Lucene search
+L

503363 matches found

OSV
OSV
added yesterday4 views

MINI-QRC8-QG55-5WXW

Bulletin has no description...

9.6CVSS5AI score0.00655EPSS
SaveExploits0
OSV
OSV
added yesterday3 views

MINI-VGVG-59XQ-C5XV

Bulletin has no description...

7.5CVSS5AI score0.00465EPSS
SaveExploits0
OSV
OSV
added yesterday6 views

MINI-X2PW-9G4P-FFX9

Bulletin has no description...

7.5CVSS5AI score0.0059EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added yesterday4 views

CVE-2026-72220

A flaw was found in the Linux kernel's sunrpc component. When a worker thread processes a new request and encounters an early error, a stale release hook can be re-triggered against previously used data. This can lead to a double-free or use-after-free vulnerability, potentially allowing an...

9.8CVSS5.9AI score0.00588EPSS
SaveExploits0References4
Cvelist
Cvelist
added yesterday14 views

CVE-2026-16137 Path traversal via unsanitized upload filename leads to arbitrary file write in Progress ShareFile Storage Zones Controller

In Progress ShareFile Storage Zones Controller v5.12.5 and below, a party with valid zone credentials can perform path traversal using resumable upload initiation endpoint, allowing the party to write arbitrary content to any location writable by the application's service account. This may result...

7.2CVSS
SaveExploits0References1
EUVD
EUVD
added yesterday7 views

EUVD-2026-60198

In Progress ShareFile Storage Zones Controller v5.12.5 and below, a party with valid zone credentials can perform path traversal using resumable upload initiation endpoint, allowing the party to write arbitrary content to any location writable by the application's service account. This may result...

7.2CVSS5.9AI score
SaveExploits0References1
EUVD
EUVD
added yesterday6 views

EUVD-2026-60197

In Progress ShareFile Storage Zones Controller v5.12.5 and below versions, unsafe deserialization of untrusted file metadata can allow a user with write access to a Network share to execute arbitrary code on the Storage Zones Controller host...

8CVSS6.3AI score
SaveExploits0References1
CVE
CVE
added yesterday25 views

CVE-2026-16138

In Progress ShareFile Storage Zones Controller v5.12.5 and below, unsafe deserialization of untrusted file metadata in the CICO service allows a user with write access to a network share to execute arbitrary code on the host. CVSS 8.0 (HIGH) reflects adjacent-network attack vector with low comple...

8CVSS6.3AI score
SaveExploits0References1
Cvelist
Cvelist
added yesterday14 views

CVE-2026-16138 Remote code execution via unsafe deserialization in Progress ShareFile Storage Zones Controller's CICO service

In Progress ShareFile Storage Zones Controller v5.12.5 and below versions, unsafe deserialization of untrusted file metadata can allow a user with write access to a Network share to execute arbitrary code on the Storage Zones Controller host...

8CVSS
SaveExploits0References1
CVE
CVE
added yesterday22 views

CVE-2026-16139

In Progress ShareFile Storage Zones Controller versions = 5.12.5 and = 6.0.2, an authenticated zone administrator can exploit improper validation in the download preparation flow, enabling attacker-controlled files to be written outside the intended preparation directory. This can lead to remote...

7.2CVSS6.5AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added yesterday4 views

CVE-2026-16139

In Progress ShareFile Storage Zones Controller versions = 5.12.5 and = 6.0.2, an authenticated zone administrator can exploit improper validation in the download preparation flow, enabling attacker-controlled files to be written outside the intended preparation directory. This can lead to remote...

7.2CVSS6.4AI score
SaveExploits0References2Affected Software1
EUVD
EUVD
added yesterday5 views

EUVD-2026-60196

In Progress ShareFile Storage Zones Controller versions = 5.12.5 and = 6.0.2, an authenticated zone administrator can exploit improper validation in the download preparation flow, enabling attacker-controlled files to be written outside the intended preparation directory. This can lead to remote...

7.2CVSS6.4AI score
SaveExploits0References1
Cvelist
Cvelist
added yesterday16 views

CVE-2026-16139 Arbitrary file write via path traversal in Progress ShareFile Storage Zones Controller potentially leading to remote code execution

In Progress ShareFile Storage Zones Controller versions = 5.12.5 and = 6.0.2, an authenticated zone administrator can exploit improper validation in the download preparation flow, enabling attacker-controlled files to be written outside the intended preparation directory. This can lead to remote...

7.2CVSS
SaveExploits0References1
The Hacker News
The Hacker News
added yesterday3 views

⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More

The expensive attacks are not always the clever ones. This week had plenty of proof. Exposed services got hit, old bugs found fresh use, browser sessions became attack paths, and supply-chain problems kept spreading farther than the original compromise. A lot of it came down to access that was...

9.8CVSS8.7AI score0.00496EPSS
SaveExploits1
NVD
NVD
added yesterday5 views

CVE-2026-74997

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the cmdlearn driver of the markasjunk plugin is subject to remote code execution via crafted placeholder replacement values. This issue only affects Roundcube instances using the markasjunk plugin with its cmdlearn driver...

8.8CVSS
SaveExploits0References6
CVE
CVE
added yesterday14 views

CVE-2026-74997

Roundcube Webmail's markasjunk plugin cmd_learn driver allows RCE via crafted placeholder replacement values in versions before 1.6.18 and 1.7.x before 1.7.3. Fix: upgrade to 1.6.18 or 1.7.3. CVSS 8.8 (HIGH). Exploitation details not provided in documents.

8.8CVSS6.3AI score
SaveExploits0References6
EUVD
EUVD
added yesterday6 views

EUVD-2026-60164

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the cmdlearn driver of the markasjunk plugin is subject to remote code execution via crafted placeholder replacement values. This issue only affects Roundcube instances using the markasjunk plugin with its cmdlearn driver...

8.8CVSS6.3AI score
SaveExploits0References6
Cvelist
Cvelist
added yesterday16 views

CVE-2026-74997

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the cmdlearn driver of the markasjunk plugin is subject to remote code execution via crafted placeholder replacement values. This issue only affects Roundcube instances using the markasjunk plugin with its cmdlearn driver...

8.8CVSS
SaveExploits0References6
NVD
NVD
added yesterday5 views

CVE-2026-74896

opensslencrypt versions before 1.4.0 contain a sandbox escape vulnerability in the DangerousPatternVisitor AST analyzer that fails to detect dunder attribute traversal techniques. Attackers can use class, bases, subclasses, and globals chains to access restricted functions and execute arbitrary...

9.8CVSS
SaveExploits0References2
NVD
NVD
added yesterday4 views

CVE-2026-74886

opensslencrypt versions before 1.4.0 contain a plugin sandbox bypass vulnerability where the PluginImportGuard blocks a different set of modules than the AST analyzer's DANGEROUSMODULES set. Attackers can bypass AST analysis through string obfuscation or encoding to import unblocked dangerous...

9.8CVSS
SaveExploits0References2
Rows per page
Query Builder