Lucene search
+L

40646 matches found

OSV
OSV
•added 2026/07/27 2:06 p.m.•12 views

MINI-77XG-PPPF-48X6

Bulletin has no description...

8.7CVSS6.5AI score0.00787EPSS
SaveExploits0
OSV
OSV
•added 2026/07/27 2:06 p.m.•11 views

MINI-P9WV-F7GP-JCRG

Bulletin has no description...

5.3CVSS6AI score0.00336EPSS
SaveExploits0
OSV
OSV
•added 2026/07/27 2:06 p.m.•11 views

MINI-P8QG-9J73-8GXG

Bulletin has no description...

5.3CVSS6AI score0.00336EPSS
SaveExploits0
OSV
OSV
•added 2026/07/27 2:05 p.m.•12 views

MINI-77HF-RJWC-PQJH

Bulletin has no description...

7.5CVSS7.9AI score0.0063EPSS
SaveExploits0
OSV
OSV
•added 2026/07/27 2:05 p.m.•9 views

MINI-6WP7-X896-MW6F

Bulletin has no description...

4.7CVSS7.9AI score0.00146EPSS
SaveExploits1
Vulnrichment
Vulnrichment
•added 2026/07/27 1:59 p.m.•16 views

CVE-2026-59552 WordPress 3D Flipbook PDF Viewer & Embedder plugin <= 1.4.2 - Server Side Request Forgery (SSRF) vulnerability

Unauthenticated Server Side Request Forgery SSRF in 3D Flipbook PDF Viewer & Embedder = 1.4.2 versions...

7.2CVSS5.8AI score0.00266EPSS
SaveExploits0References1
The Hacker News
The Hacker News
•added 2026/07/27 12:37 p.m.•82 views

Operation BlueDash Deploys Level RMM and ScreenConnect via Fake Teams Update

Cybersecurity researchers have flagged a Microsoft Teams-themed phishing campaign that employs "secure document" lures to deliver legitimate remote monitoring and management RMM tools. "The victim was directed through compromised web infrastructure to a counterfeit Microsoft Store page claiming...

6AI score
SaveExploits0
CVE
CVE
•added 2026/07/27 10:29 a.m.•41 views

CVE-2026-57916

CVE-2026-57916 affects proCertum SmartSign. The flaw arises when SmartSign opens a Certificate Practice Statement (CPS) URI without validating its schema, enabling an attacker to craft a certificate with a CPS URI pointing to a local executable or any URL. When a victim signs a document with such...

4.6CVSS6AI score0.00111EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/07/27 9:25 a.m.•13 views

CVE-2026-16400

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the DOM: Security component...

7.5CVSS5.9AI score0.00248EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2026/07/27 9:24 a.m.•15 views

CVE-2026-16394

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the DOM: Security component...

9.1CVSS5.9AI score0.00251EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2026/07/27 8:58 a.m.•21 views

CVE-2026-16366

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DOM: Navigation component...

8.8CVSS5.9AI score0.00269EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2026/07/27 8:58 a.m.•17 views

CVE-2026-16365

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DOM: Workers component...

8.8CVSS5.9AI score0.00278EPSS
SaveExploits0References7
NVD
NVD
•added 2026/07/27 7:16 a.m.•24 views

CVE-2026-12982

The Document Gallery WordPress plugin before 5.1.1 does not properly sanitise and escape user input before reflecting it back in the response of an unauthenticated AJAX action, leading to a Reflected Cross-Site Scripting vulnerability which can be exploited against unauthenticated users...

6.1CVSS0.00275EPSS
SaveExploits0References1
CVE
CVE
•added 2026/07/27 6:00 a.m.•44 views

CVE-2026-12982

The Document Gallery WordPress plugin, in versions prior to 5.1.1 , is vulnerable to a Reflected Cross-Site Scripting (XSS) flaw. The issue arises because the plugin fails to properly sanitise and escape user input before reflecting it in the response of an unauthenticated AJAX action . Specifica...

6.1CVSS5.9AI score0.00275EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/27 6:00 a.m.•18 views

CVE-2026-12982

The Document Gallery WordPress plugin before 5.1.1 does not properly sanitise and escape user input before reflecting it back in the response of an unauthenticated AJAX action, leading to a Reflected Cross-Site Scripting vulnerability which can be exploited against unauthenticated users...

5.9AI score0.00275EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/07/27 6:00 a.m.•49 views

CVE-2026-12982 Document Gallery < 5.1.1 - Reflected XSS via dg_generate_gallery

The Document Gallery WordPress plugin before 5.1.1 does not properly sanitise and escape user input before reflecting it back in the response of an unauthenticated AJAX action, leading to a Reflected Cross-Site Scripting vulnerability which can be exploited against unauthenticated users...

0.00275EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/07/27 6:00 a.m.•19 views

EUVD-2026-49068

The Document Gallery WordPress plugin before 5.1.1 does not properly sanitise and escape user input before reflecting it back in the response of an unauthenticated AJAX action, leading to a Reflected Cross-Site Scripting vulnerability which can be exploited against unauthenticated users...

6.1CVSS5.9AI score0.00275EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/07/27 6:00 a.m.•13 views

CVE-2026-12982 Document Gallery < 5.1.1 - Reflected XSS via dg_generate_gallery

The Document Gallery WordPress plugin before 5.1.1 does not properly sanitise and escape user input before reflecting it back in the response of an unauthenticated AJAX action, leading to a Reflected Cross-Site Scripting vulnerability which can be exploited against unauthenticated users...

5.9AI score0.00275EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/07/27 12:00 a.m.•24 views

PT-2026-64835

The Document Gallery WordPress plugin before 5.1.1 does not properly sanitise and escape user input before reflecting it back in the response of an unauthenticated AJAX action, leading to a Reflected Cross-Site Scripting vulnerability which can be exploited against unauthenticated users...

5.9AI score0.00275EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/27 12:00 a.m.•5 views

CVE-2026-12982: Improper Neutralization of Input During Web Page Generation

The Document Gallery WordPress plugin before 5.1.1 does not properly sanitise and escape user input before reflecting it back in the response of an unauthenticated AJAX action, leading to a Reflected Cross-Site Scripting vulnerability which can be exploited against unauthenticated users...

6.1CVSS5.9AI score0.00275EPSS
SaveExploits0References2
Rows per page
Query Builder