Lucene search
+L

167 matches found

Tenable Nessus
Tenable Nessus
•added 2026/10/21 12:00 a.m.•5 views

Linux Distros Unpatched Vulnerability : CVE-2026-112027

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected by this vulnerability ...

6.9CVSS5.5AI score0.00335EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/19 12:30 a.m.•12 views

EUVD-2026-104010

A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected by this vulnerability is the function fileexists of the file Public/Home/js/uploadify/check-exists.php of the component Uploadify. The manipulation of the...

6.9CVSS5.5AI score0.00335EPSS
SaveExploits0References7
NVD
NVD
•added 2026/10/18 11:16 p.m.•20 views

CVE-2026-112027

A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected by this vulnerability is the function fileexists of the file Public/Home/js/uploadify/check-exists.php of the component Uploadify. The manipulation of the...

6.9CVSS0.00335EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2026/10/18 10:51 p.m.•13 views

CVE-2026-112027

A flaw was found in the Uploadify component of light0011 cms. A remote attacker can exploit an improper input handling vulnerability by manipulating the filename parameter in the check-exists script. This issue leads to information disclosure, allowing the attacker to verify the existence of...

6.9CVSS5.9AI score0.00335EPSS
SaveExploits0References9
osv_cve
osv_cve
•added 2026/10/18 10:30 p.m.•6 views

CVE-2026-112027 light0011 cms Uploadify check-exists.php file_exists file information disclosure

A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected by this vulnerability is the function fileexists of the file Public/Home/js/uploadify/check-exists.php of the component Uploadify. The manipulation of the...

6.9CVSS5.3AI score
SaveExploits0References8
CVE
CVE
•added 2026/10/18 10:30 p.m.•26 views

CVE-2026-112027

A vulnerability exists in the Uploadify component of the light0011 cms (specifically in the file Public/Home/js/uploadify/check-exists.php). The issue is caused by the file_exists function, where manipulating the filename argument leads to file and directory information disclosure . This vulnerab...

6.9CVSS5.5AI score0.00335EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/18 10:30 p.m.•38 views

CVE-2026-112027 light0011 cms Uploadify check-exists.php file_exists file information disclosure

A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected by this vulnerability is the function fileexists of the file Public/Home/js/uploadify/check-exists.php of the component Uploadify. The manipulation of the...

6.9CVSS0.00335EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/18 12:00 a.m.•7 views

CVE-2026-112027: Insertion of Sensitive Information into Externally-Accessible File or Directory

A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected by this vulnerability is the function fileexists of the file Public/Home/js/uploadify/check-exists.php of the component Uploadify. The manipulation of the...

6.9CVSS5.5AI score0.00335EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/18 12:00 a.m.•13 views

PT-2026-117160

A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected by this vulnerability is the function file exists of the file Public/Home/js/uploadify/check-exists.php of the component Uploadify. The manipulation of the...

6.9CVSS5.5AI score0.00335EPSS
SaveExploits0References8
NVD
NVD
•added 2026/07/21 2:16 p.m.•32 views

CVE-2026-16447

A vulnerability has been found in D-Link DNS-320 1.0.2. Impacted is an unknown function of the file /web/jquery/uploader/multiuploadify.php. The manipulation of the argument Filedata leads to unrestricted upload. Remote exploitation of the attack is possible. The exploit has been disclosed to the...

7.5CVSS0.01574EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/07/21 1:30 p.m.•51 views

CVE-2026-16447 D-Link DNS-320 multi_uploadify.php unrestricted upload

A vulnerability has been found in D-Link DNS-320 1.0.2. Impacted is an unknown function of the file /web/jquery/uploader/multiuploadify.php. The manipulation of the argument Filedata leads to unrestricted upload. Remote exploitation of the attack is possible. The exploit has been disclosed to the...

7.5CVSS0.01574EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/07/21 1:30 a.m.•18 views

CVE-2026-16332 D-Link DNS-320 multi_uploadify.php unrestricted upload

A vulnerability was detected in D-Link DNS-320 1.0.2. This impacts an unknown function of the file /mydlink/multiuploadify.php. Performing a manipulation of the argument Filedata results in unrestricted upload. The attack is possible to be carried out remotely. The exploit is now public and may b...

7.5CVSS6.9AI score0.01448EPSS
SaveExploits0References6
CVE
CVE
•added 2026/07/21 1:30 a.m.•60 views

CVE-2026-16332

CVE-2026-16332 affects D-Link DNS-320 with firmware 1.0.2. The vulnerability resides in the file /mydlink/multi_uploadify.php; manipulating the argument Filedata[] enables unrestricted upload. This can be exploited remotely, and the exploit is public and may be used. The connected documents provi...

7.5CVSS6.9AI score0.01448EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/07/21 1:30 a.m.•88 views

EUVD-2026-46143

A vulnerability was detected in D-Link DNS-320 1.0.2. This impacts an unknown function of the file /mydlink/multiuploadify.php. Performing a manipulation of the argument Filedata results in unrestricted upload. The attack is possible to be carried out remotely. The exploit is now public and may b...

7.5CVSS7.1AI score0.01448EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2026/07/21 1:30 a.m.•16 views

CVE-2026-16332

A vulnerability was detected in D-Link DNS-320 1.0.2. This impacts an unknown function of the file /mydlink/multiuploadify.php. Performing a manipulation of the argument Filedata results in unrestricted upload. The attack is possible to be carried out remotely. The exploit is now public and may b...

7.5CVSS6.9AI score0.01448EPSS
SaveExploits0References6Affected Software1
NVD
NVD
•added 2026/07/21 1:16 a.m.•29 views

CVE-2026-16330

A weakness has been identified in D-Link DNS-320 1.0.2. The impacted element is an unknown function of the file /web/jquery/uploader/uploadify.php. This manipulation of the argument https:/ucn9h68n9289.feishu.cn/wiki/JJcTwHz7aiKeq6kSItMcoeSUnMc?from=fromcopylink causes unrestricted upload. Remote...

7.5CVSS0.01574EPSS
SaveExploits0References6
NVD
NVD
•added 2026/07/21 1:16 a.m.•24 views

CVE-2026-16329

A vulnerability was identified in D-Link DNS-320 1.0.2. Impacted is an unknown function of the file /photocenter/php/uploadify.php. The manipulation of the argument Malicious Handler leads to unrestricted upload. The attack may be initiated remotely. The exploit is publicly available and might be...

7.5CVSS0.01448EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/07/21 12:30 a.m.•18 views

CVE-2026-16330 D-Link DNS-320 uploadify.php unrestricted upload

A weakness has been identified in D-Link DNS-320 1.0.2. The impacted element is an unknown function of the file /web/jquery/uploader/uploadify.php. This manipulation of the argument https:/ucn9h68n9289.feishu.cn/wiki/JJcTwHz7aiKeq6kSItMcoeSUnMc?from=fromcopylink causes unrestricted upload. Remote...

7.5CVSS6.8AI score0.01574EPSS
SaveExploits0References6
CVE
CVE
•added 2026/07/21 12:15 a.m.•61 views

CVE-2026-16329

The CVE-2026-16329 entry affects D-Link DNS-320 firmware 1.0.2. A vulnerable function in /photo_center/php/uploadify.php can be triggered by manipulating the Malicious Handler argument to allow unrestricted file upload. Exploitation is described as remote, with a publicly available exploit. No pa...

7.5CVSS6.9AI score0.01448EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2026/07/21 12:15 a.m.•19 views

CVE-2026-16329

A vulnerability was identified in D-Link DNS-320 1.0.2. Impacted is an unknown function of the file /photocenter/php/uploadify.php. The manipulation of the argument Malicious Handler leads to unrestricted upload. The attack may be initiated remotely. The exploit is publicly available and might be...

7.5CVSS7.1AI score0.01448EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder