Lucene search
+L

90602 matches found

CVE
CVE
added 2026/06/10 3:2 a.m.37 views

CVE-2025-62851

The issue is CVE-2025-62851 affecting License Center. A path traversal vulnerability exists when an attacker who already has an administrator account can read contents of unexpected files or system data. The vulnerability details indicate exploitation requires administrator privileges and does no...

6.9CVSS5.5AI score0.00259EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2026/06/10 3:0 a.m.20 views

CVE-2026-39170

SemCms 5.0 is vulnerable to Cross Site Request Forgery CSRF via crafted POST request to /admin/semcmsuser.php...

6.3CVSS5.5AI score0.00107EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/06/10 2:59 a.m.16 views

CVE-2026-36725

A markdown based cross-site scripting XSS vulnerability in the /system/notice/create endpoint of FastapiAdmin v2.2.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the noticecontent parameter...

6.1CVSS5.6AI score0.00181EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/06/10 2:34 a.m.10 views

CVE-2025-62850 QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

5.1CVSS5.5AI score0.00331EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/10 2:34 a.m.36 views

CVE-2025-62850

CVE-2025-62850 is a NULL pointer dereference affecting multiple QNAP QuTS Hero OS versions. According to the sources, an attacker who gains an administrator account can trigger a DoS via a network-based exploit. Affected fixed versions are: QuTS hero h5.2.9.3410 build 20260214 and later; h5.3.4.3...

7.2CVSS5.5AI score0.00331EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2026/06/10 12:0 a.m.42 views

PT-2026-48553

Yoast Duplicate Post through 4.6 contains a cross-site request forgery vulnerability in the duplicate post dismiss notice handler, which verifies no nonce or capability. Attackers can trick any authenticated user into sending a request that sets the duplicate post show notice site option,...

5.1CVSS5.2AI score0.00104EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/06/10 12:0 a.m.20 views

PT-2026-48552

Copy & Delete Posts through 1.5.4 lets any plugin-enabled non-admin role invoke every operation in the cdp action handling AJAX handler. Attackers with an enabled role can delete posts or overwrite plugin settings via the f parameter, bypassing per-function capability checks...

8.1CVSS5.4AI score0.00248EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/06/10 12:0 a.m.29 views

PT-2026-48488

Name of the Vulnerable Software and Affected Versions PAN-OS versions 10.2 affected versions not specified PAN-OS versions 11.1 affected versions not specified PAN-OS versions 11.2 affected versions not specified PAN-OS versions 12.1 affected versions not specified Description A command injection...

9CVSS5.7AI score0.01339EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
added 2026/06/10 12:0 a.m.27 views

PT-2026-48448

A flaw was found in assisted-migration-agent. The application hardcodes insecure Transport Layer Security TLS connections when communicating with vCenter. This vulnerability allows a Man-in-the-Middle MITM attacker to intercept and harvest vCenter administrator credentials. This can lead to...

9.3CVSS5.4AI score0.00253EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/06/10 12:0 a.m.19 views

WordPress plugin Juicer 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

6.1CVSS5.3AI score0.00158EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/06/10 12:0 a.m.19 views

Shopware 安全漏洞

Shopware is a set of open-source e-commerce software developed by the German company Shopware. Versions prior to Shopware 6.6.10.18 and 6.7.10.1 contained security vulnerabilities. These vulnerabilities stemmed from scheduled attacks that could allow attackers to enumerate the usernames of...

3.7CVSS5.3AI score0.00223EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/06/10 12:0 a.m.35 views

Broadcom Symantec Endpoint Protection CleanWipe Removal Tool 权限许可和访问控制问题漏洞

The Broadcom CleanWipe Removal Tool is an enterprise-level security software uninstallation tool developed by Broadcom Corporation. Versions of the Broadcom CleanWipe Removal Tool prior to version 16.0.0.65 contained security vulnerabilities. These vulnerabilities could allow attackers with limit...

5.4CVSS5.8AI score0.00107EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/06/10 12:0 a.m.20 views

Apache Answer 授权问题漏洞

Apache Answer is a community platform of the Apache Foundation in the United States. Versions of Apache Answer 2.0.0 and earlier contained security vulnerabilities. These vulnerabilities were due to improper restrictions on security token allocation, which could allow administrator accounts to be...

7.2CVSS5.8AI score0.00448EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/06/10 12:0 a.m.40 views

PT-2026-48551

Juicer through 1.12.18 fails to escape remote feed API response fields before rendering them on the admin settings page. Attackers controlling the connected feed data can inject script that executes in an administrator's browser when the settings page loads...

6.1CVSS5.5AI score0.00158EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/06/10 12:0 a.m.19 views

PT-2026-48359

Name of the Vulnerable Software and Affected Versions License Center versions prior to 1.9.56 Description A path traversal issue allows a local attacker with administrator account privileges to read the contents of unexpected files or system data. Path traversal is a technique where an attacker...

6.9CVSS5.2AI score0.00259EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2026/06/10 12:0 a.m.26 views

SQLAlchemy Admin 安全漏洞

SQLAlchemy Admin is an open-source SQLAlchemy model management interface tool developed by Smithy HQ. Versions of SQLAlchemy Admin prior to 0.25.1 contained a security vulnerability. This vulnerability stemmed from the ajaxlookup endpoint in the application.py file, which bypassed the isaccessibl...

4.3CVSS5.3AI score0.00279EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/06/10 12:0 a.m.30 views

QNAP Systems QTS和QNAP Systems QuTS hero 操作系统命令注入漏洞

QNAP Systems QTS and QNAP Systems QuTS hero are software products with data storage and management functions developed by QNAP Systems, a company based in Taiwan, China. Both products have an operating system command injection vulnerability. This vulnerability arises from command injections, whic...

8.6CVSS6AI score0.01088EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/06/10 12:0 a.m.27 views

PT-2026-48497

In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.2512.13, 10.2.2510.15, 10.1.2507.23, and 9.3.2411.132, a low-privileged user that does not hold the "admin" or "power" Splunk roles could craft a classic dashboard that exfiltrate...

5.7CVSS5.4AI score0.00293EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/06/10 12:0 a.m.60 views

PT-2026-48532

Name of the Vulnerable Software and Affected Versions UpdraftPlus: WP Backup & Migration Plugin versions prior to 1.26.5 Description An authentication bypass exists in the UpdraftPlus Remote Communications V2::wp loaded function due to insufficient validation of the remote communications message...

8.1CVSS6.5AI score0.03578EPSS
SaveExploits3References19
Positive Technologies
Positive Technologies
added 2026/06/10 12:0 a.m.21 views

PT-2026-48456

Name of the Vulnerable Software and Affected Versions Apache Answer versions prior to 2.0.1 Description Improper Restriction of Security Token Assignment occurs when administrative tokens are not invalidated after an administrator account is suspended, deleted, or deactivated. This allows continu...

7.2CVSS5.9AI score0.00448EPSS
SaveExploits0References5
Rows per page
Query Builder