Lucene search
+L

4412 matches found

vulnersOsv
vulnersOsv
added 2026/07/24 9:25 p.m.14 views

budibase (>=0.0.3, <=0.0.31) potentially affected by unknown CVE via @budibase/server (>=0.0.1, <=0.0.31)

@budibase/server NPM version =0.0.1, =0.0.3, =0.0.31 Source cves: unknown CVE Source advisory: SNYK:JS-BUDIBASESERVER-18308470...

5.4AI score
SaveExploits0
Patchstack
Patchstack
added 2026/07/24 9:12 p.m.16 views

NPM: react-server-dom: Denial of Service in Server Functions

NPM: react-server-dom: Denial of Service in Server Functions vulnerability discovered by ? in WordPress Npm react-server-dom-turbopack versions = 19.0.0, 19.0.8...

7.5CVSS5.8AI score0.006EPSS
SaveExploits0References3Affected Software1
vulnersOsv
vulnersOsv
added 2026/07/24 4:22 p.m.13 views

@akemona-org/strapi-connector-mongoose (>=3.18.2, <=3.19.3), @albertoielpo/kk-cli (>=1.1.0, <=1.1.2) +30 more potentially affected by CVE-2026-73562 via mongoose (>=9.0.0, <=9.7.1)

mongoose NPM version =9.0.0, =3.18.2, =1.1.0, =1.0.0, =12.3.0, =11.0.36, =8.2.3, =0.2.29, =0.0.1, =11.7.0, =4.0.0, =2.0.0, =2.0.0, =0.4.1, =0.1.24, =0.7.0, =0.11.0 and more Source cves: CVE-2026-73562 Source advisory: OSV:GHSA-664H-WQGQ-64GW...

6.5CVSS5.7AI score0.00369EPSS
SaveExploits0
vulnersOsv
vulnersOsv
added 2026/07/24 2:07 p.m.12 views

actix-remote (0.1.0), agnostic (>=0.2.5, <=0.2.6) +272 more potentially affected by CVE-2026-25800 via quinn-proto (>=0.2.0, <=0.11.9)

quinn-proto CARGO version =0.2.0, =0.2.5, =0.1.0, =0.1.0, =0.1.0, =0.3.0, =0.5.0, =2.0.0, =0.2.3, =0.2.11 and more Source cves: CVE-2026-25800 Source advisory: OSV:GHSA-4W2J-M93H-CJ5J...

7.5CVSS5.8AI score0.00609EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2026/07/24 3:27 a.m.15 views

CVE-2026-11922 Rate-limit Bypass in zenml-io/zenml

A vulnerability in zenml-io/zenml versions 0.57.0 through 0.94.2 allows an attacker to bypass rate-limiting on the POST /api/v1/login and self password-change endpoints by rotating the X-Forwarded-For header. The rate limiter keys requests by request.client.host, which is derived from the...

6.5CVSS5.9AI score0.00179EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/07/24 12:00 a.m.28 views

PT-2026-67307

Name of the Vulnerable Software and Affected Versions better-auth versions 1.1.3 through 1.6.21 better-auth versions 1.7.0-beta.0 through 1.7.0-beta.9 Description A pre-account hijacking flaw allows account takeover when open email and password registration is enabled alongside magic-link or...

8.7CVSS5.5AI score0.00264EPSS
SaveExploits0References11
vulnersOsv
vulnersOsv
added 2026/07/23 7:36 p.m.13 views

@0xmike/web-kit (>=0.0.6, <=0.1.1), @acmekit/acmekit (>=2.13.1, <=2.13.94) +284 more potentially affected by CVE-2026-53668 via react-router-dom (>=6.30.2, <=6.30.4)

react-router-dom NPM version =6.30.2, =0.0.6, =2.13.1, =2.13.1, =2.13.1, =2.13.1, =1.4.0, =0.0.1, =1.2.0, =0.1.0, =0.0.6, =2.0.1, =4.1.0 - @automattic/data-stores 3.2.2 - @automattic/domain-search 1.1.0 - @automattic/jetpack-ai-calypso 2.1.0 and more Source cves: CVE-2026-53668 Source advisory:...

6.9CVSS5.8AI score0.0028EPSS
SaveExploits0
Patchstack
Patchstack
added 2026/07/23 7:34 p.m.12 views

NPM: React Router: Arbitrary Constructor Injection via deserializeErrors() in React Router SSR Hydration

NPM: React Router: Arbitrary Constructor Injection via deserializeErrors in React Router SSR Hydration vulnerability discovered by ? in WordPress Npm react-router versions = 6.4.0, 7.18.0...

6.1CVSS5.4AI score0.00305EPSS
SaveExploits0References6Affected Software1
EUVD
EUVD
added 2026/07/23 7:00 p.m.21 views

EUVD-2026-48372

FFmpeg versions 3.4 through 8.1.2 contain an out-of-bounds write vulnerability in the vffloodfill video filter that allows attackers to corrupt heap memory by supplying a dynamically sized video stream with filtergraph reinitialization disabled via -reinitfilter 0. When configinput allocates the...

7.8CVSS6.2AI score0.00125EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2026/07/23 4:44 p.m.20 views

Security Bulletin: Multiple vulnerabilities in IBM Desktop App

Summary Multiple vulnerabilities were addressed in IBM Aspera Desktop App v1.1.0. Vulnerability Details CVEID:CVE-2026-11980 DESCRIPTION: IBM Aspera Desktop App can allow arbitrary code execution by loading DLL files at start-up. CWE:CWE-242: Use of Inherently Dangerous Function CVSS Source: IBM...

9.3CVSS6.3AI score0.00304EPSS
SaveExploits0Affected Software4
Cvelist
Cvelist
added 2026/07/23 4:38 p.m.43 views

CVE-2026-65761 Joomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1

Joomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1 - Improper validation of order parameters lead to an unauthenticated SQL injection in easystore, allowing full DB read access including credentials and sessions...

9.3CVSS0.00928EPSS
SaveExploits2References2
NVD
NVD
added 2026/07/23 12:18 p.m.12 views

CVE-2026-65475

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Modula Image Gallery allows Stored XSS. This issue affects Modula Image Gallery: from 2.14.25 through 2.14.30...

6.5CVSS0.00224EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/23 11:46 a.m.73 views

CVE-2026-57626 WordPress MailPoet plugin 5.30.0-5.33.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in MailPoet allows Cross Site Request Forgery. This issue affects MailPoet: from 5.30.0 through 5.33.0...

7.1CVSS0.00128EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/23 11:46 a.m.19 views

EUVD-2026-48248

Cross-Site Request Forgery CSRF vulnerability in MailPoet allows Cross Site Request Forgery. This issue affects MailPoet: from 5.30.0 through 5.33.0...

7.1CVSS5.2AI score0.00128EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/07/23 9:24 a.m.9 views

CVE-2026-65758 Joomla Extension - tassos.gr - Sensitive data exposure in Convert Forms extension 2.5.0-5.2.2

Joomla Extension - tassos.gr - Sensitive data exposure in Convert Forms extension 2.5.0-5.2.2 - The front-end Submissions view did not enforce access control. An unauthenticated visitor could therefore list a form's submissions...

8.2CVSS5.2AI score0.00314EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/23 8:26 a.m.74 views

CVE-2026-16723 Remote Code Execution in fastjson 1.2.68–1.2.83

A remote code execution RCE vulnerability exists in fastjson 1.2.68 through 1.2.83. This vulnerability is exploitable under fastjson's stock default configuration — no AutoType enablement required, no classpath gadget required...

9CVSS0.15989EPSS
SaveExploits7References1
Cvelist
Cvelist
added 2026/07/23 7:44 a.m.36 views

CVE-2026-16287 Root Command Injection via Offline Update in TÜBİTAK BİLGEM's pardus-update

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in TUBITAK BILGEM Software Technologies Research Institute pardus-update allows OS Command Injection. This issue affects pardus-update: from 0.6.6 before 0.7.0...

7.8CVSS0.00842EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/07/23 12:00 a.m.23 views

PT-2026-63970

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Modula Image Gallery allows Stored XSS. This issue affects Modula Image Gallery: from 2.14.25 through 2.14.30...

6.5CVSS5.3AI score0.00224EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/07/23 12:00 a.m.15 views

Oracle Primavera Gateway (July 2026 CPU)

The version of Primavera Gateway installed on the remote host is affected by a vulnerability as referenced in the July 2026 CPU advisory. - Vulnerability in the Primavera Gateway product of Oracle Construction and Engineering component: Admin Apache Log4j. Supported versions that are affected are...

7.5CVSS7.1AI score0.00691EPSS
SaveExploits0References3
vulnersOsv
vulnersOsv
added 2026/07/22 11:09 p.m.13 views

9remote (>=0.1.0, <=0.1.8), @071yoon/log-console-core (0.1.0) +936 more potentially affected by CVE-2026-64649 via next (>=16.0.0, <=16.2.10)

next NPM version =16.0.0, =0.1.0, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.8, =1.1.0-beta.18 and more Source cves: CVE-2026-64649 Source advisory:...

8.3CVSS5.8AI score0.00872EPSS
SaveExploits0
Rows per page
Query Builder