Lucene search
+L

21509 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/28 12:00 a.m.•1 views

CVE-2026-75418: Improper Limitation of a Pathname to a Restricted Directory

A path traversal vulnerability exists in the built-in preview/development web server of Lektor 3.3.14 on Windows. An attacker with network access to the server can send a crafted HTTP request containing path traversal sequences to read arbitrary files accessible to the process, disclosing sensiti...

7.5CVSS5.9AI score0.00634EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/28 12:00 a.m.•22 views

PT-2026-82884

SOY CMS contains an issue with deserialization of untrusted data. An arbitrary code may be executed by an attacker with the web server privilege...

9.8CVSS7.4AI score0.00612EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/28 12:00 a.m.•2 views

CVE-2026-78032: Deserialization of Untrusted Data

SOY CMS contains an issue with deserialization of untrusted data. An arbitrary code may be executed by an attacker with the web server privilege...

9.8CVSS8.4AI score0.00612EPSS
SaveExploits0References2
OSV
OSV
•added 2026/08/27 2:44 p.m.•12 views

SUSE-SU-2026:2641-1 Security update for apache2

This update for apache2 fixes the following issues Update to 2.4.66 jscPED-16334: Security issues: - CVE-2026-23918: http2: double free and possible RCE on early reset bsc1263957. - CVE-2026-24072: modrewrite elevation of privileges via apexpr bsc1263935. - CVE-2026-28780: heap buffer overflow in...

9.8CVSS7AI score0.49727EPSS
SaveExploits20References27
Cvelist
Cvelist
•added 2026/08/27 12:00 a.m.•39 views

CVE-2026-75418

A path traversal vulnerability exists in the built-in preview/development web server of Lektor 3.3.14 on Windows. An attacker with network access to the server can send a crafted HTTP request containing path traversal sequences to read arbitrary files accessible to the process, disclosing sensiti...

7.5CVSS0.00634EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/08/27 12:00 a.m.•12 views

The vulnerability of the Imperative Web Server component of the Oracle Helidon library in the Oracle Fusion Middleware software platform allows a perpetrator to gain access to add, delete, modify, and read data.

The vulnerability of the Imperative Web Server component of the Oracle libraries in the Oracle Fusion Middleware software suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to add, delete, modify, and read data...

9.4CVSS5.9AI score0.00425EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/08/27 12:00 a.m.•10 views

The vulnerability of the Imperative Web Server component in the Oracle Helidon library of the Oracle Fusion Middleware software platform allows a perpetrator to gain access to add, delete, modify, and read data, as well as to cause service interruptions.

The vulnerability of the Imperative Web Server component of the Oracle Helidon library in the Oracle Fusion Middleware software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to add, delete, modify, and read data, as wel...

7.5CVSS5.9AI score0.00307EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/08/27 12:00 a.m.•11 views

The vulnerability of the Imperative Web Server component in the Oracle Helidon library of the Oracle Fusion Middleware software platform allows a perpetrator to gain access to add, delete, modify, and read data, as well as to cause service interruptions.

The vulnerability of the Imperative Web Server component of the Oracle Helidon library in the Oracle Fusion Middleware software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to add, delete, modify, and read data, as wel...

9.9CVSS5.9AI score0.00371EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/08/27 12:00 a.m.•16 views

The vulnerability of the Imperative Web Server component of the Oracle Helidon library in the Oracle Fusion Middleware software platform allows a perpetrator to gain access to add, delete, modify, and read data.

The vulnerability of the Imperative Web Server component of the Oracle libraries in the Oracle Fusion Middleware software suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to add, delete, modify, and read data...

9.4CVSS5.9AI score0.00425EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/08/27 12:00 a.m.•17 views

The vulnerability of the Imperative Web Server component in the Oracle Helidon library of the Oracle Fusion Middleware software platform allows a perpetrator to gain access to add, delete, modify, and read data, as well as to cause service interruptions.

The vulnerability of the Imperative Web Server component of the Oracle Helidon library in the Oracle Fusion Middleware software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to add, delete, modify, and read data, as wel...

9.7CVSS5.9AI score0.00455EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/08/27 12:00 a.m.•14 views

The vulnerability of the Imperative Web Server component in the Oracle Helidon library of the Oracle Fusion Middleware software platform allows a perpetrator to cause a service failure.

The vulnerability of the Imperative Web Server component in the Oracle Helidon library of the Oracle Fusion Middleware software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause service interruptions...

7.8CVSS5.9AI score0.00435EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/08/27 12:00 a.m.•15 views

The vulnerability of the Imperative Web Server component in the Oracle Helidon library of the Oracle Fusion Middleware software platform allows a perpetrator to gain access to add, delete, modify, and read data, as well as to cause service interruptions.

The vulnerability of the Imperative Web Server component of the Oracle libraries in the Oracle Fusion Middleware software suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to add, delete, modify, and read data, as well as to...

8.3CVSS5.9AI score0.00307EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/08/27 12:00 a.m.•12 views

The vulnerability of the Imperative Web Server component in the Oracle Helidon library of the Oracle Fusion Middleware software platform allows a perpetrator to cause a service failure.

The vulnerability of the Imperative Web Server component in the Oracle Helidon library of the Oracle Fusion Middleware software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause service interruptions...

7.8CVSS5.9AI score0.00435EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
•added 2026/08/27 12:00 a.m.•19 views

PT-2026-82786

A path traversal vulnerability exists in the built-in preview/development web server of Lektor 3.3.14 on Windows. An attacker with network access to the server can send a crafted HTTP request containing path traversal sequences to read arbitrary files accessible to the process, disclosing sensiti...

7.5CVSS5.5AI score0.00634EPSS
SaveExploits0References3
CVE
CVE
•added 2026/08/27 12:00 a.m.•19 views

CVE-2026-75418

A path traversal vulnerability affects the built-in preview/development web server of Lektor

7.5CVSS6AI score0.00634EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/08/27 12:00 a.m.•18 views

The vulnerability of the Imperative Web Server component of the Oracle Helidon library in the Oracle Fusion Middleware software platform allows a perpetrator to gain access to add, delete, modify, and read data.

The vulnerability of the Imperative Web Server component of the Oracle libraries in the Oracle Fusion Middleware software suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to add, delete, modify, and read data...

8.5CVSS5.9AI score0.00328EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/08/27 12:00 a.m.•16 views

The vulnerability of the Imperative Web Server component in the Oracle Helidon library of the Oracle Fusion Middleware software platform allows a perpetrator to cause a service failure and gain unauthorized access to protected information.

The vulnerability of the Imperative Web Server component of the Oracle Helidon library in the Oracle Fusion Middleware software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause service interruptions and gain unauthorized access ...

8.5CVSS5.9AI score0.00403EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/08/27 12:00 a.m.•14 views

The vulnerability of the Imperative Web Server component in the Oracle Helidon library of the Oracle Fusion Middleware software platform allows a perpetrator to cause a service failure.

The vulnerability of the Imperative Web Server component in the Oracle Helidon library of the Oracle Fusion Middleware software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause service interruptions...

7.8CVSS5.9AI score0.00435EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/08/27 12:00 a.m.•14 views

The vulnerability of the Imperative Web Server component of the Oracle Helidon library in the Oracle Fusion Middleware software platform allows a perpetrator to gain access to add, delete, modify, and read data.

The vulnerability of the Imperative Web Server component of the Oracle libraries in the Oracle Fusion Middleware software suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to add, delete, modify, and read data...

9.4CVSS5.9AI score0.00425EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/08/27 12:00 a.m.•11 views

The vulnerability of the Imperative Web Server component in the Oracle Helidon library of the Oracle Fusion Middleware software platform allows a perpetrator to gain access to add, delete, and modify data.

The vulnerability of the Imperative Web Server component of the Oracle Fusion Middleware library set is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to gain access to add, delete, and modify data...

8.6CVSS5.9AI score0.00354EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder