Lucene search
+L

90612 matches found

Vulnrichment
Vulnrichment
added 2026/06/10 3:14 a.m.11 views

CVE-2026-24717 QTS, QuTS hero

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the...

5.1CVSS5.5AI score0.00392EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/10 3:14 a.m.52 views

CVE-2026-24717

CVE-2026-24717 describes a path traversal vulnerability affecting several QNAP operating system versions. The issue allows an administrator (needs admin privileges) to read unexpected files or system data through a path traversal flaw. Affected products include QTS and QuTS hero lines, with fixed...

6.5CVSS5.5AI score0.00392EPSS
SaveExploits0References1Affected Software2
EUVD
EUVD
added 2026/06/10 3:8 a.m.20 views

EUVD-2026-35975

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

5.1CVSS5.5AI score0.00331EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/06/10 3:6 a.m.55 views

CVE-2026-22893 QTS, QuTS hero

A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QTS...

8.6CVSS0.01088EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/06/10 3:5 a.m.13 views

CVE-2025-66280 QTS, QuTS hero

An integer overflow or wraparound vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the...

5.1CVSS5.5AI score0.00435EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/06/10 3:5 a.m.15 views

EUVD-2025-210100

A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QTS...

8.6CVSS6AI score0.01049EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/10 3:4 a.m.66 views

CVE-2025-66273

CVE-2025-66273 is a command-injection vulnerability affecting several QNAP OS versions. If an attacker gains an administrator account, they can execute arbitrary commands. Fixed in QTS 5.2.9.3410 build 20260214 and later, QuTS hero h5.2.9.3410 build 20260214 and later, QuTS hero h5.3.4.3500 build...

8.6CVSS6AI score0.01049EPSS
SaveExploits0References1Affected Software2
Vulnrichment
Vulnrichment
added 2026/06/10 3:4 a.m.17 views

CVE-2025-66273 QTS, QuTS hero

A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QTS...

8.6CVSS6AI score0.01049EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/06/10 3:2 a.m.11 views

CVE-2025-62851 License Center

A path traversal vulnerability has been reported to affect License Center. If a local attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: License...

6.9CVSS5.4AI score0.00259EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/06/10 3:2 a.m.47 views

CVE-2025-62851 License Center

A path traversal vulnerability has been reported to affect License Center. If a local attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: License...

6.9CVSS0.00259EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/10 3:2 a.m.37 views

CVE-2025-62851

The issue is CVE-2025-62851 affecting License Center. A path traversal vulnerability exists when an attacker who already has an administrator account can read contents of unexpected files or system data. The vulnerability details indicate exploitation requires administrator privileges and does no...

6.9CVSS5.5AI score0.00259EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2026/06/10 3:0 a.m.20 views

CVE-2026-39170

SemCms 5.0 is vulnerable to Cross Site Request Forgery CSRF via crafted POST request to /admin/semcmsuser.php...

6.3CVSS5.5AI score0.00107EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/06/10 2:59 a.m.16 views

CVE-2026-36725

A markdown based cross-site scripting XSS vulnerability in the /system/notice/create endpoint of FastapiAdmin v2.2.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the noticecontent parameter...

6.1CVSS5.6AI score0.00181EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/06/10 2:34 a.m.10 views

CVE-2025-62850 QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

5.1CVSS5.5AI score0.00331EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/10 2:34 a.m.36 views

CVE-2025-62850

CVE-2025-62850 is a NULL pointer dereference affecting multiple QNAP QuTS Hero OS versions. According to the sources, an attacker who gains an administrator account can trigger a DoS via a network-based exploit. Affected fixed versions are: QuTS hero h5.2.9.3410 build 20260214 and later; h5.3.4.3...

7.2CVSS5.5AI score0.00331EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2026/06/10 12:0 a.m.42 views

PT-2026-48553

Yoast Duplicate Post through 4.6 contains a cross-site request forgery vulnerability in the duplicate post dismiss notice handler, which verifies no nonce or capability. Attackers can trick any authenticated user into sending a request that sets the duplicate post show notice site option,...

5.1CVSS5.2AI score0.00104EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/06/10 12:0 a.m.20 views

PT-2026-48552

Copy & Delete Posts through 1.5.4 lets any plugin-enabled non-admin role invoke every operation in the cdp action handling AJAX handler. Attackers with an enabled role can delete posts or overwrite plugin settings via the f parameter, bypassing per-function capability checks...

8.1CVSS5.4AI score0.00248EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/06/10 12:0 a.m.29 views

PT-2026-48488

Name of the Vulnerable Software and Affected Versions PAN-OS versions 10.2 affected versions not specified PAN-OS versions 11.1 affected versions not specified PAN-OS versions 11.2 affected versions not specified PAN-OS versions 12.1 affected versions not specified Description A command injection...

9CVSS5.7AI score0.01339EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
added 2026/06/10 12:0 a.m.27 views

PT-2026-48448

A flaw was found in assisted-migration-agent. The application hardcodes insecure Transport Layer Security TLS connections when communicating with vCenter. This vulnerability allows a Man-in-the-Middle MITM attacker to intercept and harvest vCenter administrator credentials. This can lead to...

9.3CVSS5.4AI score0.00253EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/06/10 12:0 a.m.19 views

WordPress plugin Juicer 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

6.1CVSS5.3AI score0.00158EPSS
SaveExploits0References1
Rows per page
Query Builder