Lucene search
+L

92225 matches found

Cvelist
Cvelist
added 2026/08/17 12:00 a.m.35 views

CVE-2026-50774

An issue in GAPTEQ Designer v.3.5 allows a remote attacker to escalate privileges via the Company Manger role...

0.00339EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2026/08/17 12:00 a.m.9 views

The vulnerability of the EncryptInterceptor module in the Apache Tomcat application server allows a hacker to perform a replay attack.

The vulnerability of the EncryptInterceptor module in the Apache Tomcat application server is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to carry out a replay attack...

6.5CVSS5.3AI score0.00436EPSS
SaveExploits0References3Affected Software2
CVE
CVE
added 2026/08/17 12:00 a.m.15 views

CVE-2026-50776

A Directory Traversal vulnerability in Pronis Loisirs Bilttorie CSE (versions before April 2026) allows an unauthenticated remote attacker to read sensitive files and execute arbitrary code. CVSS 3.1 scores it 7.5 (HIGH) with network attack vector, low complexity, and high confidentiality impact....

7.5CVSS5.8AI score0.01323EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/08/17 12:00 a.m.10 views

CVE-2026-67678

File Upload vulnerability in RainyGao-Hithub DocSys v.2.02.80 allows a remote attacker to execute arbitrary code...

5.9AI score0.00587EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/17 12:00 a.m.19 views

PT-2026-73181

A vulnerability was identified in CodeCanyon TimeCamp Integration for CRM up to 2.8. This issue affects some unknown processing of the file /clients/save contact of the component Contact Information Update. Such manipulation of the argument contact id leads to authorization bypass. The attack can...

5.5CVSS5.5AI score0.00235EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2026/08/17 12:00 a.m.9 views

The vulnerability in the Apache ActiveMQ and Apache ActiveMQ Web software for web management consoles allows attackers to inject malicious HTML content.

The vulnerability of the Apache ActiveMQ and Apache ActiveMQ Web software for web management consoles is related to the lack of security measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject malicious HTML content remotely...

6.5CVSS7.3AI score0.0056EPSS
SaveExploits0References4Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/08/17 12:00 a.m.9 views

The vulnerability in the driver/block/rnbd/rnbd-srv.c component of the Linux operating system’s kernel allows a hacker to gain access to confidential data.

The vulnerability of the drivers/block/rnbd/rnbd-srv.c component in the Linux operating system’s kernel is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a remote attacker to gain access to confidential data...

7.8CVSS7.2AI score0.00444EPSS
SaveExploits0References17Affected Software3
Positive Technologies
Positive Technologies
added 2026/08/17 12:00 a.m.18 views

PT-2026-76871

Name of the Vulnerable Software and Affected Versions S2OPC version 1.7.3 Description A heap-based out-of-bounds write occurs during server-side EventFilter handling while processing CreateMonitoredItems. This flaw allows a remote attacker to execute arbitrary code. A heap-based out-of-bounds wri...

9.8CVSS6AI score0.00576EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2026/08/17 12:00 a.m.6 views

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-100899)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100899 advisory. The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3,...

7.5CVSS7.5AI score0.00608EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/17 12:00 a.m.33 views

CVE-2026-68005

ACME mini_httpd versions 1.30 and prior are vulnerable to a remote denial of service via the HTTP request header parser in the handle_request() function. The vulnerability requires no authentication and can be triggered over the network with low complexity (CVSS 3.1: 7.5 HIGH ). CISA SSVC assesse...

7.5CVSS5.4AI score0.0041EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/08/17 12:00 a.m.5 views

CVE-2026-50772

An issue in Squirro Cognitive Search 3.14.2 allows a remote attacker to execute arbitrary code via a crafted payload to the password reset function...

6AI score0.00515EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/17 12:00 a.m.11 views

EUVD-2026-60312

SQL Injection vulnerability in StudIP 6.0.x before 6.0.3 and 5.4.x before 5.4.12 allows a remote attacker to execute arbitrary code and obtain sensitive information via the store functions...

9.1CVSS6.4AI score0.00403EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/08/17 12:00 a.m.7 views

CVE-2026-50774

An issue in GAPTEQ Designer v.3.5 allows a remote attacker to escalate privileges via the Company Manger role...

5.4AI score0.00339EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/08/17 12:00 a.m.9 views

CVE-2026-50770

An issue in Squirro Cognitive Search before v.3.14.2 allows a remote attacker to escalate privileges via a crafted request...

5.4AI score0.00339EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/17 12:00 a.m.30 views

CVE-2026-67925

Cross Site Scripting vulnerability in JeecgBoot v.3.9.2 allows a remote attacker to execute arbitrary code via the endpoint /airag/chat/upload...

0.00261EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/17 12:00 a.m.17 views

CVE-2026-67926

JeecgBoot v3.9.2's AI Chat Module accepts a "files" parameter without proper validation, enabling a remote unauthenticated attacker to upload and execute arbitrary code, yielding full confidentiality, integrity, and availability compromise (CVSS 9.8 critical). No patch version or in-the-wild expl...

9.8CVSS6AI score0.00589EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/08/17 12:00 a.m.7 views

CVE-2026-50768

File Upload vulnerability in T-Systems International GmbH ImageMaster Version: 9.14.2.8.1 allows a remote attacker to execute arbitrary code via the add attachments feature in the create new document function...

6AI score0.00448EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/17 12:00 a.m.12 views

EUVD-2026-60356

An issue in Squirro Cognitive Search before v.3.14.2 allows a remote attacker to escalate privileges via a crafted request...

5.4AI score0.00339EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/17 12:00 a.m.12 views

PT-2026-73220

A security vulnerability has been detected in Open Asset Import Library Assimp Assimp 17c12da. The affected element is the function Assimp::MDLImporter::ParseBoneTrafoKeys 3DGS MDL7 of the file code/AssetLib/MDL/MDLLoader.cpp of the component 3DGS MDL7 Bone Transformation Key Parser. The...

7.5CVSS6.7AI score0.00273EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
added 2026/08/17 12:00 a.m.19 views

The vulnerability of the f81604_read_int_callback() function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver is related to improper validation of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

5.5CVSS4.8AI score0.00122EPSS
SaveExploits0References11Affected Software3
Rows per page
Query Builder