Lucene search
+L

1753 matches found

NVD
NVD
added 2026/06/16 10:16 a.m.14 views

CVE-2026-39437

Unauthenticated Cross Site Scripting XSS in Min Max Step Quantity Limits Manager for WooCommerce = 5.2.2 versions...

7.1CVSS0.00142EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/06/16 9:0 a.m.13 views

EUVD-2026-37044

Unauthenticated Cross Site Scripting XSS in Min Max Step Quantity Limits Manager for WooCommerce = 5.2.2 versions...

7.1CVSS5.2AI score0.00142EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/16 9:0 a.m.31 views

CVE-2026-39437

The CVE-2026-39437 issue affects the WordPress plugin “Min Max Step Quantity Limits Manager for WooCommerce” (versions ≤ 5.2.2). The vulnerability is an unauthenticated Cross Site Scripting (XSS), described as reflected in Patchstack and corroborated by NVD/CVE listings. The root cause is an inpu...

7.1CVSS5.1AI score0.00142EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2026/06/16 2:20 a.m.13 views

SUSE CVE-2026-47167

Vim is an open source, command line text editor. Prior to version 9.2.0496, a code injection vulnerability exists in s:stepmatch in the cucumber filetype plugin runtime/ftplugin/cucumber.vim on Vim builds with +ruby support. Step-definition patterns read from .rb files under the repository's...

7.8CVSS5.8AI score0.00135EPSS
SaveExploits0References6
Microsoft CVE
Microsoft CVE
added 2026/06/13 8:1 a.m.23 views

Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regex

...

5.3CVSS5.3AI score0.00135EPSS
SaveExploits0
NVD
NVD
added 2026/06/12 4:16 p.m.19 views

CVE-2026-44976

Frappe is a full-stack web application framework. Prior to version 16.17.4, any user can modify any field in any Onboarding Step record. This issue has been patched in version 16.17.4...

5.3CVSS0.00278EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/06/12 3:8 p.m.14 views

EUVD-2026-32594

Budibase: SSRF via User-Controlled queryId in Automation Execute Query Step...

5.1CVSS5.2AI score0.00329EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/06/12 2:38 p.m.30 views

CVE-2026-44976 Frappe: IDOR in update_onboarding_step

Frappe is a full-stack web application framework. Prior to version 16.17.4, any user can modify any field in any Onboarding Step record. This issue has been patched in version 16.17.4...

5.3CVSS0.00278EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/06/12 2:38 p.m.13 views

CVE-2026-44976 Frappe: IDOR in update_onboarding_step

Frappe is a full-stack web application framework. Prior to version 16.17.4, any user can modify any field in any Onboarding Step record. This issue has been patched in version 16.17.4...

5.3CVSS5.3AI score0.00278EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/06/12 2:38 p.m.13 views

EUVD-2026-36493

Frappe is a full-stack web application framework. Prior to version 16.17.4, any user can modify any field in any Onboarding Step record. This issue has been patched in version 16.17.4...

5.3CVSS5.2AI score0.00278EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/12 2:38 p.m.38 views

CVE-2026-44976

CVE-2026-44976 affects the Frappe web framework. The vulnerability is described as an IDOR in the “update_onboarding_step” function, allowing any user to modify any field in any Onboarding Step record prior to version 16.17.4. The issue is explicitly patched in version 16.17.4. The available conn...

5.3CVSS5.3AI score0.00278EPSS
SaveExploits0References1
OSV
OSV
added 2026/06/12 2:38 p.m.6 views

CVE-2026-44976 Frappe: IDOR in update_onboarding_step

Frappe is a full-stack web application framework. Prior to version 16.17.4, any user can modify any field in any Onboarding Step record. This issue has been patched in version 16.17.4...

5.3CVSS5.9AI score0.00278EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/06/12 10:0 a.m.41 views

CVE-2026-9266

A Missing Required Cryptographic Step vulnerability has been identified in Moxa's embedded Linux firmware for industrial computers and controllers. This vulnerability represents an incomplete remediation of CVE-2026-0714. The firmware introduced TPM2 parameter encryption as a countermeasure again...

7CVSS0.0007EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/06/12 10:0 a.m.13 views

EUVD-2026-36411

A Missing Required Cryptographic Step vulnerability has been identified in Moxa's embedded Linux firmware for industrial computers and controllers. This vulnerability represents an incomplete remediation of CVE-2026-0714. The firmware introduced TPM2 parameter encryption as a countermeasure again...

7CVSS5.1AI score0.00115EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/06/12 12:0 a.m.23 views

PT-2026-48857

A Missing Required Cryptographic Step vulnerability has been identified in Moxa's embedded Linux firmware for industrial computers and controllers. This vulnerability represents an incomplete remediation of CVE-2026-0714. The firmware introduced TPM2 parameter encryption as a countermeasure again...

7CVSS5.2AI score0.0007EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/06/12 12:0 a.m.24 views

PT-2026-48894

Frappe is a full-stack web application framework. Prior to version 16.17.4, any user can modify any field in any Onboarding Step record. This issue has been patched in version 16.17.4...

5.3CVSS5.2AI score0.00278EPSS
SaveExploits0References2
NVD
NVD
added 2026/06/11 7:16 p.m.15 views

CVE-2026-47167

Vim is an open source, command line text editor. Prior to version 9.2.0496, a code injection vulnerability exists in s:stepmatch in the cucumber filetype plugin runtime/ftplugin/cucumber.vim on Vim builds with +ruby support. Step-definition patterns read from .rb files under the repository's...

5.3CVSS0.00135EPSS
SaveExploits0References3
AlpineLinux
AlpineLinux
added 2026/06/11 6:31 p.m.9 views

CVE-2026-47167

Vim is an open source, command line text editor. Prior to version 9.2.0496, a code injection vulnerability exists in s:stepmatch in the cucumber filetype plugin runtime/ftplugin/cucumber.vim on Vim builds with +ruby support. Step-definition patterns read from .rb files under the repository's...

5.3CVSS5.8AI score0.00135EPSS
SaveExploits0References3
CVE
CVE
added 2026/06/11 6:31 p.m.91 views

CVE-2026-47167

Vim has a code injection vulnerability in the cucumber filetype plugin (runtime/ftplugin/cucumber.vim) affecting builds with +ruby support prior to version 9.2.0496. A crafted step-definition regex pulled from .rb files under features// or stories/ / directories is embedded into a Ruby Kernel.eva...

5.3CVSS5.9AI score0.00135EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2026/06/11 6:31 p.m.4 views

CVE-2026-47167 Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regex

Vim is an open source, command line text editor. Prior to version 9.2.0496, a code injection vulnerability exists in s:stepmatch in the cucumber filetype plugin runtime/ftplugin/cucumber.vim on Vim builds with +ruby support. Step-definition patterns read from .rb files under the repository's...

5.1CVSS6.2AI score0.00135EPSS
SaveExploits0References5
Rows per page
Query Builder