Lucene search
+L

227097 matches found

NVD
NVD
added 2026/08/24 4:17 p.m.6 views

CVE-2026-67204

BookStack before 26.05.4 contains a broken access control vulnerability that allows authenticated API users with image-update or image-delete permissions to manipulate other users' avatars by exploiting missing content-type restrictions in the Image Gallery API endpoints. Attackers can supply a...

5.4CVSS
SaveExploits0References4
NVD
NVD
added 2026/08/24 4:16 p.m.7 views

CVE-2026-13212

The Zephyr virtio driver does not validate the descriptor-chain head id that the virtio device writes into the used ring. In virtioisr drivers/virtio/virtiocommon.c, the device-written vq-used-ringidx.id is used directly as an index into vq-recvcbs and vq-desc, which are both allocated with exact...

8.8CVSS
SaveExploits0References2
CVE
CVE
added 2026/08/24 4:09 p.m.12 views

CVE-2026-59230

Improper input validation vulnerability in Apache Camel. This issue affects Apache Camel: from 2.17.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-mail component ships a MimeMultipart data format that can unmarshal a MIME multipart message. When it is configured...

6.5CVSS5.6AI score
SaveExploits1References2
EUVD
EUVD
added 2026/08/24 3:43 p.m.9 views

EUVD-2026-64925

The Zephyr virtio driver does not validate the descriptor-chain head id that the virtio device writes into the used ring. In virtioisr drivers/virtio/virtiocommon.c, the device-written vq-used-ringidx.id is used directly as an index into vq-recvcbs and vq-desc, which are both allocated with exact...

8.8CVSS6.3AI score
SaveExploits0References2
CVE
CVE
added 2026/08/24 3:43 p.m.11 views

CVE-2026-13212

The Zephyr RTOS virtio driver contains an out-of-bounds read in virtio_isr() (drivers/virtio/virtio_common.c). The device-written descriptor-chain head id from the used ring is used directly as an index into recv_cbs[] and desc[] without a bounds check. A malicious or compromised virtio backend (...

8.8CVSS6.2AI score
SaveExploits0References2
CVE
CVE
added 2026/08/24 3:33 p.m.11 views

CVE-2026-67204

BookStack before 26.05.4 contains a broken access control vulnerability in the Image Gallery API endpoints . The API controller loads any image type without the content-type restrictions enforced by the web controller's gallery and drawio checks. An authenticated user with image-update or image-d...

5.4CVSS5.3AI score
SaveExploits0References4
EUVD
EUVD
added 2026/08/24 3:33 p.m.7 views

EUVD-2026-64919

BookStack before 26.05.4 contains a broken access control vulnerability that allows authenticated API users with image-update or image-delete permissions to manipulate other users' avatars by exploiting missing content-type restrictions in the Image Gallery API endpoints. Attackers can supply a...

5.3CVSS5.5AI score
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/24 3:33 p.m.30 views

CVE-2026-67204 BookStack < 26.05.4 Broken Access Control via Image Gallery API

BookStack before 26.05.4 contains a broken access control vulnerability that allows authenticated API users with image-update or image-delete permissions to manipulate other users' avatars by exploiting missing content-type restrictions in the Image Gallery API endpoints. Attackers can supply a...

5.4CVSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/08/24 3:24 p.m.7 views

grafana: Grafana Auth Proxy: Unauthorized access due to incorrect IPv6 allow-list default

A flaw in Grafana's Auth Proxy IPv6 allow-list incorrectly defaults to a broad /32 subnet mask instead of a strict /128. This misconfiguration allows remote attackers to bypass access restrictions, potentially leading to unauthorized access and data manipulation...

7.4CVSS5.4AI score0.00282EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/08/24 3:24 p.m.7 views

grafana: Grafana: Privilege escalation via dashboard overwrite

A flaw was found in Grafana. A user with editor privileges can overwrite a dashboard not owned by them, leading to privilege escalation on that specific dashboard. This allows the editor to gain administrative control over the affected dashboard...

7.1CVSS5.4AI score0.00226EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/08/24 2:37 p.m.5 views

kernel: selinux: fix overlayfs mmap() and mprotect() access checks

A flaw was found in the Linux kernel's SELinux security module when handling overlayfs. The existing security model for overlayfs does not properly enforce access controls for mmap and mprotect operations. This oversight could allow a local attacker to bypass intended security policies, potential...

7.1CVSS5.4AI score0.00123EPSS
SaveExploits0References5
CVE
CVE
added 2026/08/24 2:28 p.m.13 views

CVE-2026-9728

CVE-2026-9728 is a time-of-check/time-of-use (TOCTOU) race condition in the Zephyr RTOS userspace mailbox subsystem. The syscall verifier z_vrfy_mbox_send() in drivers/mbox/mbox_handlers.c validates msg-&gt;data/msg-&gt;size by reading them directly from live userspace memory, then forwards the o...

6.4CVSS5.4AI score
SaveExploits0References2
NVD
NVD
added 2026/08/24 2:17 p.m.8 views

CVE-2026-78372

RansomLook does not consistently enforce authorization checks when accessing groups, markets, and ransom notes marked as private. An unauthenticated or otherwise unauthorized remote attacker can access information associated with private entities through several web views and API endpoints. The...

9.2CVSS
SaveExploits0References1
NVD
NVD
added 2026/08/24 2:17 p.m.8 views

CVE-2026-78370

RansomLook contains an authorization flaw in its legacy database export functionality that can allow unauthenticated remote users to retrieve information intended to remain private. The /export/ endpoint permits selected internal databases to be exported without requiring authentication. While...

9.2CVSS
SaveExploits0References1
NVD
NVD
added 2026/08/24 2:16 p.m.6 views

CVE-2025-68833

HCL Hive Keycloak IAM Instance is affected by insufficient granularity of access control which could allow an attacker unauthorized access to resources...

5.3CVSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/24 2:16 p.m.7 views

EUVD-2026-64895

TIM Flow before 26.0.6 contains an improper authorization vulnerability that allows any authenticated user to submit arbitrary SQL queries to a privileged dashboard Excel export endpoint intended for administrative use only. Attackers can craft and submit unauthorized SQL queries to the export...

7.1CVSS6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/08/24 2:12 p.m.1 views

CVE-2024-50945

CVE-2024-50945 描述 SimplCommerce 在评论系统中存在一个被破坏的访问控制漏洞,允许未授权用户为他们未购买的商品发布评论。 检测方法 攻击者可以通过向评论提交端点发送请求,并将 EntityId 更改为他们未购买的产品的 ID 来检测此漏洞。如果评论成功发布,则确认该网站存在被破坏的访问控制漏洞。 测试于 230310c8d7a0408569b292c5a805c459d47a1d8f 提交 链接 https://www.simplcommerce.com/ https://github.com/simplcommerce/SimplCommerce...

7.5CVSS5.5AI score0.00615EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/24 2:04 p.m.17 views

CVE-2026-78387

RansomLook has an authorization weakness in its web-based configuration editor at the /admin/config endpoint. The route requires an authenticated session but performs no explicit privilege or administrator authorization check , allowing any authenticated low-privileged user to write crafted value...

9.4CVSS5.4AI score
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/24 1:42 p.m.30 views

CVE-2025-68833 HCL Hive is affected by use of a cryptographic primitive with a risky implementation

HCL Hive Keycloak IAM Instance is affected by insufficient granularity of access control which could allow an attacker unauthorized access to resources...

5.3CVSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/24 1:42 p.m.9 views

EUVD-2025-210762

HCL Hive Keycloak IAM Instance is affected by insufficient granularity of access control which could allow an attacker unauthorized access to resources...

5.3CVSS5.3AI score
SaveExploits0References1
Rows per page
Query Builder