Lucene search
+L

11453 matches found

RedhatCVE
RedhatCVE
•added 2026/04/30 2:47 p.m.•29 views

CVE-2026-7306

A security vulnerability has been detected in Xuxueli xxl-job up to 3.3.2. The impacted element is an unknown function of the file xxl-job-admin/src/main/java/com/xxl/job/admin/scheduler/openapi/OpenApiController.java of the component OpenAPI Endpoint. Such manipulation of the argument defaulttok...

6.3CVSS5.1AI score0.0042EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/29 12:00 a.m.•26 views

CDAC e-Sushrut 安全漏洞

CDAC e-Sushrut is a system platform provided by the Indian company CDAC, which facilitates hospital information management and medical process support. There is a security vulnerability in CDAC e-Sushrut. This vulnerability stems from the leakage of sensitive information in client-side JavaScript...

8.7CVSS5.8AI score0.00326EPSS
SaveExploits0References1
NVD
NVD
•added 2026/04/28 10:16 p.m.•43 views

CVE-2026-7306

A security vulnerability has been detected in Xuxueli xxl-job up to 3.3.2. The impacted element is an unknown function of the file xxl-job-admin/src/main/java/com/xxl/job/admin/scheduler/openapi/OpenApiController.java of the component OpenAPI Endpoint. Such manipulation of the argument defaulttok...

6.3CVSS0.0042EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/04/28 7:30 p.m.•52 views

CVE-2026-7306 Xuxueli xxl-job OpenAPI Endpoint OpenApiController.java hard-coded key

A security vulnerability has been detected in Xuxueli xxl-job up to 3.3.2. The impacted element is an unknown function of the file xxl-job-admin/src/main/java/com/xxl/job/admin/scheduler/openapi/OpenApiController.java of the component OpenAPI Endpoint. Such manipulation of the argument defaulttok...

6.3CVSS0.0042EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2026/04/28 7:30 p.m.•11 views

CVE-2026-7306

A security vulnerability has been detected in Xuxueli xxl-job up to 3.3.2. The impacted element is an unknown function of the file xxl-job-admin/src/main/java/com/xxl/job/admin/scheduler/openapi/OpenApiController.java of the component OpenAPI Endpoint. Such manipulation of the argument defaulttok...

6.3CVSS4.6AI score0.0042EPSS
SaveExploits0References6Affected Software1
CVE
CVE
•added 2026/04/28 7:30 p.m.•58 views

CVE-2026-7306

The CVE-2026-7306 entry affects Xuxueli xxl-job up to version 3.3.2, specifically the OpenAPI Endpoint code path OpenApiController.java in the xxl-job-admin module. The vulnerability arises from manipulation of the default_token argument, which leads to the use of a hard-coded cryptographic key. ...

6.3CVSS4.9AI score0.0042EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/04/28 7:30 p.m.•21 views

EUVD-2026-26150

A security vulnerability has been detected in Xuxueli xxl-job up to 3.3.2. The impacted element is an unknown function of the file xxl-job-admin/src/main/java/com/xxl/job/admin/scheduler/openapi/OpenApiController.java of the component OpenAPI Endpoint. Such manipulation of the argument defaulttok...

6.3CVSS5.1AI score0.0042EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/04/28 7:30 p.m.•15 views

CVE-2026-7306 Xuxueli xxl-job OpenAPI Endpoint OpenApiController.java hard-coded key

A security vulnerability has been detected in Xuxueli xxl-job up to 3.3.2. The impacted element is an unknown function of the file xxl-job-admin/src/main/java/com/xxl/job/admin/scheduler/openapi/OpenApiController.java of the component OpenAPI Endpoint. Such manipulation of the argument defaulttok...

6.3CVSS4.9AI score0.0042EPSS
SaveExploits0References6
OSV
OSV
•added 2026/04/28 7:30 p.m.•21 views

CVE-2026-7306 Xuxueli xxl-job OpenAPI Endpoint OpenApiController.java hard-coded key

A security vulnerability has been detected in Xuxueli xxl-job up to 3.3.2. The impacted element is an unknown function of the file xxl-job-admin/src/main/java/com/xxl/job/admin/scheduler/openapi/OpenApiController.java of the component OpenAPI Endpoint. Such manipulation of the argument defaulttok...

6.3CVSS5.5AI score
SaveExploits0References8
NVD
NVD
•added 2026/04/28 12:16 a.m.•17 views

CVE-2026-27785

Specific firmware versions of Milesight AIOT camera firmware contain hard-coded credentials...

8.8CVSS0.00347EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/28 12:00 a.m.•7 views

CVE-2026-32644: Use of Hard-coded Cryptographic Key

Specific firmware versions of Milesight AIOT cameras use SSL certificates with default private keys...

9.8CVSS5.7AI score0.00387EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/28 12:00 a.m.•3 views

CVE-2026-7306: Use of Hard-coded Cryptographic Key

A security vulnerability has been detected in Xuxueli xxl-job up to 3.3.2. The impacted element is an unknown function of the file xxl-job-admin/src/main/java/com/xxl/job/admin/scheduler/openapi/OpenApiController.java of the component OpenAPI Endpoint. Such manipulation of the argument defaulttok...

6.3CVSS4.9AI score0.0042EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/28 12:00 a.m.•6 views

CVE-2026-27785: Use of Hard-coded Credentials

Specific firmware versions of Milesight AIOT camera firmware contain hard-coded credentials...

8.8CVSS5.7AI score0.00347EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/04/28 12:00 a.m.•57 views

PT-2026-35826

Name of the Vulnerable Software and Affected Versions Xuxueli xxl-job versions prior to 3.3.3 Description An issue exists in the OpenAPI Endpoint within the file xxl-job-admin/src/main/java/com/xxl/job/admin/scheduler/openapi/OpenApiController.java. Manipulation of the default token argument lead...

6.3CVSS6.1AI score0.0042EPSS
SaveExploits0References11
Vulnrichment
Vulnrichment
•added 2026/04/27 11:40 p.m.•16 views

CVE-2026-32644 Milesight Cameras Use of Hard-coded Cryptographic Key

Specific firmware versions of Milesight AIOT cameras use SSL certificates with default private keys...

9.8CVSS5.8AI score0.00387EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/04/27 11:40 p.m.•47 views

CVE-2026-32644 Milesight Cameras Use of Hard-coded Cryptographic Key

Specific firmware versions of Milesight AIOT cameras use SSL certificates with default private keys...

9.8CVSS0.00387EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/04/27 11:38 p.m.•52 views

CVE-2026-27785 Milesight Cameras Use of Hard-coded Credentials

Specific firmware versions of Milesight AIOT camera firmware contain hard-coded credentials...

8.8CVSS0.00347EPSS
SaveExploits0References3
CVE
CVE
•added 2026/04/27 11:38 p.m.•45 views

CVE-2026-27785

CVE-2026-27785 affects specific Milesight AIOT camera firmware versions that contain hard-coded credentials. The vulnerability arises from credentials embedded in the firmware, enabling adjacent attackers with low complexity and no privileges required to access confidentiality, integrity, and ava...

8.8CVSS5.7AI score0.00347EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/04/27 11:38 p.m.•8 views

CVE-2026-27785

Specific firmware versions of Milesight AIOT camera firmware contain hard-coded credentials...

8.8CVSS5.2AI score0.00347EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/04/27 11:38 p.m.•18 views

EUVD-2026-25935

Specific firmware versions of Milesight AIOT camera firmware contain hard-coded credentials...

8.8CVSS5.1AI score0.00347EPSS
SaveExploits0References3
Rows per page
Query Builder