSPI NOR flash driver (drivers/flash/flash_sf32lb_mpi_qspi_nor.c). The vulnerability arises in the read/write paths where a signed offset (off_t) is compared against an unsigned size using (offset + size) &gt; data-&gt;size, allowing a negative offset to wrap to a ...

6.6CVSS5.7AI score0.00105EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 4 days ago11 views

Security Bulletin: Consul vulnerable to partial arbitrary file read via Vault Connect CA provider

Summary Consul Community Edition and Consul Enterprise 1.18.21 through 2.0.2 are vulnerable to a partial arbitrary file read when configured to use the Vault Connect CA provider with JWT or AppRole authentication. A privileged attacker with operator:write permission may direct Consul to read and...

6.8CVSS5.5AI score0.00328EPSS
SaveExploits0Affected Software1
CVE
CVE
added 4 days ago37 views

CVE-2026-47663

Pathling Server before 2.0.0 allowed an authenticated caller with only coarse operation authorities to act on attacker-chosen FHIR resource families due to insufficient per-resource read/write checks on typed CRUD/search/batch endpoints. This could enable cross-resource mutation and potential ser...

8.7CVSS5.4AI score0.00239EPSS
SaveExploits0References1
EUVD
EUVD
added 4 days ago9 views

EUVD-2026-54649

Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, Pathling's typed CRUD/search/batch FHIR surface allows an authenticated caller with only coarse operation authorities to act on...

8.7CVSS5.4AI score0.00239EPSS
SaveExploits0References1
EUVD
EUVD
added 4 days ago9 views

EUVD-2026-54648

Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, Pathling's typed CRUD/search/batch FHIR surface allows an authenticated caller with only coarse operation authorities to act on...

8.7CVSS5.3AI score0.00239EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 4 days ago8 views

CVE-2026-47662

Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, Pathling's typed CRUD/search/batch FHIR surface allows an authenticated caller with only coarse operation authorities to act on...

8.7CVSS5.3AI score0.00239EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 4 days ago10 views

CVE-2026-66151

SonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to an out-of-bounds kernel memory read in the SWIPsec.sys driver, which could allow a local attacker to cause a system crash...

5.5CVSS0.00157EPSS
SaveExploits0References1
NVD
NVD
added 4 days ago10 views

CVE-2026-61808

LightRAG provides simple and fast retrieval-augmented generation. Through version 1.5.4, the LightRAG API server binds to all network interfaces with authentication disabled by default, allowing an unauthenticated network attacker to read indexed document content, upload or delete documents, modi...

9.8CVSS0.00345EPSS
SaveExploits0References2
NVD
NVD
added 4 days ago16 views

CVE-2026-19017

Consul Community Edition and Consul Enterprise 1.18.21 through 2.0.2 are vulnerable to a partial arbitrary file read when configured to use the Vault Connect CA provider with JWT or AppRole authentication. A privileged attacker with operator:write permission may direct Consul to read and forward...

6.8CVSS0.00328EPSS
SaveExploits0References1
OSV
OSV
added 4 days ago6 views

DEBIAN-CVE-2026-19017

Consul Community Edition and Consul Enterprise 1.18.21 through 2.0.2 are vulnerable to a partial arbitrary file read when configured to use the Vault Connect CA provider with JWT or AppRole authentication. A privileged attacker with operator:write permission may direct Consul to read and forward...

6.8CVSS5.5AI score0.00328EPSS
SaveExploits0References1
EUVD
EUVD
added 4 days ago11 views

EUVD-2026-54645

SonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to an out-of-bounds kernel memory read in the SWIPsec.sys driver, which could allow a local attacker to cause a system crash...

5.2AI score0.00157EPSS
SaveExploits0References1
CVE
CVE
added 4 days ago78 views

CVE-2026-66151

The CVE-2026-66151 entry affects SonicWall Global VPN Client version 4.10.8.1108 and earlier. It describes an out-of-bounds kernel memory read in the SWIPsec.sys driver, which could allow a local attacker to cause a system crash. The connected documents corroborate the affected product and the vu...

5.3AI score0.00157EPSS
SaveExploits0References1
Cvelist
Cvelist
added 4 days ago28 views

CVE-2026-66151

SonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to an out-of-bounds kernel memory read in the SWIPsec.sys driver, which could allow a local attacker to cause a system crash...

0.00157EPSS
SaveExploits0References1
Cvelist
Cvelist
added 4 days ago28 views

CVE-2026-61808 LightRAG: Missing Authentication for Critical API Functions in Default Configuration

LightRAG provides simple and fast retrieval-augmented generation. Through version 1.5.4, the LightRAG API server binds to all network interfaces with authentication disabled by default, allowing an unauthenticated network attacker to read indexed document content, upload or delete documents, modi...

9.8CVSS0.00345EPSS
SaveExploits0References2
Rows per page
Query Builder