Lucene search
+L

975447 matches found

ATTACKERKB
ATTACKERKB
added 2 days ago10 views

CVE-2026-19424

Chiline Cloud developed by Inventec Appliances has a Insecure Direct Object Reference vulnerability. Unauthenticated remote attackers can modify a specific parameter to read other users' sensitive data...

8.7CVSS5.3AI score0.0041EPSS
SaveExploits0References3
CVE
CVE
added 2 days ago32 views

CVE-2026-19424

CVE-2026-19424 affects Inventec Appliances’ Chiline Cloud. It describes an Insecure Direct Object Reference allowing unauthenticated remote attackers to modify a parameter to read other users’ sensitive data. The CVSS metrics indicate a high risk: CVSS‑3.1 base score 7.5 (NETWORK, LOW attack comp...

8.7CVSS5.3AI score0.0041EPSS
SaveExploits0References2
EUVD
EUVD
added 2 days ago6 views

EUVD-2026-55865

Due to a Missing Authorization Check vulnerability in SAP Manufacturing Integration and Intelligence, an unauthenticated remote attacker could access scheduling-related application functions without proper authorization validation. Successful exploitation could allow the attacker to retrieve,...

7.3CVSS5.4AI score0.00278EPSS
SaveExploits0References2
EUVD
EUVD
added 2 days ago8 views

EUVD-2026-56175

An issue in usememos v0.27.1 allows a remote attacker to achieve account takeover via the ssoCredentials branch of the SignIn handler in server/router/api/v1/authservice.go, because SSO identity is matched only on an attacker-controllable identifier without binding to the IdP's stable subject cla...

5.3AI score0.00221EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2 days ago6 views

CVE-2026-68127

In the Linux kernel, the following vulnerability has been resolved: ila: reload IPv6 header after pskbmaypull in checksum adjust ilacsumadjusttransport caches ip6h = ipv6hdrskb before calling pskbmaypull. On a non-linear skb whose transport header sits in a page fragment, pskbmaypull can call...

5.4AI score0.00175EPSS
SaveExploits0References6
OSV
OSV
added 2 days ago5 views

CVE-2026-51583

An issue in usememos through v0.30.0 allows a remote authenticated attacker to perform Server-Side Request Forgery SSRF via the Webhook validation mechanism in internal/webhook/validate.go, by setting a webhook target to an internal address...

8.5CVSS5.4AI score
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2 days ago6 views

Security Update for Microsoft .NET Core (August 2026)

The Microsoft .NET Core installations on the remote host are missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the vendor advisory. - .NET Elevation of Privilege Vulnerability CVE-2026-58641, CVE-2026-62871, CVE-2026-62886, CVE-2026-62909 - .NET...

7.8CVSS5.8AI score0.01136EPSS
SaveExploits0References31
CISA KEV Catalog
CISA KEV Catalog
added 2 days ago42 views

Metabase SQL Injection Vulnerability

Metabase contains a SQL Injection vulnerability that allows an unauthenticated remote attacker to inject arbitrary SQL into the Metabase application database, which can give them administrator access to the instance. From there, the attacker could change the application configuration, steal store...

10CVSS5.9AI score0.01074EPSS
SaveIn wildExploits2
CISA KEV Catalog
CISA KEV Catalog
added 2 days ago8 views

Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability

Cisco Secure Firewall Adaptive Security Appliance ASA and Secure Firewall Threat Defense FTD contain a heap inspection vulnerability that could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service DoS condition...

8.6CVSS5.3AI score0.00969EPSS
SaveIn wildExploits1
Kaspersky
Kaspersky
added 2 days ago4 views

KLA91204 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in WebGL can be...

9.6CVSS6.7AI score0.00442EPSS
SaveExploits0References41
Tenable Nessus
Tenable Nessus
added 2 days ago8 views

Linux Distros Unpatched Vulnerability : CVE-2026-71217

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in iperf3. A remote attacker can exploit this vulnerability by sending crafted control- channel JSON with oversized numeric parameters, such as...

7.5CVSS5.7AI score0.00417EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2 days ago7 views

CVE-2026-51583

An issue in usememos through v0.30.0 allows a remote authenticated attacker to perform Server-Side Request Forgery SSRF via the Webhook validation mechanism in internal/webhook/validate.go, by setting a webhook target to an internal address...

5.3AI score0.00221EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2 days ago7 views

Linux Distros Unpatched Vulnerability : CVE-2026-71218

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in iperf3. A remote unauthenticated attacker can exploit a vulnerability in the JSONread function, which accepts a peer-controlled message leng...

5.3CVSS5.5AI score0.00383EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2 days ago5 views

Zoom Workplace VDI Client < 7.0.11 Vulnerability (ZSB-26015)

The version of Zoom Workplace VDI Client installed on the remote host is prior to 7.0.11. It is, therefore, affected by a vulnerability as referenced in the ZSB-26015 advisory. - Missing bounds check in the annotator function of Zoom Clients allows buffer over-write, which may allow a meeting...

8.3CVSS6.4AI score0.00409EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2 days ago4 views

Security Updates for Microsoft SharePoint Server 2019 (August 2026)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. CVE-2026-62827 -...

8.8CVSS5.9AI score0.01733EPSS
SaveExploits0References28
Tenable Nessus
Tenable Nessus
added 2 days ago18 views

KB5120385: Windows Server 2012 R2 Security Update (August 2026)

The remote Windows host is missing security update 5120385. It is, therefore, affected by multiple vulnerabilities - Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network. CVE-2026-62878 - Use after free in Windows Deployment Services allows an...

9.8CVSS6AI score0.02314EPSS
SaveExploits2References138
Kaspersky
Kaspersky
added 2 days ago7 views

KLA91201 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in V8 can be exploited remotely to execute arbitrary...

8.8CVSS6.7AI score0.00308EPSS
SaveExploits0References3
Kaspersky
Kaspersky
added 2 days ago5 views

KLA91210 Multiple vulnerabilities in Microsoft Server Software

Multiple vulnerabilities were found in Microsoft Server Software. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, perform cross-site scripting attack, spoof user interface. Below is a complete lis...

8.8CVSS6.1AI score0.01314EPSS
SaveExploits0References10
EUVD
EUVD
added 2 days ago9 views

EUVD-2026-56176

An issue in usememos through v0.30.0 allows a remote authenticated attacker to perform Server-Side Request Forgery SSRF via the Webhook validation mechanism in internal/webhook/validate.go, by setting a webhook target to an internal address...

5.3AI score0.00221EPSS
SaveExploits0References2
Packet Storm
Packet Storm
added 2 days ago12 views

📄 Langflow Remote Code Execution

Langflow versions prior to 1.9.0 are susceptible to unauthenticated remote code execution through the /api/v1/buildpublictmp/flowid/flow endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code. frozenstringliteral: true This module requires...

9.8CVSS9.9AI score0.96177EPSS
SaveExploits28
Rows per page
Query Builder