Lucene search
+L

32499 matches found

CNNVD
CNNVD
•added 2026/04/23 12:00 a.m.•23 views

Google BigQuery security vulnerabilities

Google BigQuery is a cloud data warehouse service provided by Google Inc., designed for large-scale data analysis and high-performance query processing. There is a security vulnerability in Google BigQuery. This vulnerability stems from the materialized view refresh mechanism, which generates err...

7.1CVSS5.9AI score0.00382EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/23 12:00 a.m.•27 views

IBM Guardium Key Lifecycle Manager security vulnerabilities

IBM Guardium Key Lifecycle Manager is a key management system provided by IBM that offers capabilities for generating, distributing, and managing encrypted keys. There is a security vulnerability in IBM Guardium Key Lifecycle Manager, which stems from improper permission management. This...

4.8CVSS5.7AI score0.00194EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/04/23 12:00 a.m.•30 views

Flowise information leakage vulnerability

Flowise is a FlowiseAI open source tool for easily building LLM applications. Flowise suffers from an information disclosure vulnerability caused by a flaw in the /api/v1/public-chatflows/:id endpoint that can be exploited by an attacker to obtain sensitive information...

8.7CVSS5.7AI score0.00429EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/04/23 12:00 a.m.•34 views

OpenVPN OpenSource security vulnerabilities

OpenVPN OpenSource is a virtual private network communication software developed by OpenVPN Inc., based on the SSL/TLS protocol. OpenVPN OpenSource has a security vulnerability; this vulnerability stems from bypassing access restrictions through the TLS handshake, potentially leading to the readi...

5.9AI score0.00372EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/04/22 11:38 p.m.•17 views

CVE-2026-5926

IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 uses weaker than expected cryptographic algorithms that could allow an...

6.5CVSS5.8AI score0.00234EPSS
SaveExploits0References2Affected Software4
Vulnrichment
Vulnrichment
•added 2026/04/22 11:38 p.m.•13 views

CVE-2026-5926 Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 uses weaker than expected cryptographic algorithms that could allow an...

6.5CVSS5.8AI score0.00234EPSS
SaveExploits0References1
osv_ghsa
osv_ghsa
•added 2026/04/22 6:31 p.m.•20 views

GHSA-HPFW-MQM3-33JH uutils coreutils has a Link Following issue

A Time-of-Check to Time-of-Use TOCTOU vulnerability in the cp utility of uutils coreutils allows an attacker to bypass no-dereference intent. The utility checks if a source path is a symbolic link using path-based metadata but subsequently opens it without the ONOFOLLOW flag. An attacker with...

4.7CVSS6AI score0.00106EPSS
SaveExploits1References3
EUVD
EUVD
•added 2026/04/22 3:31 p.m.•22 views

EUVD-2026-24750

A vulnerability in the web application allows standard users to escalate their privileges to those of a super administrator through parameter manipulation, enabling them to access and modify sensitive information...

9.6CVSS5.8AI score0.00385EPSS
SaveExploits0References2
NVD
NVD
•added 2026/04/22 2:17 p.m.•21 views

CVE-2026-6356

A vulnerability in the web application allows standard users to escalate their privileges to those of a super administrator through parameter manipulation, enabling them to access and modify sensitive information...

9.6CVSS0.00385EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/04/22 1:18 p.m.•9 views

CVE-2026-6356

A vulnerability in the web application allows standard users to escalate their privileges to those of a super administrator through parameter manipulation, enabling them to access and modify sensitive information...

9.6CVSS5.8AI score0.00385EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2026/04/22 1:18 p.m.•7 views

CVE-2026-6356 CVE-2026-6356

A vulnerability in the web application allows standard users to escalate their privileges to those of a super administrator through parameter manipulation, enabling them to access and modify sensitive information...

5.8AI score0.00385EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/04/22 1:18 p.m.•46 views

CVE-2026-6356 CVE-2026-6356

A vulnerability in the web application allows standard users to escalate their privileges to those of a super administrator through parameter manipulation, enabling them to access and modify sensitive information...

0.00385EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/04/22 1:18 p.m.•12 views

CVE-2026-6355

A vulnerability in the web application allows unauthorized users to access and manipulate sensitive data across different tenants by exploiting insecure direct object references. This could lead to unauthorized access to sensitive information and unauthorized changes to the tenant's configuration...

6.5CVSS5.8AI score0.00293EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2026/04/22 1:18 p.m.•13 views

CVE-2026-6355 CVE-2026-6355

A vulnerability in the web application allows unauthorized users to access and manipulate sensitive data across different tenants by exploiting insecure direct object references. This could lead to unauthorized access to sensitive information and unauthorized changes to the tenant's configuration...

5.8AI score0.00293EPSS
SaveExploits0References1
CVE
CVE
•added 2026/04/22 1:18 p.m.•56 views

CVE-2026-6355

The Augmentt SaaS management and automation platform is vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability in its web application. This flaw allows unauthorized users to access and manipulate sensitive data across different tenants by modifying the customerid parameter in HTTP...

6.5CVSS5.8AI score0.00293EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
•added 2026/04/22 9:31 a.m.•20 views

EUVD-2026-24668

The Table Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.0 via the 'tablemanager' shortcode. The shortcode handler tablemanagerrendertableshortcode takes a user-controlled table attribute, applies only sanitizekey for...

4.3CVSS5.8AI score0.00412EPSS
SaveExploits0References8
NVD
NVD
•added 2026/04/22 9:16 a.m.•20 views

CVE-2026-4126

The Table Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.0 via the 'tablemanager' shortcode. The shortcode handler tablemanagerrendertableshortcode takes a user-controlled table attribute, applies only sanitizekey for...

4.3CVSS0.00412EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2026/04/22 7:45 a.m.•48 views

CVE-2026-4126 Table Manager <= 1.0.0 - Authenticated (Contributor+) Sensitive Information Exposure via 'table' Shortcode Attribute

The Table Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.0 via the 'tablemanager' shortcode. The shortcode handler tablemanagerrendertableshortcode takes a user-controlled table attribute, applies only sanitizekey for...

4.3CVSS0.00412EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
•added 2026/04/22 1:15 a.m.•20 views

CVE-2026-6782

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the IP Protection component...

7.5CVSS7.1AI score0.00425EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/04/22 12:00 a.m.•24 views

X.Org libXpm security vulnerabilities

X.Org libXpm is a graphics processing library developed by the X.Org Foundation. X.Org libXpm has a security vulnerability that stems from the xpmNextWord function’s ability to read memory segments, which may lead to the extraction of sensitive information...

6.3AI score0.00154EPSS
SaveExploits0References1
Rows per page
Query Builder