Lucene search
+L

10076 matches found

EUVD
EUVD
•added 2026/07/02 11:47 a.m.•21 views

EUVD-2026-41325

u5CMS through v12.8.8 is vulnerable to reflected XSS via the ‘thanks’ parameter in multiple form components...

6.4CVSS5.8AI score0.00436EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/02 11:47 a.m.•15 views

CVE-2026-14449

u5CMS through v12.8.8 is vulnerable to reflected XSS via the ‘thanks’ parameter in multiple form components...

6.4CVSS5.8AI score0.00436EPSS
SaveExploits0References2
CVE
CVE
•added 2026/07/02 11:47 a.m.•41 views

CVE-2026-14449

CVE-2026-14449 affects u5CMS up to v12.8.8 and is a reflected XSS via the ‘thanks’ parameter in multiple form components. The issue is described as a reflected XSS with a CVSS v4.0 base score of 6.4 (Medium) with network attack vector, no privileges required, and user interaction required. The un...

6.4CVSS5.8AI score0.00436EPSS
SaveExploits0References1
OSV
OSV
•added 2026/07/02 11:47 a.m.•17 views

CVE-2026-14449 POST-based reflected XSS via the thanks parameter in form components

u5CMS through v12.8.8 is vulnerable to reflected XSS via the ‘thanks’ parameter in multiple form components...

6.4CVSS5.9AI score
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2026/07/02 12:03 a.m.•33 views

react-server-dom-webpack: react-server-dom-parcel: reactreact-server-dom-turbopack: React Server Components: Denial of Service via specially crafted HTTP requests

A flaw was found in React Server Components. A remote attacker can exploit this vulnerability by sending specially crafted HTTP requests to Server Function endpoints. This can lead to a Denial of Service DoS, causing server crashes, out-of-memory exceptions, or excessive CPU usage, thereby...

7.5CVSS7.5AI score0.02581EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2026/07/02 12:03 a.m.•68 views

next.js: Next.js: Denial of Service via crafted POST requests to server actions

A flaw was found in Next.js. Applications utilizing Partial Prerendering via the Cache Components feature are susceptible to connection exhaustion. A remote attacker can send crafted POST requests to a server action, triggering a request-body handling deadlock. This leaves connections open,...

7.5CVSS7.2AI score0.00764EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
•added 2026/07/02 12:00 a.m.•23 views

Linux Distros Unpatched Vulnerability : CVE-2026-55595

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, when providing invalid...

4.7CVSS5.6AI score0.00091EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/02 12:00 a.m.•26 views

PT-2026-55054

u5CMS through v12.8.8 is vulnerable to reflected XSS via the ‘thanks’ parameter in multiple form components...

6.4CVSS5.8AI score0.00436EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/02 12:00 a.m.•2 views

CVE-2026-14449: Improper Neutralization of Input During Web Page Generation

u5CMS through v12.8.8 is vulnerable to reflected XSS via the ‘thanks’ parameter in multiple form components...

6.4CVSS5.8AI score0.00436EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/07/02 12:00 a.m.•43 views

Linux Distros Unpatched Vulnerability : CVE-2026-54428

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Allocation of resources without limits or throttling in the HTTP/2 HPACK decoder in Apache HttpComponents Core 5.4.2 and earlier, 5.5-beta1 and earlier allows a...

7.5CVSS5.8AI score0.0087EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/07/01 10:20 p.m.•21 views

CVE-2026-55595

A flaw was found in ImageMagick, a free and open-source software used for editing and manipulating digital images. This vulnerability allows an attacker to trigger an infinite loop by providing invalid arguments to the connected-components option. Successful exploitation of this flaw can lead to ...

4.7CVSS5.8AI score0.00091EPSS
SaveExploits0References4
Snyk
Snyk
•added 2026/07/01 9:19 p.m.•16 views

Allocation of Resources Without Limits or Throttling

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.1CVSS5.6AI score0.00091EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/01 9:19 p.m.•16 views

Allocation of Resources Without Limits or Throttling

Overview Magick.NET-Q8-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.1CVSS5.6AI score0.00091EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/01 9:19 p.m.•18 views

Allocation of Resources Without Limits or Throttling

Overview Magick.NET-Q16-HDRI-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

7.1CVSS5.6AI score0.00091EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/01 9:19 p.m.•14 views

Allocation of Resources Without Limits or Throttling

Overview Magick.NET-Q16-HDRI-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

7.1CVSS5.6AI score0.00091EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/01 9:19 p.m.•14 views

Allocation of Resources Without Limits or Throttling

Overview Magick.NET-Q16-HDRI-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.1CVSS5.6AI score0.00091EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/01 9:19 p.m.•14 views

Allocation of Resources Without Limits or Throttling

Overview Magick.NET-Q8-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package ar...

7.1CVSS5.6AI score0.00091EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/01 9:19 p.m.•13 views

Allocation of Resources Without Limits or Throttling

Overview Magick.NET-Q16-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.1CVSS5.6AI score0.00091EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/01 9:19 p.m.•15 views

Allocation of Resources Without Limits or Throttling

Overview Magick.NET-Q8-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.1CVSS5.6AI score0.00091EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/01 9:19 p.m.•12 views

Allocation of Resources Without Limits or Throttling

Overview Magick.NET-Q16-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

7.1CVSS5.6AI score0.00091EPSS
SaveExploits0References2
Rows per page
Query Builder