Lucene search
+L

32238 matches found

RedhatCVE
RedhatCVE
added 2026/01/21 12:30 p.m.20 views

CVE-2026-1183

HTML injection vulnerability in multiple Botble products such as TransP, Athena, Martfury, and Homzen, consisting of an HTML injection due to a lack of proper validation of user input by sending a request to '/search' using the 'q' parameter...

5.1CVSS5.5AI score0.00272EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/21 12:30 p.m.23 views

CVE-2025-40679

HTML Injection vulnerability in Isshue by Bdtask, consisting os an HTML injection due to a lack os proper validation of user input by sending a POST request to '/categoryproductsearch', affecting the 'productname' parameter...

5.1CVSS5.6AI score0.00272EPSS
SaveExploits0References1
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2026/01/21 6:17 a.m.38 views

Installer of Fujitsu ServerView Agents for Windows may insecurely load Dynamic Link Libraries

Overview The installer of ServerView Agents for Windows provided by Fsas Technologies Inc. contains the following vulnerability. Uncontrolled search path element CWE-427 - CVE-2026-24016 Kazuma Matsumoto of GMO Cybersecurity by IERAE, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated...

8.4CVSS5.7AI score0.00136EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2026/01/21 12:30 a.m.23 views

CVE-2025-67261

Abacre Retail Point of Sale 14.0.0.396 is vulnerable to content-based blind SQL injection. The vulnerability exists in the Search function of the Orders page...

6.5CVSS5.7AI score0.00187EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
added 2026/01/21 12:00 a.m.16 views

PT-2026-3807

DD-WRT version 45723 contains a buffer overflow vulnerability in the UPNP network discovery service that allows remote attackers to potentially execute arbitrary code. Attackers can send crafted M-SEARCH packets with oversized UUID payloads to trigger buffer overflow conditions on the target devi...

9.8CVSS6.4AI score0.01013EPSS
SaveExploits0References6
NVD
NVD
added 2026/01/20 6:16 p.m.10 views

CVE-2025-67261

Abacre Retail Point of Sale 14.0.0.396 is vulnerable to content-based blind SQL injection. The vulnerability exists in the Search function of the Orders page...

6.5CVSS0.00187EPSS
SaveExploits2References2
OSV
OSV
added 2026/01/20 6:16 p.m.12 views

CVE-2025-67261

Abacre Retail Point of Sale 14.0.0.396 is vulnerable to content-based blind SQL injection. The vulnerability exists in the Search function of the Orders page...

6.5CVSS5.8AI score0.00187EPSS
SaveExploits2References2
NVD
NVD
added 2026/01/20 6:16 p.m.13 views

CVE-2025-33231

NVIDIA Nsight Systems for Windows contains a vulnerability in the application’s DLL loading mechanism where an attacker could cause an uncontrolled search path element by exploiting insecure DLL search paths. A successful exploit of this vulnerability might lead to code execution, escalation of...

6.7CVSS0.00158EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/01/20 6:16 p.m.9 views

CVE-2025-33231

NVIDIA Nsight Systems for Windows contains a vulnerability in the application’s DLL loading mechanism where an attacker could cause an uncontrolled search path element by exploiting insecure DLL search paths. A successful exploit of this vulnerability might lead to code execution, escalation of...

6.7CVSS5.9AI score0.00158EPSS
SaveExploits0References4
OSV
OSV
added 2026/01/20 6:16 p.m.17 views

UBUNTU-CVE-2025-33231

NVIDIA Nsight Systems for Windows contains a vulnerability in the application’s DLL loading mechanism where an attacker could cause an uncontrolled search path element by exploiting insecure DLL search paths. A successful exploit of this vulnerability might lead to code execution, escalation of...

6.7CVSS5.8AI score0.00158EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/01/20 5:55 p.m.20 views

CVE-2025-33231

NVIDIA Nsight Systems for Windows contains a vulnerability in the application’s DLL loading mechanism where an attacker could cause an uncontrolled search path element by exploiting insecure DLL search paths. A successful exploit of this vulnerability might lead to code execution, escalation of...

6.7CVSS5.6AI score0.00158EPSS
SaveExploits0References4
CVE
CVE
added 2026/01/20 5:55 p.m.55 views

CVE-2025-33231

CVE-2025-33231 relates to NVIDIA Nsight Systems for Windows, where insecure DLL search paths in the application’s DLL loading mechanism allow an uncontrolled search path element. This could enable local attacker code execution, privilege escalation, data tampering, DoS, or information disclosure....

6.7CVSS5.7AI score0.00158EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2026/01/20 5:55 p.m.34 views

CVE-2025-33231

NVIDIA Nsight Systems for Windows contains a vulnerability in the application’s DLL loading mechanism where an attacker could cause an uncontrolled search path element by exploiting insecure DLL search paths. A successful exploit of this vulnerability might lead to code execution, escalation of...

6.7CVSS0.00158EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/01/20 5:55 p.m.6 views

CVE-2025-33231

NVIDIA Nsight Systems for Windows contains a vulnerability in the application’s DLL loading mechanism where an attacker could cause an uncontrolled search path element by exploiting insecure DLL search paths. A successful exploit of this vulnerability might lead to code execution, escalation of...

6.7CVSS5.7AI score0.00158EPSS
SaveExploits0References3
NVD
NVD
added 2026/01/20 1:16 p.m.18 views

CVE-2026-1183

HTML injection vulnerability in multiple Botble products such as TransP, Athena, Martfury, and Homzen, consisting of an HTML injection due to a lack of proper validation of user input by sending a request to '/search' using the 'q' parameter...

5.1CVSS0.00272EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/20 12:15 p.m.14 views

CVE-2025-40679

HTML Injection vulnerability in Isshue by Bdtask, consisting os an HTML injection due to a lack os proper validation of user input by sending a POST request to '/categoryproductsearch', affecting the 'productname' parameter...

5.1CVSS0.00272EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/20 12:09 p.m.6 views

CVE-2026-1183

HTML injection vulnerability in multiple Botble products such as TransP, Athena, Martfury, and Homzen, consisting of an HTML injection due to a lack of proper validation of user input by sending a request to '/search' using the 'q' parameter...

5.1CVSS5.4AI score0.00272EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/01/20 12:09 p.m.10 views

CVE-2026-1183 HTML injection in multiple Botble products

HTML injection vulnerability in multiple Botble products such as TransP, Athena, Martfury, and Homzen, consisting of an HTML injection due to a lack of proper validation of user input by sending a request to '/search' using the 'q' parameter...

5.1CVSS5.5AI score0.00272EPSS
SaveExploits0References1
CVE
CVE
added 2026/01/20 12:09 p.m.96 views

CVE-2026-1183

CVE-2026-1183 is an HTML injection vulnerability affecting multiple Botble products (TransP, Athena, Martfury, Homzen). The issue arises from improper validation of user input, specifically via the /search endpoint using the q parameter. Public sources (NVD/Red Hat/CVE records) describe the vulne...

5.1CVSS5.5AI score0.00272EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/20 12:09 p.m.43 views

CVE-2026-1183 HTML injection in multiple Botble products

HTML injection vulnerability in multiple Botble products such as TransP, Athena, Martfury, and Homzen, consisting of an HTML injection due to a lack of proper validation of user input by sending a request to '/search' using the 'q' parameter...

5.1CVSS0.00272EPSS
SaveExploits0References1
Rows per page
Query Builder