Lucene search
K

30567 matches found

OSV
OSV
added yesterday10 views

ROOT-OS-DEBIAN-12-CVE-2022-0563 CVE-2022-0563 in rootio-util-linux - Patched by Root

Root has patched CVE-2022-0563 in the rootio-util-linux package for Root:Debian:12. Multiple fixed versions available...

5.5CVSS5.5AI score0.0043EPSS
Exploits0
OSV
OSV
added yesterday9 views

ROOT-APP-NPM-CVE-2026-54302 CVE-2026-54302 in @rootio/n8n - Patched by Root

Root has patched CVE-2026-54302 in the @rootio/n8n package for Root:npm. Multiple fixed versions available...

7CVSS5.3AI score0.0021EPSS
Exploits0
OSV
OSV
added yesterday2 views

ROOT-OS-DEBIAN-12-CVE-2024-7531 CVE-2024-7531 in rootio-nss - Patched by Root

Root has patched CVE-2024-7531 in the rootio-nss package for Root:Debian:12. Multiple fixed versions available...

6.5CVSS8.2AI score0.00409EPSS
Exploits0
OSV
OSV
added yesterday5 views

ROOT-OS-DEBIAN-12-CVE-2026-50219 CVE-2026-50219 in rootio-expat - Patched by Root

Root has patched CVE-2026-50219 in the rootio-expat package for Root:Debian:12. Multiple fixed versions available...

5.9CVSS5.9AI score0.00218EPSS
Exploits0
OSV
OSV
added yesterday4 views

ROOT-OS-DEBIAN-13-CVE-2025-10966 CVE-2025-10966 in rootio-curl - Patched by Root

Root has patched CVE-2025-10966 in the rootio-curl package for Root:Debian:13. Multiple fixed versions available...

4.3CVSS6.4AI score0.0039EPSS
Exploits1
OSV
OSV
added yesterday7 views

ROOT-OS-DEBIAN-11-CVE-2024-28757 CVE-2024-28757 in rootio-expat - Patched by Root

Root has patched CVE-2024-28757 in the rootio-expat package for Root:Debian:11. Multiple fixed versions available...

7.5CVSS6.7AI score0.02006EPSS
Exploits1
OSV
OSV
added yesterday5 views

ROOT-OS-DEBIAN-11-CVE-2026-25210 CVE-2026-25210 in rootio-expat - Patched by Root

Root has patched CVE-2026-25210 in the rootio-expat package for Root:Debian:11. Multiple fixed versions available...

7.8CVSS5.8AI score0.00193EPSS
Exploits0
OSV
OSV
added yesterday6 views

ROOT-OS-DEBIAN-11-CVE-2026-24515 CVE-2026-24515 in rootio-expat - Patched by Root

Root has patched CVE-2026-24515 in the rootio-expat package for Root:Debian:11. Multiple fixed versions available...

2.5CVSS5.4AI score0.0017EPSS
Exploits0
OSV
OSV
added yesterday7 views

ROOT-APP-NPM-CVE-2021-23337 CVE-2021-23337 in @rootio/lodash.template - Patched by Root

Root has patched CVE-2021-23337 in the @rootio/lodash.template package for Root:npm. Multiple fixed versions available...

7.2CVSS5.4AI score0.2241EPSS
Exploits3
Nuclei
Nuclei
added yesterday78 views

Extreme Management Center 8.4.1.24 - Cross-Site Scripting

Extreme Management Center 8.4.1.24 contains a cross-site scripting vulnerability via a parameter in a GET request. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication...

6.1CVSS6.5AI score0.04015EPSS
Exploits0References5
Nuclei
Nuclei
added yesterday93 views

Commvault CommCell - Local File Inclusion

CommCell in Commvault before 14.68, 15.x before 15.58, 16.x before 16.44, 17.x before 17.29, and 18.x before 18.13 are vulnerable to local file inclusion because an attacker can view a log file can instead view a file outside of the log-files folder. id: CVE-2020-25780 info: name: Commvault...

7.5CVSS7AI score0.09884EPSS
Exploits0References5
Nuclei
Nuclei
added yesterday95 views

Django Debug Page - Cross-Site Scripting

Django 1.10.x before 1.10.8 and 1.11.x before 1.11.5 has HTML autoescaping disabled in a portion of the template for the technical 500 debug page. We detected that right circumstances DEBUG=True are present to allow a cross-site scripting attack. id: CVE-2017-12794 info: name: Django Debug Page -...

6.1CVSS6.6AI score0.23566EPSS
Exploits0References5
Nuclei
Nuclei
added yesterday67 views

Webkul QloApps 1.6.0 - Cross-site Scripting

An unauthenticated Cross-Site Scripting XSS vulnerability found in Webkul QloApps 1.6.0 allows an attacker to obtain a user's session cookie and then impersonate that user via POST controller parameter. id: CVE-2023-36287 info: name: Webkul QloApps 1.6.0 - Cross-site Scripting author: theamanrawa...

6.1CVSS6.4AI score0.01199EPSS
Exploits1References3
Nuclei
Nuclei
added yesterday19 views

Emby Server - Authentication Bypass

Emby Server is a user-installable home media server which stores and organizes a user's media files of virtually any format and makes them available for viewing at home and abroad on a broad range of client devices. This vulnerability may allow administrative access to an Emby Server system,...

9.1CVSS6.9AI score0.01713EPSS
Exploits0References2
Nuclei
Nuclei
added yesterday80 views

Altenergy Power Control Software C1.2.5 - Remote Command Injection

Altenergy Power Control Software C1.2.5 is susceptible to remote command injection via shell metacharacters in the index.php/management/settimezone parameter, because of settimezone in models/managementmodel.php. An attacker can potentially obtain sensitive information, modify data, and/or execut...

9.8CVSS7.1AI score0.85332EPSS
Exploits5References5
Nuclei
Nuclei
added yesterday114 views

Dolibarr Unauthenticated Contacts Database Theft

An issue in Dolibarr 16 before 16.0.5 allows unauthenticated attackers to perform a database dump and access a company's entire customer file, prospects, suppliers, and employee information if a contact file exists. id: CVE-2023-33568 info: name: Dolibarr Unauthenticated Contacts Database Theft...

7.5CVSS7AI score0.1494EPSS
Exploits2References5
Nuclei
Nuclei
added yesterday71 views

PMB v7.4.6 - Cross-Site Scripting

PMB v7.4.6 allows an attacker to perform a reflected XSS on exportz3950.php via the 'query' parameter. id: CVE-2023-24737 info: name: PMB v7.4.6 - Cross-Site Scripting author: r3Y3r53 severity: medium description: | PMB v7.4.6 allows an attacker to perform a reflected XSS on exportz3950.php via t...

6.1CVSS6.4AI score0.01169EPSS
Exploits1References3
Nuclei
Nuclei
added yesterday163 views

XWiki - Cross-Site Scripting

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payload allowing to inject Javascript in the page XSS. It's possible to exploit the restore template to perform a XSS, e.g. by using URL such as:...

9.6CVSS6.3AI score0.02048EPSS
Exploits0References1
Nuclei
Nuclei
added yesterday19 views

Post Grid <= 2.2.50 - Information Exposure via REST API

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in PickPlugins Post Grid Combo – 36+ Gutenberg Blocks.This issue affects Post Grid Combo – 36+ Gutenberg Blocks: from n/a through 2.2.50. id: CVE-2023-40211 info: name: Post Grid = 2.2.50 - Information Exposure via REST API...

7.5CVSS7AI score0.02041EPSS
Exploits0References3
Nuclei
Nuclei
added yesterday124 views

Structurizr on-premises - Cross Site Scripting

Cross-site Scripting XSS - Reflected in GitHub repository structurizr/onpremises prior to 3194. id: CVE-2023-5556 info: name: Structurizr on-premises - Cross Site Scripting author: shankaracharya severity: medium description: | Cross-site Scripting XSS - Reflected in GitHub repository...

6.1CVSS6.2AI score0.01222EPSS
Exploits1References3
Rows per page
Query Builder