Lucene search
+L

592015 matches found

EUVD
EUVD
added 2 days ago11 views

EUVD-2026-55158

A flaw was found in 389 Directory Server. The CleanAllRUV and Abort CleanAllRUV replication-maintenance extended operations perform no authorization check, allowing an unauthenticated remote attacker to invoke them when nsslapd-allow-anonymous-access is enabled the default, or any authenticated...

6.5CVSS5.3AI score0.00416EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2 days ago41 views

CVE-2026-19404 389-ds-base: 389-ds-base: missing authorization allows anonymous clients to start or abort cleanallruv replication maintenance

A flaw was found in 389 Directory Server. The CleanAllRUV and Abort CleanAllRUV replication-maintenance extended operations perform no authorization check, allowing an unauthenticated remote attacker to invoke them when nsslapd-allow-anonymous-access is enabled the default, or any authenticated...

6.5CVSS0.00416EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2 days ago8 views

CVE-2026-19404

A flaw was found in 389 Directory Server. The CleanAllRUV and Abort CleanAllRUV replication-maintenance extended operations perform no authorization check, allowing an unauthenticated remote attacker to invoke them when nsslapd-allow-anonymous-access is enabled the default, or any authenticated...

6.5CVSS5.3AI score0.00416EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2 days ago13 views

CVE-2026-19404

A flaw was found in 389 Directory Server. The CleanAllRUV and Abort CleanAllRUV replication-maintenance extended operations perform no authorization check, allowing an unauthenticated remote attacker to invoke them when nsslapd-allow-anonymous-access is enabled the default, or any authenticated...

6.5CVSS5.5AI score0.00416EPSS
SaveExploits0References3
NVD
NVD
added 2 days ago7 views

CVE-2026-66409

DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak passwords for their Wi-Fi hotspot networks. The password may be analyzed and obtained to connect to the access point of an affected robot...

6.9CVSS0.00325EPSS
SaveExploits0References2
NVD
NVD
added 2 days ago9 views

CVE-2026-66408

The root accounts of DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak passwords. Physical access to an affected product may allow to obtain the password of the root account...

5.1CVSS0.00204EPSS
SaveExploits0References2
NVD
NVD
added 2 days ago6 views

CVE-2026-21084

Improper access control in SmartThings prior to version 1.8.47.24 allows local attackers to access sensitive information...

6.9CVSS0.00091EPSS
SaveExploits0References1
NVD
NVD
added 2 days ago6 views

CVE-2026-21075

Improper authorization in handler for custom URL scheme in My Galaxy prior to version 6.3 allows remote attackers to access sensitive information...

5.3CVSS0.0036EPSS
SaveExploits0References1
NVD
NVD
added 2 days ago5 views

CVE-2026-21081

Improper export of android application components in SamsungPassAutofill prior to version 5.2.10.x allows local attackers to access sensitive information. User interaction is required for triggering this vulnerability...

5.1CVSS0.00091EPSS
SaveExploits0References1
NVD
NVD
added 2 days ago6 views

CVE-2026-21076

Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information...

6.9CVSS0.00105EPSS
SaveExploits0References1
NVD
NVD
added 2 days ago7 views

CVE-2026-21071

Improper input validation in MPEG4 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory...

5.1CVSS0.00111EPSS
SaveExploits0References1
NVD
NVD
added 2 days ago8 views

CVE-2026-21064

Improper access control in Weaver prior to SMR Aug-2026 Release 1 allows local attackers to cause device inoperability...

7CVSS0.00113EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2 days ago6 views

CVE-2026-50045

A vulnerability in Unbound allows a remote attacker to bypass upstream amplification limits by querying a deeply nested name under a DNSSEC-signed parent. This triggers excessive outbound traffic per query, potentially causing a denial of service DoS. Mitigation Restrict recursive DNS access...

5.3CVSS5.3AI score0.00278EPSS
SaveExploits0References4
NVD
NVD
added 2 days ago8 views

CVE-2026-21060

Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows physical attackers to access data across multiple user profiles...

6.7CVSS0.00154EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2 days ago11 views

CVE-2026-66411

DEEBOT PRO M1 and DEEBOT PRO K1VAC incorrectly implement authentication algorithm in Websocket communications. An unauthenticated attacker may connect and operate the affected robot...

6.9CVSS7.4AI score0.0039EPSS
SaveExploits0References3
EUVD
EUVD
added 2 days ago9 views

EUVD-2026-55118

DEEBOT PRO M1 and DEEBOT PRO K1VAC incorrectly implement authentication algorithm in Websocket communications. An unauthenticated attacker may connect and operate the affected robot...

6.9CVSS7.4AI score0.0039EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2 days ago35 views

CVE-2026-66411

DEEBOT PRO M1 and DEEBOT PRO K1VAC incorrectly implement authentication algorithm in Websocket communications. An unauthenticated attacker may connect and operate the affected robot...

6.9CVSS0.0039EPSS
SaveExploits0References2
CVE
CVE
added 2 days ago35 views

CVE-2026-66411

The CVE-2026-66411 entry concerns DEEBOT PRO M1 and DEEBOT PRO K1VAC, where the WebSocket authentication implementation is incorrect (CWE-303). An unauthenticated attacker may connect to and operate the affected robot. Documented impact includes potential unauthorized control of the device, with ...

6.9CVSS7.4AI score0.0039EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2 days ago6 views

WordPress Everest Backup plugin <= 2.3.12 - SQL Injection vulnerability

SQL Injection vulnerability discovered by manop55555 in WordPress Plugin Everest Backup versions = 2.3.12...

5.8AI score
SaveExploits0Affected Software1
EUVD
EUVD
added 2 days ago9 views

EUVD-2026-55116

DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak passwords for their Wi-Fi hotspot networks. The password may be analyzed and obtained to connect to the access point of an affected robot...

6.9CVSS7.3AI score0.00325EPSS
SaveExploits0References2
Rows per page
Query Builder