Lucene search
+L

790 matches found

OSV
OSV
added 2026/04/02 6:15 p.m.15 views

CVE-2026-34425 OpenClaw - Shell-Bleed Protection Preflight Validation Bypass

OpenClaw versions prior to commit 8aceaf5 contain a preflight validation bypass vulnerability in shell-bleed protection that allows attackers to execute blocked script content by using piped or complex command forms that the parser fails to recognize. Attackers can craft commands such as piped...

5.3CVSS6.2AI score
SaveExploits0References5
Cvelist
Cvelist
added 2026/04/02 6:15 p.m.30 views

CVE-2026-34425 OpenClaw - Shell-Bleed Protection Preflight Validation Bypass

OpenClaw versions prior to commit 8aceaf5 contain a preflight validation bypass vulnerability in shell-bleed protection that allows attackers to execute blocked script content by using piped or complex command forms that the parser fails to recognize. Attackers can craft commands such as piped...

5.4CVSS0.00303EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/04/01 5:00 a.m.12 views

CVE-2026-3300

The Everest Forms Pro plugin for WordPress is vulnerable to Remote Code Execution via PHP Code Injection in all versions up to, and including, 1.9.12. This is due to the Calculation Addon's processfilter function concatenating user-submitted form field values into a PHP code string without proper...

9.8CVSS6.3AI score0.39159EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/03/31 3:31 a.m.37 views

EUVD-2026-17275

The Everest Forms Pro plugin for WordPress is vulnerable to Remote Code Execution via PHP Code Injection in all versions up to, and including, 1.9.12. This is due to the Calculation Addon's processfilter function concatenating user-submitted form field values into a PHP code string without proper...

9.8CVSS6.3AI score0.39159EPSS
SaveExploits1References4
CVE
CVE
added 2026/03/31 1:24 a.m.318 views

CVE-2026-3300

CVE-2026-3300 affects Everest Forms Pro for WordPress (versions

9.8CVSS6.3AI score0.39159EPSS
SaveIn wildExploits1References3
Vulnrichment
Vulnrichment
added 2026/03/31 1:24 a.m.10 views

CVE-2026-3300 Everest Forms Pro <= 1.9.12 - Unauthenticated Remote Code Execution via Calculation Field

The Everest Forms Pro plugin for WordPress is vulnerable to Remote Code Execution via PHP Code Injection in all versions up to, and including, 1.9.12. This is due to the Calculation Addon's processfilter function concatenating user-submitted form field values into a PHP code string without proper...

9.8CVSS6.3AI score0.39159EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2026/03/31 12:00 a.m.26 views

PT-2026-29180

Name of the Vulnerable Software and Affected Versions Everest Forms Pro versions prior to 1.9.13 Description Unauthenticated attackers can achieve remote code execution via PHP code injection in the Everest Forms Pro plugin for WordPress. The issue exists within the Calculation Addon's process...

9.8CVSS6.9AI score0.39159EPSS
SaveExploits1References65
EUVD
EUVD
added 2026/03/23 12:30 p.m.27 views

EUVD-2026-14408

A flaw has been found in Shenzhen HCC Technology MPOS M6 PLUS 1V.31-N. This affects an unknown part of the component Cardholder Data Handler. Executing a manipulation can lead to cleartext transmission of sensitive information. The attack requires access to the local network. The attack requires ...

3.1CVSS5.3AI score0.00163EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/03/10 12:00 a.m.19 views

Intel Processors 输入验证错误漏洞

Intel Processors are a series of processors developed by the American company Intel. Intel Processors have a vulnerability related to input validation, which stems from improper input validation and may lead to privilege escalation. System software attackers with privileged access can potentially...

7.1CVSS5.8AI score0.00102EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/03/10 12:00 a.m.16 views

Intel Processors 输入验证错误漏洞

Intel Processors are a series of processors developed by the American company Intel. Intel Processors have a vulnerability related to input validation, which arises from improper input validation and may lead to privilege escalation. System software attackers with privileged access can potentiall...

5.9CVSS5.8AI score0.00137EPSS
SaveExploits0References1
OSV
OSV
added 2026/02/26 8:47 a.m.33 views

BIT-MONGODB-2026-1850 An authorized user may disable the MongoDB server by issuing a certain type of complex query due to boolean expression simplification

Complex queries can cause excessive memory usage in MongoDB Query Planner resulting in an Out-Of-Memory Crash...

7.5CVSS5.4AI score0.00252EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/02/26 3:13 a.m.15 views

Inefficient Algorithmic Complexity

Overview minimatch is a minimal matching utility. Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity via the matchOne function. An attacker can cause significant delays in processing and stall the event loop by supplying specially crafted glob patterns containi...

8.7CVSS6AI score0.00517EPSS
SaveExploits1References2
Microsoft CVE
Microsoft CVE
added 2026/02/21 12:28 p.m.16 views

bus: fsl-mc: fix use-after-free in driver_override_show()

...

7.8CVSS5.8AI score0.00126EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/02/11 7:44 p.m.15 views

CVE-2026-1850

Complex queries can cause excessive memory usage in MongoDB Query Planner resulting in an Out-Of-Memory Crash...

7.5CVSS5.4AI score0.00252EPSS
SaveExploits0References1
NVD
NVD
added 2026/02/10 7:15 p.m.18 views

CVE-2026-1850

Complex queries can cause excessive memory usage in MongoDB Query Planner resulting in an Out-Of-Memory Crash...

7.5CVSS0.00252EPSS
SaveExploits0References1
OSV
OSV
added 2026/02/10 7:15 p.m.14 views

UBUNTU-CVE-2026-1850

Complex queries can cause excessive memory usage in MongoDB Query Planner resulting in an Out-Of-Memory Crash...

7.1CVSS5.8AI score0.00252EPSS
SaveExploits0References3
attackerkb
attackerkb
added 2026/02/10 6:49 p.m.10 views

CVE-2026-1850

Complex queries can cause excessive memory usage in MongoDB Query Planner resulting in an Out-Of-Memory Crash...

7.1CVSS5.4AI score0.00252EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/10 6:49 p.m.12 views

CVE-2026-1850 An authorized user may disable the MongoDB server by issuing a certain type of complex query due to boolean expression simplification

Complex queries can cause excessive memory usage in MongoDB Query Planner resulting in an Out-Of-Memory Crash...

7.1CVSS5.4AI score0.00252EPSS
SaveExploits0References1
MongoDB
MongoDB
added 2026/02/10 6:49 p.m.21 views

An authorized user may disable the MongoDB server by issuing a certain type of complex query due to boolean expression simplification

Complex queries can cause excessive memory usage in MongoDB Query Planner resulting in an Out-Of-Memory Crash...

7.5CVSS5.4AI score0.00252EPSS
SaveExploits0References1Affected Software1
Snyk
Snyk
added 2026/02/10 6:47 p.m.7 views

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the matchpattern function due to inefficient processing of the complex regular expressions. An attacker can cause resource exhaustion by supplying specially crafted input that...

5.5CVSS6.4AI score0.00223EPSS
SaveExploits0References2
Rows per page
Query Builder