Lucene search
+L

50771 matches found

EUVD
EUVD
added 2026/04/06 7:06 p.m.15 views

EUVD-2026-19454

WWBN AVideo is an open source video platform. In versions 26.0 and prior, the site customization endpoint at admin/customizesettingsnativeUpdate.json.php lacks CSRF token validation and writes uploaded logo files to disk before the ORM's domain-based security check executes. Combined with...

4.3CVSS5.8AI score0.00112EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2026/04/06 7:06 p.m.30 views

CVE-2026-35180 WWBN AVideo affected by CSRF on Site Customization Endpoint Enables Logo Overwrite via Base64 File Write

WWBN AVideo is an open source video platform. In versions 26.0 and prior, the site customization endpoint at admin/customizesettingsnativeUpdate.json.php lacks CSRF token validation and writes uploaded logo files to disk before the ORM's domain-based security check executes. Combined with...

4.3CVSS0.00112EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/04/06 10:57 a.m.13 views

CVE-2026-34787

Emlog is an open source website building system. In versions 2.6.2 and prior, a Local File Inclusion LFI vulnerability exists in admin/plugin.php at line 80. The $plugin parameter from the GET request is directly used in a requireonce path without proper sanitization. If the CSRF token check can ...

6.5CVSS6.1AI score0.00511EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/04/06 10:57 a.m.7 views

CVE-2026-34228

Emlog is an open source website building system. Prior to version 2.6.8, the backend upgrade interface accepts remote SQL and ZIP URLs via GET parameters. The server first downloads and executes the SQL file, then downloads the ZIP file and extracts it directly into the web root directory. This...

8.7CVSS6.1AI score0.00188EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2026/04/05 12:00 a.m.13 views

Linux Distros Unpatched Vulnerability : CVE-2026-35538

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. Unsanitized IMAP SEARCH command arguments could lead to IMAP injection or CSRF bypass...

3.1CVSS4.8AI score0.00283EPSS
SaveExploits0References2
Debian
Debian
added 2026/04/04 7:53 p.m.38 views

[SECURITY] [DSA 6196-1] roundcube security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6196-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 04, 2026 https://www.debian.org/security/faq -...

8.2CVSS5.9AI score0.00475EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2026/04/04 1:50 p.m.7 views

CVE-2016-20053 Redaxo CMS 5.2 Cross-Site Request Forgery via users endpoint

Redaxo CMS 5.2 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create administrative user accounts by tricking authenticated administrators into visiting malicious pages. Attackers can craft HTML forms targeting the users endpoint with hidden fields...

6.9CVSS5.9AI score0.00146EPSS
SaveExploits1References2
NVD
NVD
added 2026/04/03 11:17 p.m.11 views

CVE-2026-34228

Emlog is an open source website building system. Prior to version 2.6.8, the backend upgrade interface accepts remote SQL and ZIP URLs via GET parameters. The server first downloads and executes the SQL file, then downloads the ZIP file and extracts it directly into the web root directory. This...

8.7CVSS0.00188EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2026/04/03 11:02 p.m.16 views

CVE-2026-34932

hoppscotch is an open source API development ecosystem. Prior to version 2026.3.0, there is a stored XSS vulnerability that can lead to CSRF. This issue has been patched in version 2026.3.0...

9.3CVSS5.8AI score0.00288EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/04/03 10:36 p.m.20 views

EUVD-2026-18905

Emlog is an open source website building system. In versions 2.6.2 and prior, a Local File Inclusion LFI vulnerability exists in admin/plugin.php at line 80. The $plugin parameter from the GET request is directly used in a requireonce path without proper sanitization. If the CSRF token check can ...

6.5CVSS6.1AI score0.00511EPSS
SaveExploits1References1
CVE
CVE
added 2026/04/03 10:36 p.m.22 views

CVE-2026-34787

CVE-2026-34787 affects Emlog up to version 2.6.2. An LFI exists in admin/plugin.php (line 80) where the GET parameter $plugin is directly used in a require_once path without sanitization. If a CSRF bypass is possible, an attacker could include arbitrary PHP files from the server filesystem, enabl...

6.5CVSS6.1AI score0.00511EPSS
SaveExploits1References1Affected Software1
EUVD
EUVD
added 2026/04/03 10:28 p.m.10 views

EUVD-2026-18897

Emlog is an open source website building system. Prior to version 2.6.8, the backend upgrade interface accepts remote SQL and ZIP URLs via GET parameters. The server first downloads and executes the SQL file, then downloads the ZIP file and extracts it directly into the web root directory. This...

8.7CVSS6.1AI score0.00188EPSS
SaveExploits1References2
NVD
NVD
added 2026/04/03 5:16 a.m.12 views

CVE-2026-35538

An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. Unsanitized IMAP SEARCH command arguments could lead to IMAP injection or CSRF bypass during mail search...

3.1CVSS0.00283EPSS
SaveExploits0References7
OSV
OSV
added 2026/04/03 5:16 a.m.54 views

UBUNTU-CVE-2026-35538

An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. Unsanitized IMAP SEARCH command arguments could lead to IMAP injection or CSRF bypass during mail search...

3.1CVSS5.8AI score0.00283EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
added 2026/04/03 5:16 a.m.11 views

CVE-2026-35538

An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. Unsanitized IMAP SEARCH command arguments could lead to IMAP injection or CSRF bypass during mail search...

3.1CVSS5.9AI score0.00283EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/04/03 12:00 a.m.16 views

PT-2026-30256

Name of the Vulnerable Software and Affected Versions Emlog versions prior to 2.6.8 Description The backend upgrade interface allows the submission of remote SQL and ZIP URLs through GET parameters. The server downloads and executes the SQL file and extracts the ZIP file directly into the web roo...

8.7CVSS6.2AI score0.00188EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
added 2026/04/02 2:44 p.m.6 views

CVE-2026-34728 phpMyFAQ: Path Traversal - Arbitrary File Deletion in MediaBrowserController

phpMyFAQ is an open source FAQ web application. Prior to version 4.1.1, the MediaBrowserController::index method handles file deletion for the media browser. When the fileRemove action is triggered, the user-supplied name parameter is concatenated with the base upload directory path without any...

8.7CVSS5.7AI score0.00693EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2026/04/01 11:00 p.m.5 views

CVE-2026-34384

Admidio is an open-source user management solution. Prior to version 5.0.8, the createuser, assignmember, and assignuser action modes in modules/registration.php approve pending user registrations via GET request without validating a CSRF token. Unlike the deleteuser mode in the same file which...

7.3CVSS5.8AI score0.00169EPSS
SaveExploits1References1
Snyk
Snyk
added 2026/04/01 10:30 p.m.10 views

Directory Traversal

Overview thorsten/phpmyfaq is a FAQ system for PHP and MySQL, PostgreSQL and other databases Affected versions of this package are vulnerable to Directory Traversal via the index function in MediaBrowserController when the fileRemove action is triggered and user input is concatenated with the...

8.7CVSS6.5AI score0.00693EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
added 2026/04/01 10:30 p.m.15 views

phpMyFAQ: Path Traversal - Arbitrary File Deletion in MediaBrowserController

Summary The MediaBrowserController::index method handles file deletion for the media browser. When the fileRemove action is triggered, the user-supplied name parameter is concatenated with the base upload directory path without any path traversal validation. The FILTERSANITIZESPECIALCHARS filter...

8.7CVSS6AI score0.00693EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder