Lucene search
+L

4268 matches found

ATTACKERKB
ATTACKERKB
added 2026/06/05 6:32 p.m.8 views

CVE-2026-46511

HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0, an attack chain utilizing Stored XSS alongside dynamic token exposure in the /system/api/connectionSettings endpoint allows an authenticated attacker to perform a complete cross-tenant account takeover...

8.7CVSS5.4AI score0.00275EPSS
SaveExploits0References2Affected Software2
VulnCheck KEV
VulnCheck KEV
added 2026/06/05 12:0 a.m.55 views

VulnCheck KEV: CVE-2026-31816

Budibase is a low code platform for creating internal tools, workflows, and admin panels. In 3.31.4 and earlier, the Budibase server's authorized middleware that protects every server-side API endpoint can be completely bypassed by appending a webhook path pattern to the query string of any...

9.1CVSS5.6AI score0.15339EPSS
SaveIn wildExploits2References6
Wolfi
Wolfi
added 2026/06/04 1:48 p.m.25 views

GHSA-H524-452V-82P9 vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, redka, flux-image-reflector-controller, spicedb-operator, argocd-image-updater, cloudnative-pg, crossplane-provider-aws-ec2, kubernetes, zarf, amazon-cloudwatch-agent-operator, crossplane-provider-aws-sns, helm, runc, bento, kapp-controller,...

5.4AI score
SaveExploits0
Wolfi
Wolfi
added 2026/06/04 1:48 p.m.16 views

CVE-2026-42504 vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, redka, flux-image-reflector-controller, spicedb-operator, argocd-image-updater, cloudnative-pg, crossplane-provider-aws-ec2, kubernetes, zarf, amazon-cloudwatch-agent-operator, crossplane-provider-aws-sns, helm, runc, bento, kapp-controller,...

7.5CVSS6.9AI score0.0056EPSS
SaveExploits0
Wolfi
Wolfi
added 2026/06/04 1:48 p.m.16 views

GHSA-H3GM-Q7M7-MP28 vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, redka, knative-serving, flux-image-reflector-controller, aws-flb-kinesis, harbor-scanner-trivy, kube-logging-operator-custom-runner, argocd-image-updater, spicedb-operator, cloudnative-pg, crossplane-provider-aws-ec2, kubernetes,...

5.4AI score
SaveExploits0
Wolfi
Wolfi
added 2026/06/04 1:48 p.m.19 views

CVE-2026-27145 vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, redka, knative-serving, flux-image-reflector-controller, aws-flb-kinesis, harbor-scanner-trivy, kube-logging-operator-custom-runner, argocd-image-updater, spicedb-operator, cloudnative-pg, crossplane-provider-aws-ec2, kubernetes,...

7.5CVSS7.2AI score0.00591EPSS
SaveExploits0
Wolfi
Wolfi
added 2026/06/04 1:48 p.m.17 views

CVE-2026-42507 vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, redka, knative-serving, flux-image-reflector-controller, aws-flb-kinesis, harbor-scanner-trivy, kube-logging-operator-custom-runner, argocd-image-updater, spicedb-operator, cloudnative-pg, crossplane-provider-aws-ec2, kubernetes,...

5.3CVSS6.7AI score0.0037EPSS
SaveExploits0
Wolfi
Wolfi
added 2026/06/04 1:48 p.m.14 views

GHSA-4279-Q6MJ-392R vulnerabilities

Vulnerabilities for packages: grafana-rollout-operator, redka, knative-serving, flux-image-reflector-controller, aws-flb-kinesis, harbor-scanner-trivy, kube-logging-operator-custom-runner, argocd-image-updater, spicedb-operator, cloudnative-pg, crossplane-provider-aws-ec2, kubernetes,...

5.4AI score
SaveExploits0
Chainguard
Chainguard
added 2026/06/04 1:20 p.m.14 views

CVE-2026-42504 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-lightsail, aws-iam-authenticator-fips, istio, vault-secrets-operator, crossplane-provider-aws-memorydb-fips, nrdot-collector, crossplane-provider-aws-datasync-fips, crossplane-provider-aws-kafka, policy-controller, kro,...

7.5CVSS6.9AI score0.0056EPSS
SaveExploits0
Chainguard
Chainguard
added 2026/06/04 1:20 p.m.17 views

GHSA-H524-452V-82P9 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-lightsail, aws-iam-authenticator-fips, istio, vault-secrets-operator, crossplane-provider-aws-memorydb-fips, nrdot-collector, crossplane-provider-aws-datasync-fips, crossplane-provider-aws-kafka, policy-controller, kro,...

5.4AI score
SaveExploits0
Chainguard
Chainguard
added 2026/06/04 1:20 p.m.14 views

CVE-2026-27145 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-lightsail, node-problem-detector, aws-iam-authenticator-fips, istio, mc-fips, vault-secrets-operator, crossplane-provider-aws-memorydb-fips, nrdot-collector, milvus, crossplane-provider-aws-datasync-fips, opa-fips-envoy, victorialogs,...

7.5CVSS7.2AI score0.00591EPSS
SaveExploits0
Chainguard
Chainguard
added 2026/06/04 1:20 p.m.14 views

CVE-2026-42507 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-lightsail, node-problem-detector, aws-iam-authenticator-fips, istio, mc-fips, vault-secrets-operator, crossplane-provider-aws-memorydb-fips, nrdot-collector, milvus, crossplane-provider-aws-datasync-fips, opa-fips-envoy, victorialogs,...

5.3CVSS6.7AI score0.0037EPSS
SaveExploits0
Chainguard
Chainguard
added 2026/06/04 1:20 p.m.14 views

GHSA-H3GM-Q7M7-MP28 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-lightsail, node-problem-detector, aws-iam-authenticator-fips, istio, mc-fips, vault-secrets-operator, crossplane-provider-aws-memorydb-fips, nrdot-collector, milvus, crossplane-provider-aws-datasync-fips, opa-fips-envoy, victorialogs,...

5.4AI score
SaveExploits0
Chainguard
Chainguard
added 2026/06/04 1:20 p.m.21 views

GHSA-4279-Q6MJ-392R vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-lightsail, node-problem-detector, aws-iam-authenticator-fips, istio, mc-fips, vault-secrets-operator, crossplane-provider-aws-memorydb-fips, nrdot-collector, milvus, crossplane-provider-aws-datasync-fips, opa-fips-envoy, victorialogs,...

5.4AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/06/04 12:0 a.m.33 views

PT-2026-46853

Summary plugin/AuthorizeNet/processPayment.json.php credits the logged-in user's wallet based only on the attacker-controlled amount POST parameter. The endpoint contains a TODO for real Authorize.Net charging, hardcodes $paymentSuccess = true, and then calls YPTWallet::addBalance without...

7.1CVSS6AI score0.0012EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2026/06/03 4:2 p.m.13 views

CVE-2026-10273

A vulnerability was found in php-censor up to 2.1.6. This affects an unknown function of the file src/Model/Build/GitBuild.php of the component Webhook Endpoint. Performing a manipulation of the argument commitId results in os command injection. The attack can be initiated remotely. The exploit h...

7.5CVSS5.4AI score0.01367EPSS
SaveExploits0References1
NVD
NVD
added 2026/06/02 8:16 p.m.12 views

CVE-2026-10617

A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.11.3. This affects the function resolveAuth of the file internal/http/auth.go of the component Webhook Verification Handler. The manipulation leads to missing authentication. Remote exploitation of the attack is possibl...

7.5CVSS0.00399EPSS
SaveExploits0References6
OSV
OSV
added 2026/06/02 7:0 p.m.9 views

CVE-2026-10617 nextlevelbuilder GoClaw Webhook Verification auth.go resolveAuth missing authentication

A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.11.3. This affects the function resolveAuth of the file internal/http/auth.go of the component Webhook Verification Handler. The manipulation leads to missing authentication. Remote exploitation of the attack is possibl...

6.9CVSS6.3AI score
SaveExploits0References8
Vulnrichment
Vulnrichment
added 2026/06/02 7:0 p.m.13 views

CVE-2026-10617 nextlevelbuilder GoClaw Webhook Verification auth.go resolveAuth missing authentication

A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.11.3. This affects the function resolveAuth of the file internal/http/auth.go of the component Webhook Verification Handler. The manipulation leads to missing authentication. Remote exploitation of the attack is possibl...

7.5CVSS6.5AI score0.00399EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/06/02 7:0 p.m.12 views

EUVD-2026-34009

A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.11.3. This affects the function resolveAuth of the file internal/http/auth.go of the component Webhook Verification Handler. The manipulation leads to missing authentication. Remote exploitation of the attack is possibl...

7.5CVSS6.5AI score0.00399EPSS
SaveExploits0References6
Rows per page
Query Builder