Lucene search
+L

59689 matches found

Vulnrichment
Vulnrichment
added 2026/07/20 6:14 p.m.7 views

CVE-2026-63107 LimeSurvey SSRF via REST API Survey Template Host Header

LimeSurvey through 6.17.10 and 7.0.4 contains a server-side request forgery vulnerability in the REST API survey template endpoint that allows authenticated users to cause the server to issue arbitrary HTTP requests by supplying a manipulated Host header. Attackers can exploit the unsanitized use...

7.7CVSS5.5AI score0.00209EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/20 6:14 p.m.7 views

CVE-2026-63107 LimeSurvey SSRF via REST API Survey Template Host Header

LimeSurvey through 6.17.10 and 7.0.4 contains a server-side request forgery vulnerability in the REST API survey template endpoint that allows authenticated users to cause the server to issue arbitrary HTTP requests by supplying a manipulated Host header. Attackers can exploit the unsanitized use...

6.3CVSS5.5AI score
SaveExploits0References5
EUVD
EUVD
added 2026/07/20 6:14 p.m.9 views

EUVD-2026-46061

LimeSurvey through 6.17.10 and 7.0.4 contains a server-side request forgery vulnerability in the REST API survey template endpoint that allows authenticated users to cause the server to issue arbitrary HTTP requests by supplying a manipulated Host header. Attackers can exploit the unsanitized use...

7.7CVSS5.5AI score0.00209EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/20 6:14 p.m.25 views

CVE-2026-63107

LimeSurvey (versions up to 6.17.10 and 7.0.4) contains a server-side request forgery in the REST API survey template endpoint. The vulnerability arises from unsanitized use of the HTTP Host header in getTemplateData(), allowing authenticated users to cause the server to issue arbitrary HTTP reque...

7.7CVSS5.6AI score0.00209EPSS
SaveExploits0References2
NVD
NVD
added 2026/07/20 5:17 p.m.10 views

CVE-2026-32825

dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framework rules, before and including version 25.07.3, the application accepts unlimited password guesses against both the...

7.3CVSS0.00296EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/20 4:44 p.m.8 views

CVE-2026-47276

CVE-2026-47276 affects NanoMQ up to version 0.24.11: a NULL pointer dereference in properties_parse() when processing user_properties, allowing an authenticated attacker to crash the broker by sending a crafted POST to /api/v4/mqtt/publish with user_properties as a JSON array (strlen on a NULL it...

6.5CVSS5.4AI score0.00235EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/20 4:17 p.m.8 views

CVE-2026-48824

Mailpit is an email testing tool and API for developers. Prior to version 1.30.1, the fix for GHSA-fpxj-m5q8-fphw CVE-2026-45710, "Mailpit: Set a default 50MB p/m limit to prevent DoS via unlimited SMTP DATA and /api/v1/send body sizes" wrapped only POST /api/v1/send with http.MaxBytesReader. The...

5.3CVSS0.00421EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2026/07/20 4:15 p.m.33 views

CVE-2026-32825 dataCycle No Brute-Force Protection On Web And API Login Endpoints

dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framework rules, before and including version 25.07.3, the application accepts unlimited password guesses against both the...

7.3CVSS0.00296EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/20 3:54 p.m.9 views

CVE-2026-63429

HeyForm is an open-source form builder with a vulnerable endpoint: before 3.0.0-rc.9, POST /api/upload has no authentication, guards, form-context validation, openToken requirement, or session cookie check. Any anonymous internet user can upload various file types (up to 10 MB) and receive a perm...

8.6CVSS5.4AI score0.00298EPSS
SaveExploits0References2
Ubuntu
Ubuntu
added 2026/07/20 3:45 p.m.16 views

USN-8568-1: Linux kernel (OEM) vulnerabilities

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. CVE-2025-54518 Several security issues...

9.8CVSS7.1AI score0.03234EPSS
SaveExploits9
CVE
CVE
added 2026/07/20 3:43 p.m.18 views

CVE-2026-45797

CVE-2026-45797 affects HeyForm (open-source form builder). Before version 3.0.0-rc.7, the /api/upload endpoint allowed unauthenticated file uploads, including SVGs. Uploaded SVGs are stored in the static assets directory and served with Content-Type: image/svg+xml by Express’s serve-static middle...

6.4CVSS5AI score0.00404EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/07/20 3:43 p.m.37 views

CVE-2026-45797 HeyForm Vulnerable to Stored XSS via Unauthenticated SVG File Upload

HeyForm is an open-source form builder. Prior to version 3.0.0-rc.7, the /api/upload endpoint allows unauthenticated file uploads including SVG files. Uploaded SVGs are stored in the static assets directory and served with Content-Type: image/svg+xml by Express's serve-static middleware, allowing...

6.4CVSS0.00404EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/20 3:43 p.m.5 views

CVE-2026-45797 HeyForm Vulnerable to Stored XSS via Unauthenticated SVG File Upload

HeyForm is an open-source form builder. Prior to version 3.0.0-rc.7, the /api/upload endpoint allows unauthenticated file uploads including SVG files. Uploaded SVGs are stored in the static assets directory and served with Content-Type: image/svg+xml by Express's serve-static middleware, allowing...

6.4CVSS4.9AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/07/20 3:31 p.m.7 views

CVE-2026-63102 rConfig Core < 8.2.8 Privilege Escalation via Users API role field

rConfig Core before 8.2.8 contains a privilege escalation vulnerability that allows authenticated users to assign arbitrary roles to any account by submitting an unvalidated role field through the Users API during user creation or profile updates. Attackers can exploit the missing allowlist...

5.4CVSS5.5AI score0.00246EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/07/20 3:31 p.m.37 views

CVE-2026-63102 rConfig Core < 8.2.8 Privilege Escalation via Users API role field

rConfig Core before 8.2.8 contains a privilege escalation vulnerability that allows authenticated users to assign arbitrary roles to any account by submitting an unvalidated role field through the Users API during user creation or profile updates. Attackers can exploit the missing allowlist...

5.4CVSS0.00246EPSS
SaveExploits0References4
OSV
OSV
added 2026/07/20 3:26 p.m.7 views

CVE-2026-28220 Wazuh cluster DAPI arbitrary callable deserialization and RBAC context injection allow a cluster peer to execute privileged functions on the master node

Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to version 4.14.5, issues in the Cluster Distributed API DAPI handling allow a cluster peer, or any actor able to authenticate to the cluster channel using the shared cluster key, to make the maste...

8.4CVSS5.8AI score
SaveExploits0References3
CVE
CVE
added 2026/07/20 3:26 p.m.36 views

CVE-2026-28220

CVE-2026-28220 concerns the Wazuh Cluster Distributed API (DAPI). Before version 4.14.5, the master node could be coerced to deserialize an attacker-controlled callable and run it under an attacker-controlled RBAC context due to a permissive as_wazuh_object() deserialization and client-supplied r...

9.1CVSS5.8AI score0.00396EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2026/07/20 3:24 p.m.7 views

USN-8566-1 linux, linux-gcp, linux-gke, linux-realtime vulnerabilities

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. CVE-2025-54518 Several security issues...

9.8CVSS7.1AI score0.03234EPSS
SaveExploits9References445
NVD
NVD
added 2026/07/20 3:16 p.m.7 views

CVE-2026-62183

Improper Privilege Management vulnerability in Apache Syncope. When: the all-Java user workflow adapter is configured, or the Flowable user workflow adapter is configured, bearing a BPMN definition not requiring admin approval for user self registration of self update requests the following...

9.8CVSS0.00411EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/07/20 3:2 p.m.7 views

CVE-2026-48824 Mailpit: Sibling-endpoint memory-exhaustion DoS via unbounded JSON body on /api/v1/messages, /api/v1/tags, and /api/v1/message/{id}/release (incomplete fix of GHSA-fpxj-m5q8-fphw)

Mailpit is an email testing tool and API for developers. Prior to version 1.30.1, the fix for GHSA-fpxj-m5q8-fphw CVE-2026-45710, "Mailpit: Set a default 50MB p/m limit to prevent DoS via unlimited SMTP DATA and /api/v1/send body sizes" wrapped only POST /api/v1/send with http.MaxBytesReader. The...

5.3CVSS5.4AI score0.00421EPSS
SaveExploits1References2
Rows per page
Query Builder