Lucene search
+L

112 matches found

attackerkb
attackerkb
•added 2026/07/06 6:21 p.m.•12 views

CVE-2026-9182

Esri ArcGIS Server contains an unrestricted file upload vulnerability. An unauthenticated attacker could exploit this issue by uploading a crafted file to the affected endpoint. Successful exploitation could allow arbitrary file upload, potentially allowing for other attacks. This issue impacts a...

9.8CVSS6.1AI score0.00619EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/07/06 6:21 p.m.•16 views

EUVD-2026-41896

ArcGIS Server contains an unrestricted file upload vulnerability. An unauthenticated attacker could exploit this issue by uploading a crafted file to the affected endpoint. Successful exploitation could allow arbitrary file upload...

5.3CVSS6.1AI score0.00619EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/06/11 10:21 a.m.•17 views

CVE-2026-1500 Allocation of Resources Without Limits or Throttling in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.10 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authenticated user to cause denial of service due to uncontrolled resource consumption when processing ...

6.5CVSS5.5AI score0.00321EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/06/11 10:21 a.m.•45 views

CVE-2026-1500 Allocation of Resources Without Limits or Throttling in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.10 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authenticated user to cause denial of service due to uncontrolled resource consumption when processing ...

6.5CVSS0.00321EPSS
SaveExploits0References3
GithubExploit
GithubExploit
•added 2026/06/10 3:42 p.m.•108 views

Exploit for Improper Encoding or Escaping of Output in Cisco Catalyst_Sd-Wan_Manager

CVE-2026-20245 - Cisco SD-WAN Privilege Escalation Exploit !...

7.8CVSS6AI score0.25323EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
•added 2026/06/09 12:00 a.m.•19 views

Cisco Catalyst SD-WAN Controller, Catalyst SD-WAN Manager, and Catalyst SD-WAN Validator Authenticated Privilege Escalation (cisco-sa-sdwan-privesc-4uxFrdzx)

According to its self-reported version, Cisco SD-WAN Viptela Software is affected by a vulnerability. - A vulnerability in the CLI of Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD- WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly...

7.8CVSS7.9AI score0.25323EPSS
SaveExploits2References3
RedhatCVE
RedhatCVE
•added 2026/06/06 12:43 a.m.•19 views

CVE-2026-20245

A vulnerability in the CLI of Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an authenticated, local attacker to execute arbitrary commands as root by supplyi...

7.8CVSS6.3AI score0.25323EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
•added 2026/06/05 7:34 p.m.•22 views

CVE-2026-1184

GitLab has remediated an issue in GitLab EE affecting all versions from 11.9 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an unauthenticated user to cause denial of service by uploading a specially crafted file due to improper validation...

7.5CVSS5.5AI score0.00331EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2026/06/05 12:00 a.m.•43 views

VulnCheck KEV: CVE-2026-20245

Cisco Catalyst SD-WAN Manager formerly SD-WAN vManage contains an improper encoding or escaping of output vulnerability. This vulnerability could allow an authenticated, local attacker to execute arbitrary commands as root by supplying a crafted file to the affected system...

7.8CVSS8AI score0.25323EPSS
SaveIn wildExploits2References6
CVE
CVE
•added 2026/06/04 10:33 p.m.•297 views

CVE-2026-20245

Cisco Catalyst SD-WAN Manager (formerly SD-WAN vManage) is affected by CVE-2026-20245. The vulnerability arises from insufficient validation of user-supplied input in the CLI, enabling an authenticated, local attacker to upload a crafted file and perform command injection, potentially elevating p...

7.8CVSS8.2AI score0.25323EPSS
SaveIn wildExploits2References3Affected Software2
attackerkb
attackerkb
•added 2026/06/04 10:33 p.m.•10 views

CVE-2026-20245

A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, local attacker to execute arbitrary commands as root by supplying a crafted file to the affected system. This vulnerability is due to insufficient validation of user-supplied input...

7.8CVSS6.1AI score0.25323EPSS
SaveExploits2References3Affected Software1
Cisco
Cisco
•added 2026/06/04 10:27 p.m.•157 views

Cisco Catalyst SD-WAN Controller, Catalyst SD-WAN Manager, and Catalyst SD-WAN Validator Authenticated Privilege Escalation Vulnerability

A vulnerability in the CLI of Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an authenticated, local attacker to execute arbitrary commands as root by supplyi...

7.8CVSS7.2AI score0.25323EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
•added 2026/06/04 12:00 a.m.•53 views

PT-2026-46400

Name of the Vulnerable Software and Affected Versions Cisco Catalyst SD-WAN Controller affected versions not specified Cisco Catalyst SD-WAN Manager affected versions not specified Cisco Catalyst SD-WAN Validator affected versions not specified Description A vulnerability in the CLI of the affect...

7.8CVSS7.6AI score0.25323EPSS
SaveExploits2References253
NVD
NVD
•added 2026/05/14 6:16 a.m.•33 views

CVE-2026-1184

GitLab has remediated an issue in GitLab EE affecting all versions from 11.9 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an unauthenticated user to cause denial of service by uploading a specially crafted file due to improper validation...

7.5CVSS0.00331EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2026/05/14 6:16 a.m.•24 views

CVE-2026-1184

GitLab has remediated an issue in GitLab EE affecting all versions from 11.9 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an unauthenticated user to cause denial of service by uploading a specially crafted file due to improper validation...

7.5CVSS5.8AI score0.00331EPSS
SaveExploits0References4
OSV
OSV
•added 2026/05/14 6:16 a.m.•28 views

UBUNTU-CVE-2026-1184

GitLab has remediated an issue in GitLab EE affecting all versions from 11.9 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an unauthenticated user to cause denial of service by uploading a specially crafted file due to improper validation...

7.5CVSS5.8AI score0.00331EPSS
SaveExploits0References5
CVE
CVE
•added 2026/05/14 5:37 a.m.•50 views

CVE-2026-1184

CVE-2026-1184 – GitLab : A deserialization of untrusted data vulnerability in GitLab EE/CE allowed an unauthenticated user to cause a denial of service by uploading a specially crafted file, due to improper validation. Affected versions include GitLab CE/EE 11.9–before 18.9.7, 18.10–before 18.10....

7.5CVSS5.8AI score0.00331EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
•added 2026/05/14 5:37 a.m.•21 views

EUVD-2026-30219

GitLab has remediated an issue in GitLab EE affecting all versions from 11.9 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an unauthenticated user to cause denial of service by uploading a specially crafted file due to improper validation...

6.5CVSS5.8AI score0.00331EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/05/12 12:00 a.m.•25 views

PT-2026-40047

An arbitrary file upload vulnerability in MK-Auth 23.01K4.9 allows attackers to execute arbitrary code via uploading a crafted PHP file...

6.2AI score0.00332EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/03/18 12:00 a.m.•18 views

CVE-2026-29859

An arbitrary file upload vulnerability in aaPanel v7.57.0 allows attackers to execute arbitrary code via uploading a crafted file...

6.2AI score0.00775EPSS
SaveExploits1References2
Rows per page
Query Builder