Lucene search
+L

3696 matches found

Vulnrichment
Vulnrichment
added 2026/05/24 10:45 a.m.10 views

CVE-2026-9376 JPress UCenter Article Submission Endpoint doWriteSave improper authorization

A vulnerability was determined in JPress up to 1.0.3. The affected element is an unknown function of the file /ucenter/article/doWriteSave of the component UCenter Article Submission Endpoint. Executing a manipulation of the argument id/userId can lead to improper authorization. The attack may be...

6.5CVSS6.2AI score0.00252EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/05/24 10:45 a.m.25 views

CVE-2026-9376 JPress UCenter Article Submission Endpoint doWriteSave improper authorization

A vulnerability was determined in JPress up to 1.0.3. The affected element is an unknown function of the file /ucenter/article/doWriteSave of the component UCenter Article Submission Endpoint. Executing a manipulation of the argument id/userId can lead to improper authorization. The attack may be...

6.5CVSS0.00252EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/05/24 10:45 a.m.13 views

EUVD-2026-31590

A vulnerability was determined in JPress up to 1.0.3. The affected element is an unknown function of the file /ucenter/article/doWriteSave of the component UCenter Article Submission Endpoint. Executing a manipulation of the argument id/userId can lead to improper authorization. The attack may be...

6.5CVSS6.2AI score0.00252EPSS
SaveExploits0References4
OSV
OSV
added 2026/05/24 10:45 a.m.4 views

CVE-2026-9376 JPress UCenter Article Submission Endpoint doWriteSave improper authorization

A vulnerability was determined in JPress up to 1.0.3. The affected element is an unknown function of the file /ucenter/article/doWriteSave of the component UCenter Article Submission Endpoint. Executing a manipulation of the argument id/userId can lead to improper authorization. The attack may be...

5.3CVSS6.1AI score0.00252EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2026/05/24 12:0 a.m.13 views

JPress 授权问题漏洞

JPress is a blog platform developed using the Java language by the JPress team. Versions of JPress 1.0.3 and earlier contained an authorization vulnerability. This vulnerability stemmed from improper handling of the parameter id/userId in the UCenter Article Submission Endpoint component, which...

6.5CVSS6.7AI score0.00252EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/05/24 12:0 a.m.24 views

PT-2026-42936

A vulnerability was determined in JPress up to 1.0.3. The affected element is an unknown function of the file /ucenter/article/doWriteSave of the component UCenter Article Submission Endpoint. Executing a manipulation of the argument id/userId can lead to improper authorization. The attack may be...

6.5CVSS6.2AI score0.00252EPSS
SaveExploits0References4
Microsoft Security Update
Microsoft Security Update
added 2026/05/12 5:0 p.m.316 views

2026-05 Cumulative Update for Windows Server 2022 Datacenter: Azure Edition for x64-based Systems (KB5087545)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

5.8AI score
SaveExploits0
Circl
Circl
added 2026/05/12 3:52 p.m.14 views

CVE-2026-34329

creationtimestamp| type| source ---|---|--- 2026-05-12 15:52:42+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0141 2026-05-12 16:38:43+00:00| seen| https://www.thezdi.com/blog/2026/5/12/the-may-2026-security-update-review 2026-05-13 01:08:48+00:00| seen|...

8.8CVSS5.7AI score0.00461EPSS
SaveExploits0References4
Circl
Circl
added 2026/05/12 10:21 a.m.13 views

CVE-2026-28914

creationtimestamp| type| source ---|---|--- 2026-05-12 10:21:51+00:00| seen| https://www.thezdi.com/blog/2026/5/12/the-apple-macos-security-update-review 2026-05-12 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260513 2026-05-26...

5.5CVSS5.7AI score0.00136EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/05/11 8:25 p.m.13 views

CVE-2026-42287

Emlog is an open source website building system. Prior to version 2.6.11, direct SQL injection in article creation and update functions allows attackers to execute arbitrary SQL commands, potentially leading to complete database compromise, data theft, or system destruction. This issue has been...

10CVSS6.1AI score0.00249EPSS
SaveExploits0References1
NVD
NVD
added 2026/05/11 6:16 p.m.12 views

CVE-2026-34094

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Page/Article.Php. This issue affects MediaWiki: from before 1.43.7, 1.44.4, 1.45.2...

3.8CVSS0.0017EPSS
SaveExploits0References1
OSV
OSV
added 2026/05/11 6:16 p.m.6 views

CVE-2026-34094

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Page/Article.Php. This issue affects MediaWiki: from before 1.43.7, 1.44.4, 1.45.2...

3.8CVSS5.9AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/11 4:50 p.m.10 views

CVE-2026-34094

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/Page/Article.Php. This issue affects MediaWiki: from before 1.43.7, 1.44.4, 1.45.2...

2CVSS5.8AI score0.0017EPSS
SaveExploits0References2
NVD
NVD
added 2026/05/08 10:16 p.m.21 views

CVE-2026-42287

Emlog is an open source website building system. Prior to version 2.6.11, direct SQL injection in article creation and update functions allows attackers to execute arbitrary SQL commands, potentially leading to complete database compromise, data theft, or system destruction. This issue has been...

10CVSS0.00249EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/05/08 9:51 p.m.13 views

EUVD-2026-28842

Emlog is an open source website building system. Prior to version 2.6.11, direct SQL injection in article creation and update functions allows attackers to execute arbitrary SQL commands, potentially leading to complete database compromise, data theft, or system destruction. This issue has been...

10CVSS6.1AI score0.00249EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/08 9:51 p.m.9 views

CVE-2026-42287

Emlog is an open source website building system. Prior to version 2.6.11, direct SQL injection in article creation and update functions allows attackers to execute arbitrary SQL commands, potentially leading to complete database compromise, data theft, or system destruction. This issue has been...

10CVSS6.1AI score0.00249EPSS
SaveExploits0References2Affected Software1
vulnersOsv
vulnersOsv
added 2026/05/08 6:19 p.m.11 views

any2htpy (=0.1.4), article-extractor (=0.5.8) +1 more potentially affected by unknown CVE via justhtml (>=0.35.0 <=1.14.0)

justhtml PYPI version =0.35.0, =0.1.0, =0.1.5 Source cves: unknown CVE Source advisory: OSV:GHSA-R8CJ-3554-33MR...

5.8AI score
SaveExploits0
vulnersOsv
vulnersOsv
added 2026/05/08 6:19 p.m.10 views

article-extractor (=0.5.8), nscraper (>=0.1.0 <=0.1.5) potentially affected by unknown CVE via justhtml (>=1.13.0 <=1.14.0)

justhtml PYPI version =1.13.0, =0.1.0, =0.1.5 Source cves: unknown CVE Source advisory: SNYK:PYTHON-JUSTHTML-16635077...

5.8AI score
SaveExploits0
CNNVD
CNNVD
added 2026/05/08 12:0 a.m.9 views

emlog SQL注入漏洞

Emlog is an open-source CMS website building system based on PHP and MySQL. Versions of Emlog prior to 2.6.11 had a SQL injection vulnerability. This vulnerability stemmed from direct SQL injections in the article creation and updating functions, which could allow attackers to execute arbitrary S...

10CVSS6.1AI score0.00249EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/05/08 12:0 a.m.23 views

PT-2026-39203

Name of the Vulnerable Software and Affected Versions Emlog versions prior to 2.6.11 Description Direct SQL injection in article creation and update functions allows attackers to execute arbitrary SQL commands. This can lead to complete database compromise, data theft, or system destruction...

10CVSS6.1AI score0.00249EPSS
SaveExploits0References3
Rows per page
Query Builder