Lucene search
K

19139 matches found

RedhatCVE
RedhatCVE
added 2026/02/28 7:47 a.m.10 views

CVE-2026-3286

A vulnerability was identified in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3. The impacted element is the function Save of the file paicoding-web/src/main/java/com/github/paicoding/forum/web/common/image/rest/ImageRestController.java of the component Image Save Endpoint. Such manipulation of the...

6.5CVSS6.4AI score0.00312EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/02/28 1:56 a.m.6 views

CVE-2026-3269

A flaw has been found in psi-probe PSI Probe up to 5.3.0. The impacted element is the function handleRequestInternal of the file psi-probe-core/src/main/java/psiprobe/controllers/sessions/ExpireSessionsController.java of the component Session Handler. Executing a manipulation can lead to denial o...

6.5CVSS5.5AI score0.00561EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2026/02/28 12:0 a.m.6 views

openSUSE 16 Security Update : openQA, os-autoinst, openQA-devel-container (openSUSE-SU-2026:20261-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:20261-1 advisory. Changes in openQA: - Update to version 5.1771422749.560a3b26: fixmcp: set navbar check expression to read-only feat: support inverted result filters in...

9.2CVSS6.1AI score0.00481EPSS
Exploits0References3
OSV
OSV
added 2026/02/27 9:30 a.m.3 views

GHSA-HFCP-477W-3WJW rubyipmi is vulnerable to OS Command Injection through malicious usernames

A flaw was found in rubyipmi, a gem used in the Baseboard Management Controller BMC component of Red Hat Satellite. An authenticated attacker with host creation or update permissions could exploit this vulnerability by crafting a malicious username for the BMC interface. This could lead to remote...

8.3CVSS6.5AI score0.00771EPSS
Exploits0References9
Github Security Blog
Github Security Blog
added 2026/02/27 9:30 a.m.8 views

rubyipmi is vulnerable to OS Command Injection through malicious usernames

A flaw was found in rubyipmi, a gem used in the Baseboard Management Controller BMC component of Red Hat Satellite. An authenticated attacker with host creation or update permissions could exploit this vulnerability by crafting a malicious username for the BMC interface. This could lead to remote...

8.8CVSS6.5AI score0.00771EPSS
Exploits0References9Affected Software1
NVD
NVD
added 2026/02/27 8:17 a.m.9 views

CVE-2026-0980

A flaw was found in rubyipmi, a gem used in the Baseboard Management Controller BMC component of Red Hat Satellite. An authenticated attacker with host creation or update permissions could exploit this vulnerability by crafting a malicious username for the BMC interface. This could lead to remote...

8.8CVSS0.00771EPSS
Exploits0References5
EUVD
EUVD
added 2026/02/27 6:31 a.m.6 views

EUVD-2026-8996

A security flaw has been discovered in youlaitech youlai-mall 2.0.0. This affects the function listPagedSpuForApp of the file mall-pms/pms-boot/src/main/java/com/youlai/mall/pms/controller/app/SpuController.java of the component App-side Product Pagination Endpoint. Performing a manipulation of t...

6.5CVSS5.2AI score0.0039EPSS
Exploits1References5
OSV
OSV
added 2026/02/27 5:18 a.m.4 views

CVE-2026-3287

A security flaw has been discovered in youlaitech youlai-mall 2.0.0. This affects the function listPagedSpuForApp of the file mall-pms/pms-boot/src/main/java/com/youlai/mall/pms/controller/app/SpuController.java of the component App-side Product Pagination Endpoint. Performing a manipulation of t...

9.8CVSS5.6AI score0.0039EPSS
Exploits1References4
OSV
OSV
added 2026/02/27 4:16 a.m.2 views

CVE-2026-3286

A vulnerability was identified in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3. The impacted element is the function Save of the file paicoding-web/src/main/java/com/github/paicoding/forum/web/common/image/rest/ImageRestController.java of the component Image Save Endpoint. Such manipulation of the...

4.3CVSS5.5AI score
Exploits0References4
RedhatCVE
RedhatCVE
added 2026/02/27 4:13 a.m.4 views

CVE-2026-26682

An issue in fastCMS before v.0.1.6 allows a local attacker to execute arbitrary code via the PluginController.java component...

7.8CVSS5.9AI score0.00182EPSS
Exploits1References1
CVE
CVE
added 2026/02/27 4:2 a.m.12 views

CVE-2026-3287

CVE-2026-3287 affects youlaitech youlai-mall 2.0.0, specifically the App-side Product Pagination Endpoint: SpuController.java, listPagedSpuForApp. The vulnerability arises from manipulating the sortField/sort parameters, enabling SQL injection. This is described as remotely exploitable with a pub...

9.8CVSS6.3AI score0.0039EPSS
Exploits1References4Affected Software1
CVE
CVE
added 2026/02/27 3:32 a.m.10 views

CVE-2026-3286

The CVE-2026-3286 entry concerns itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3. The vulnerable component is the Image Save Endpoint, specifically the Save function in paicoding-web/src/main/java/com/github/paicoding/forum/web/common/image/rest/ImageRestController.java. The issue arises from manipula...

6.5CVSS6.3AI score0.00312EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2026/02/27 3:32 a.m.23 views

CVE-2026-3286 itwanger paicoding Image Save Endpoint ImageRestController.java save server-side request forgery

A vulnerability was identified in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3. The impacted element is the function Save of the file paicoding-web/src/main/java/com/github/paicoding/forum/web/common/image/rest/ImageRestController.java of the component Image Save Endpoint. Such manipulation of the...

6.5CVSS0.00312EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2026/02/27 3:32 a.m.4 views

CVE-2026-3286 itwanger paicoding Image Save Endpoint ImageRestController.java save server-side request forgery

A vulnerability was identified in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3. The impacted element is the function Save of the file paicoding-web/src/main/java/com/github/paicoding/forum/web/common/image/rest/ImageRestController.java of the component Image Save Endpoint. Such manipulation of the...

6.5CVSS6.4AI score0.00312EPSS
Exploits1References4
Snyk
Snyk
added 2026/02/27 3:20 a.m.3 views

Improper Resource Shutdown or Release

Overview Affected versions of this package are vulnerable to Improper Resource Shutdown or Release in the handleRequestInternal function of the Session Handler component. An attacker can cause a service disruption by sending specially crafted requests remotely. Remediation There is no fixed versi...

6.5CVSS5.9AI score0.00561EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2026/02/27 1:5 a.m.11 views

CVE-2025-67860

A vulnerability has been identified in the NeuVector scanner where the scanner process accepts registry and controller credentials as command-line arguments, potentially exposing sensitive credentials to local users...

3.8CVSS5.3AI score0.00091EPSS
Exploits0References1
EUVD
EUVD
added 2026/02/27 12:31 a.m.5 views

EUVD-2026-8941

A flaw has been found in psi-probe PSI Probe up to 5.3.0. The impacted element is the function handleRequestInternal of the file psi-probe-core/src/main/java/psiprobe/controllers/sessions/ExpireSessionsController.java of the component Session Handler. Executing a manipulation can lead to denial o...

5.3CVSS5.1AI score0.00561EPSS
Exploits1References5
OSV
OSV
added 2026/02/27 12:31 a.m.5 views

GHSA-RX6W-2W6H-R346 PSI Probe: Broken access control can lead to DoS

A flaw has been found in psi-probe PSI Probe up to 5.3.0. The impacted element is the function handleRequestInternal of the file psi-probe-core/src/main/java/psiprobe/controllers/sessions/ExpireSessionsController.java of the component Session Handler. Executing a manipulation can lead to denial o...

5.3CVSS5.5AI score0.00561EPSS
Exploits1References6
Github Security Blog
Github Security Blog
added 2026/02/27 12:31 a.m.4 views

PSI Probe: Broken access control can lead to DoS

A flaw has been found in psi-probe PSI Probe up to 5.3.0. The impacted element is the function handleRequestInternal of the file psi-probe-core/src/main/java/psiprobe/controllers/sessions/ExpireSessionsController.java of the component Session Handler. Executing a manipulation can lead to denial o...

6.5CVSS5.5AI score0.00561EPSS
Exploits1References6Affected Software1
NVD
NVD
added 2026/02/27 12:16 a.m.4 views

CVE-2026-3269

A flaw has been found in psi-probe PSI Probe up to 5.3.0. The impacted element is the function handleRequestInternal of the file psi-probe-core/src/main/java/psiprobe/controllers/sessions/ExpireSessionsController.java of the component Session Handler. Executing a manipulation can lead to denial o...

6.5CVSS0.00561EPSS
Exploits1References4
Rows per page
Query Builder