Lucene search
+L

4269 matches found

EUVD
EUVD
added 2026/06/05 6:32 p.m.15 views

EUVD-2026-34890

HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0, an attack chain utilizing Stored XSS alongside dynamic token exposure in the /system/api/connectionSettings endpoint allows an authenticated attacker to perform a complete cross-tenant account takeover...

8.7CVSS5.4AI score0.00275EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/06/05 6:32 p.m.8 views

CVE-2026-46511

HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0, an attack chain utilizing Stored XSS alongside dynamic token exposure in the /system/api/connectionSettings endpoint allows an authenticated attacker to perform a complete cross-tenant account takeover...

8.7CVSS5.4AI score0.00275EPSS
SaveExploits0References2Affected Software2
VulnCheck KEV
VulnCheck KEV
added 2026/06/05 12:0 a.m.55 views

VulnCheck KEV: CVE-2026-31816

Budibase is a low code platform for creating internal tools, workflows, and admin panels. In 3.31.4 and earlier, the Budibase server's authorized middleware that protects every server-side API endpoint can be completely bypassed by appending a webhook path pattern to the query string of any...

9.1CVSS5.6AI score0.15339EPSS
SaveIn wildExploits2References6
Wolfi
Wolfi
added 2026/06/04 1:48 p.m.25 views

GHSA-H524-452V-82P9 vulnerabilities

Vulnerabilities for packages: flannel, hubble-ui, kube-state-metrics, cluster-api, sealed-secrets, k3s, local-path-provisioner, crossplane-provider-aws-ec2, cloud-provider-azure, go, crossplane-provider-aws-cloudfront, docker-cli-buildx, grafana-rollout-operator, bento, fuse-overlayfs-snapshotter...

5.2AI score
SaveExploits0
Wolfi
Wolfi
added 2026/06/04 1:48 p.m.16 views

CVE-2026-42504 vulnerabilities

Vulnerabilities for packages: flannel, hubble-ui, kube-state-metrics, cluster-api, sealed-secrets, k3s, local-path-provisioner, crossplane-provider-aws-ec2, cloud-provider-azure, go, crossplane-provider-aws-cloudfront, docker-cli-buildx, grafana-rollout-operator, bento, fuse-overlayfs-snapshotter...

7.5CVSS7AI score0.0056EPSS
SaveExploits0
Wolfi
Wolfi
added 2026/06/04 1:48 p.m.16 views

GHSA-H3GM-Q7M7-MP28 vulnerabilities

Vulnerabilities for packages: flannel, hubble-ui, kube-state-metrics, cluster-api, sealed-secrets, sops, k3s, local-path-provisioner, crossplane-provider-aws-ec2, cloud-provider-azure, go, golangci-lint, crossplane-provider-aws-cloudfront, docker-cli-buildx, grafana-rollout-operator, kaniko,...

5.2AI score
SaveExploits0
Wolfi
Wolfi
added 2026/06/04 1:48 p.m.19 views

CVE-2026-27145 vulnerabilities

Vulnerabilities for packages: flannel, hubble-ui, kube-state-metrics, cluster-api, sealed-secrets, sops, k3s, local-path-provisioner, crossplane-provider-aws-ec2, cloud-provider-azure, go, golangci-lint, crossplane-provider-aws-cloudfront, docker-cli-buildx, grafana-rollout-operator, kaniko,...

7.5CVSS7.5AI score0.00591EPSS
SaveExploits0
Wolfi
Wolfi
added 2026/06/04 1:48 p.m.17 views

CVE-2026-42507 vulnerabilities

Vulnerabilities for packages: flannel, hubble-ui, kube-state-metrics, cluster-api, sealed-secrets, sops, k3s, local-path-provisioner, crossplane-provider-aws-ec2, cloud-provider-azure, go, golangci-lint, crossplane-provider-aws-cloudfront, docker-cli-buildx, grafana-rollout-operator, kaniko,...

5.3CVSS6.5AI score0.0037EPSS
SaveExploits0
Wolfi
Wolfi
added 2026/06/04 1:48 p.m.14 views

GHSA-4279-Q6MJ-392R vulnerabilities

Vulnerabilities for packages: flannel, hubble-ui, kube-state-metrics, cluster-api, sealed-secrets, sops, k3s, local-path-provisioner, crossplane-provider-aws-ec2, cloud-provider-azure, go, golangci-lint, crossplane-provider-aws-cloudfront, docker-cli-buildx, grafana-rollout-operator, kaniko,...

5.2AI score
SaveExploits0
Chainguard
Chainguard
added 2026/06/04 1:20 p.m.14 views

CVE-2026-42504 vulnerabilities

Vulnerabilities for packages: newrelic-infra-operator, crossplane-provider-aws-acm, etcd-fips, kapp-controller, crossplane-provider-aws-lightsail, flux-fips, crossplane-provider-aws-organizations, metrics-server, crossplane-fips, cloud-provider-gcp-cloud-controller-manager-fips,...

7.5CVSS7AI score0.0056EPSS
SaveExploits0
Chainguard
Chainguard
added 2026/06/04 1:20 p.m.17 views

GHSA-H524-452V-82P9 vulnerabilities

Vulnerabilities for packages: newrelic-infra-operator, crossplane-provider-aws-acm, etcd-fips, kapp-controller, crossplane-provider-aws-lightsail, flux-fips, crossplane-provider-aws-organizations, metrics-server, crossplane-fips, cloud-provider-gcp-cloud-controller-manager-fips,...

5.2AI score
SaveExploits0
Chainguard
Chainguard
added 2026/06/04 1:20 p.m.14 views

CVE-2026-42507 vulnerabilities

Vulnerabilities for packages: newrelic-infra-operator, crossplane-provider-aws-acm, etcd-fips, kapp-controller, chronyexporter-fips, crossplane-provider-aws-lightsail, flux-fips, crossplane-provider-aws-organizations, metrics-server, crossplane-fips, manifest-tool,...

5.3CVSS6.5AI score0.0037EPSS
SaveExploits0
Chainguard
Chainguard
added 2026/06/04 1:20 p.m.14 views

CVE-2026-27145 vulnerabilities

Vulnerabilities for packages: volsync-fips, newrelic-infra-operator, crossplane-provider-aws-acm, etcd-fips, kapp-controller, chronyexporter-fips, crossplane-provider-aws-lightsail, flux-fips, crossplane-provider-aws-organizations, metrics-server, crossplane-fips, manifest-tool,...

7.5CVSS7.5AI score0.00591EPSS
SaveExploits0
Chainguard
Chainguard
added 2026/06/04 1:20 p.m.14 views

GHSA-H3GM-Q7M7-MP28 vulnerabilities

Vulnerabilities for packages: newrelic-infra-operator, crossplane-provider-aws-acm, etcd-fips, kapp-controller, chronyexporter-fips, crossplane-provider-aws-lightsail, flux-fips, crossplane-provider-aws-organizations, metrics-server, crossplane-fips, manifest-tool,...

5.2AI score
SaveExploits0
Chainguard
Chainguard
added 2026/06/04 1:20 p.m.21 views

GHSA-4279-Q6MJ-392R vulnerabilities

Vulnerabilities for packages: volsync-fips, newrelic-infra-operator, crossplane-provider-aws-acm, etcd-fips, kapp-controller, chronyexporter-fips, crossplane-provider-aws-lightsail, flux-fips, crossplane-provider-aws-organizations, metrics-server, crossplane-fips, manifest-tool,...

5.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/06/04 12:0 a.m.33 views

PT-2026-46853

Summary plugin/AuthorizeNet/processPayment.json.php credits the logged-in user's wallet based only on the attacker-controlled amount POST parameter. The endpoint contains a TODO for real Authorize.Net charging, hardcodes $paymentSuccess = true, and then calls YPTWallet::addBalance without...

7.1CVSS6AI score0.0012EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2026/06/03 4:2 p.m.13 views

CVE-2026-10273

A vulnerability was found in php-censor up to 2.1.6. This affects an unknown function of the file src/Model/Build/GitBuild.php of the component Webhook Endpoint. Performing a manipulation of the argument commitId results in os command injection. The attack can be initiated remotely. The exploit h...

7.5CVSS5.4AI score0.01367EPSS
SaveExploits0References1
NVD
NVD
added 2026/06/02 8:16 p.m.12 views

CVE-2026-10617

A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.11.3. This affects the function resolveAuth of the file internal/http/auth.go of the component Webhook Verification Handler. The manipulation leads to missing authentication. Remote exploitation of the attack is possibl...

7.5CVSS0.00399EPSS
SaveExploits0References6
OSV
OSV
added 2026/06/02 7:0 p.m.9 views

CVE-2026-10617 nextlevelbuilder GoClaw Webhook Verification auth.go resolveAuth missing authentication

A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.11.3. This affects the function resolveAuth of the file internal/http/auth.go of the component Webhook Verification Handler. The manipulation leads to missing authentication. Remote exploitation of the attack is possibl...

6.9CVSS6.3AI score
SaveExploits0References8
Vulnrichment
Vulnrichment
added 2026/06/02 7:0 p.m.13 views

CVE-2026-10617 nextlevelbuilder GoClaw Webhook Verification auth.go resolveAuth missing authentication

A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.11.3. This affects the function resolveAuth of the file internal/http/auth.go of the component Webhook Verification Handler. The manipulation leads to missing authentication. Remote exploitation of the attack is possibl...

7.5CVSS6.5AI score0.00399EPSS
SaveExploits0References6
Rows per page
Query Builder