Lucene search
+L

637045 matches found

osv_cve
osv_cve
•added 2026/10/13 4:53 p.m.•17 views

CVE-2026-110116 Digital-Infrastructure 9.6.5 through 9.6.11 Path Traversal via fileManager storeFile

Risesoft-y9 Digital-Infrastructure 9.6.5 through 9.6.11 contains a path traversal vulnerability in the fileManager storeFile endpoint that allows unauthenticated attackers to write arbitrary files. Attackers can send crafted fullPath and fileName parameters to POST /rest/storeFile to create or...

8.8CVSS6.4AI score
SaveExploits0References6
CVE
CVE
•added 2026/10/13 4:53 p.m.•11 views

CVE-2026-110116

Risesoft-y9 Digital-Infrastructure versions 9.6.5 through 9.6.11 are vulnerable to a path traversal vulnerability within the fileManager storeFile endpoint. Unauthenticated attackers can exploit this by sending crafted fullPath and fileName parameters to the POST /rest/storeFile request. This all...

9.1CVSS6.3AI score0.00592EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2026/10/13 4:43 p.m.•10 views

WordPress AGE-GATE plugin <= 1.0 - Unauthenticated Remote Code Execution vulnerability

Unauthenticated Remote Code Execution vulnerability discovered by Spy0x7 in WordPress Plugin AGE-GATE versions = 1.0...

9.8CVSS5.8AI score0.01031EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2026/10/13 4:17 p.m.•7 views

CVE-2026-55695

FearlessCMS is a flat-file content management system centered on simplicity and open source. In 0.1.2b and earlier, an authenticated administrator can set an arbitrary Git repository URL through admin/updater-handler.php and trigger performupdate, which passes the URL to update.sh. The updater...

9.1CVSS0.00465EPSS
SaveExploits0References4
NVD
NVD
•added 2026/10/13 4:17 p.m.•7 views

CVE-2026-78802

An issue in SKYWORTH DIGITAL CO.,LTD SK-WR6640X Wi-Fi 6 Dual-Band Fiber Router AX1800M V1.0.3 allows a remote attacker to execute arbitrary code...

9.8CVSS0.00515EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2026/10/13 4:17 p.m.•20 views

DEBIAN-CVE-2026-102734

asteval is a Python expression evaluator designed for restricted execution. Prior to 1.0.9, in asteval/astutils.py, the default Interpreter with numpy enabled exposes a ctypes type and permits fromaddress memory access. safegetattr blocks the ctypes module but not reachable ctypes type objects,...

5.5CVSS6.4AI score0.00128EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/13 4:17 p.m.•13 views

CVE-2026-102734

asteval is a Python expression evaluator designed for restricted execution. Prior to 1.0.9, in asteval/astutils.py, the default Interpreter with numpy enabled exposes a ctypes type and permits fromaddress memory access. safegetattr blocks the ctypes module but not reachable ctypes type objects,...

5.5CVSS0.00128EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2026/10/13 4:09 p.m.•9 views

kernel: RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init()

A flaw was found in the Linux kernel's RDMA/mlx5 component. An error path fall-through in the mlx5ibdevressrqinit function, specifically when ibcreatesrq fails, can lead to the use of freed memory and error pointers. This memory corruption vulnerability could result in system instability, denial ...

7.8CVSS7.4AI score0.0018EPSS
SaveExploits0References5
CVE
CVE
•added 2026/10/13 3:51 p.m.•22 views

CVE-2026-55695

FearlessCMS versions 0.1.2b and earlier are vulnerable to Remote Code Execution via an unvalidated Git repository URL in the system updater. An authenticated administrator can provide an arbitrary URL through admin/updater-handler.php, which is then passed to update.sh. The updater clones this re...

9.1CVSS6.3AI score0.00465EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2026/10/13 3:51 p.m.•19 views

CVE-2026-55695 FearlessCMS: Remote Code Execution via Unvalidated Update Repository URL in System Updater

FearlessCMS is a flat-file content management system centered on simplicity and open source. In 0.1.2b and earlier, an authenticated administrator can set an arbitrary Git repository URL through admin/updater-handler.php and trigger performupdate, which passes the URL to update.sh. The updater...

9.1CVSS6.4AI score
SaveExploits0References6
EUVD
EUVD
•added 2026/10/13 3:29 p.m.•10 views

EUVD-2026-98813

asteval is a Python expression evaluator designed for restricted execution. Prior to 1.0.9, in asteval/astutils.py, the default Interpreter with numpy enabled exposes a ctypes type and permits fromaddress memory access. safegetattr blocks the ctypes module but not reachable ctypes type objects,...

5.5CVSS6.4AI score0.00128EPSS
SaveExploits0References4
Snyk
Snyk
•added 2026/10/13 3:20 p.m.•10 views

Buffer Underwrite (Buffer Underflow)

Overview Magick.NET-Q16-HDRI-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

7CVSS6.6AI score0.00361EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/10/13 3:20 p.m.•8 views

Buffer Underwrite (Buffer Underflow)

Overview Magick.NET-Q8-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7CVSS6.6AI score0.00361EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/10/13 3:20 p.m.•9 views

Buffer Underwrite (Buffer Underflow)

Overview Magick.NET-Q16-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7CVSS6.6AI score0.00361EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/10/13 3:20 p.m.•7 views

Buffer Underwrite (Buffer Underflow)

Overview Magick.NET-Q16-HDRI-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

7CVSS6.6AI score0.00361EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/10/13 3:20 p.m.•8 views

Buffer Underwrite (Buffer Underflow)

Overview Magick.NET-Q8-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7CVSS6.6AI score0.00361EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/10/13 3:20 p.m.•9 views

Buffer Underwrite (Buffer Underflow)

Overview Magick.NET-Q8-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7CVSS6.6AI score0.00361EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/10/13 3:20 p.m.•12 views

Buffer Underwrite (Buffer Underflow)

Overview Magick.NET-Q8-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package ar...

7CVSS6.6AI score0.00361EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/10/13 3:20 p.m.•11 views

Buffer Underwrite (Buffer Underflow)

Overview Magick.NET-Q8-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

7CVSS6.6AI score0.00361EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/10/13 3:20 p.m.•10 views

Buffer Underwrite (Buffer Underflow)

Overview Magick.NET-Q16-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

7CVSS6.6AI score0.00361EPSS
SaveExploits0References2
Rows per page
Query Builder