Lucene search
+L

8486 matches found

Cvelist
Cvelist
added 2026/03/26 7:07 p.m.31 views

CVE-2026-33152 Tandoor Recipes Vulnerable to Unrestricted Brute-Force via BasicAuthentication

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. In versions prior to 2.6.0, Tandoor Recipes configures Django REST Framework with BasicAuthentication as one of the default authentication backends. The AllAuth rate limiting configuration...

9.1CVSS0.00513EPSS
SaveExploits1References2
OSV
OSV
added 2026/03/26 7:06 p.m.7 views

CVE-2026-33153 Tandoor Recipes's Unauthenticated Debug Parameter Leaks Full Raw SQL Queries Including Schema, Table Names, and Access Control Logic

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. In versions prior to 2.6.0, the Recipe API endpoint exposes a hidden ?debug=true query parameter that returns the complete raw SQL query being executed, including all table names, column names, JO...

8.7CVSS6AI score
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/03/26 7:04 p.m.4 views

CVE-2026-33148

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. In versions prior to 2.6.0, the FDC USDA FoodData Central search endpoint constructs an upstream API URL by directly interpolating the user-supplied query parameter into the URL string without...

6.5CVSS5.8AI score0.00467EPSS
SaveExploits1References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/03/26 7:03 p.m.6 views

CVE-2026-29055

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. In versions prior to 2.6.0, the image processing pipeline in Tandoor Recipes explicitly skips EXIF metadata stripping, image rescaling, and size validation for WebP and GIF image formats. A...

5.3CVSS5.9AI score0.00306EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2026/03/26 7:03 p.m.26 views

CVE-2026-29055

CVE-2026-29055 affects Tandoor Recipes: in versions prior to 2.6.0, the image processing pipeline did not strip EXIF data, rescale, or validate sizes for WebP and GIF uploads, allowing sensitive EXIF metadata (GPS coordinates, camera model, timestamps, software) to be stored and served to all vie...

5.3CVSS5.9AI score0.00306EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2026/03/26 6:56 p.m.6 views

GHSA-CG6C-Q2HX-69H7 OpenClaw: Plivo V2 verified replay identity drifts on query-only variants

Summary Before v2026.3.23, the Plivo V2 verification path treated query-only variants of the same signed request as fresh verified work. Plivo V2 signatures authenticate baseUrl + nonce, but the replay key was derived from the full verification URL including the query string, so unsigned query-on...

8.2CVSS5.8AI score0.00283EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2026/03/26 6:56 p.m.9 views

OpenClaw: Plivo V2 verified replay identity drifts on query-only variants

Summary Before v2026.3.23, the Plivo V2 verification path treated query-only variants of the same signed request as fresh verified work. Plivo V2 signatures authenticate baseUrl + nonce, but the replay key was derived from the full verification URL including the query string, so unsigned query-on...

8.3CVSS5.9AI score0.00283EPSS
SaveExploits0References6Affected Software1
EUVD
EUVD
added 2026/03/26 6:55 p.m.11 views

EUVD-2026-16295

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. In versions prior to 2.6.0, the SyncViewSet.querysyncedfolder action in cookbook/views/api.py line 903 fetches a Sync object using getobjector404Sync, pk=pk without including space=request.space i...

6.9CVSS5.8AI score0.00303EPSS
SaveExploits0References2
OSV
OSV
added 2026/03/26 6:49 p.m.14 views

GHSA-W9FJ-CFPG-GRVV Netty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame Bypass

Summary A remote user can trigger a Denial of Service DoS against a Netty HTTP/2 server by sending a flood of CONTINUATION frames. The server's lack of a limit on the number of CONTINUATION frames, combined with a bypass of existing size-based mitigations using zero-byte frames, allows an user to...

8.7CVSS6AI score0.01125EPSS
SaveExploits0References3
NVD
NVD
added 2026/03/26 5:16 p.m.12 views

CVE-2026-34071

Stirling-PDF is a locally hosted web application that allows you to perform various operations on PDF files. In version 2.7.3, the /api/v1/convert/eml/pdf endpoint with parameter downloadHtml=true returns unsanitized HTML from the email body with Content-Type: text/html. An attacker who sends a...

6.1CVSS0.0026EPSS
SaveExploits1References1
NVD
NVD
added 2026/03/26 5:16 p.m.12 views

CVE-2026-33438

Stirling-PDF is a locally hosted web application that allows you to perform various operations on PDF files. Versions starting in 2.1.5 and prior to 2.5.2 have Denial of Service DoS vulnerability in the Stirling-PDF watermark functionality /api/v1/security/add-watermark endpoint. The vulnerabilit...

6.5CVSS0.00398EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/03/26 5:04 p.m.10 views

CVE-2026-25327

Missing Authorization vulnerability in Rustaurius Five Star Restaurant Reservations restaurant-reservations allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Five Star Restaurant Reservations: from n/a through = 2.7.9...

6.5CVSS5.8AI score0.00209EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/03/26 5:04 p.m.23 views

CVE-2026-25328

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in add-ons.org Product File Upload for WooCommerce products-file-upload-for-woocommerce allows Path Traversal.This issue affects Product File Upload for WooCommerce: from n/a through = 2.2.4...

6.8CVSS5.8AI score0.00354EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/03/26 5:04 p.m.9 views

CVE-2026-25342

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kutethemes Boutique kute-boutique allows Reflected XSS.This issue affects Boutique: from n/a through 2.4.6...

7.1CVSS5.8AI score0.00175EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/03/26 5:03 p.m.8 views

CVE-2026-25452

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPDO Remoji remoji allows Stored XSS.This issue affects Remoji: from n/a through = 2.2...

7.1CVSS5.8AI score0.00175EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/03/26 5:02 p.m.10 views

CVE-2026-32492

Authentication Bypass by Spoofing vulnerability in Joe Dolson My Tickets my-tickets allows Identity Spoofing.This issue affects My Tickets: from n/a through = 2.1.1...

5.3CVSS5.8AI score0.00292EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/03/26 5:00 p.m.8 views

CVE-2026-20012

A vulnerability in the Internet Key Exchange version 2 IKEv2 feature of Cisco IOS Software, Cisco IOS XE Software, Cisco Secure Firewall Adaptive Security Appliance ASA Software, and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to trigger a...

8.6CVSS5.8AI score0.00354EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/03/26 4:58 p.m.31 views

CVE-2026-33438 Stirling-PDF vulnerable to DoS via add-watermark

Stirling-PDF is a locally hosted web application that allows you to perform various operations on PDF files. Versions starting in 2.1.5 and prior to 2.5.2 have Denial of Service DoS vulnerability in the Stirling-PDF watermark functionality /api/v1/security/add-watermark endpoint. The vulnerabilit...

6.5CVSS0.00398EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/03/26 3:30 p.m.8 views

EUVD-2026-16211

A reflected cross-site scripting XSS vulnerability in the /admin/menus component of Lightcms v2.0 allows attackers to execute arbitrary Javascript in the context of the user's browser via modifying the referer value in the request header...

6.1CVSS5.8AI score0.00203EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2026/03/26 3:18 p.m.10 views

CVE-2026-30402

An issue in wgcloud v.2.3.7 and before allows a remote attacker to execute arbitrary code via the test connection function...

9.8CVSS6.2AI score0.00715EPSS
SaveExploits1References1
Rows per page
Query Builder