Lucene search
+L

8922 matches found

Cvelist
Cvelist
added 2026/03/11 6:00 a.m.47 views

CVE-2026-1867 WP Front User Submit < 5.0.6 - Unauthenticated Sensitive Information Exposure

The Guest posting / Frontend Posting / Front Editor WordPress plugin before 5.0.6 allows passing a URL parameter to regenerate a .json file based on demo data that it initially creates. If an administrator modifies the demo form and enables admin notifications in the Guest posting / Frontend...

0.00221EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/03/11 3:23 a.m.5 views

CVE-2026-29515 MiCode FileExplorer SwiFTP Server Authentication Bypass

MiCode FileExplorer contains an authentication bypass vulnerability in the embedded SwiFTP FTP server component that allows network attackers to log in without valid credentials. Attackers can send arbitrary username and password combinations to the PASS command handler, which unconditionally...

9.3CVSS5.9AI score0.00481EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/03/11 12:00 a.m.17 views

Microsoft DirectX End-User Runtime Web Installer 安全漏洞

Microsoft DirectX End-User Runtime Web Installer is a component installation tool provided by the American company Microsoft. The version 9.29.1974.0 of Microsoft DirectX End-User Runtime Web Installer contains a security vulnerability. This vulnerability arises from the possibility for...

8.8CVSS5.8AI score0.00129EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/03/11 12:00 a.m.11 views

PT-2026-24573

Name of the Vulnerable Software and Affected Versions MiCode FileExplorer affected versions not specified Description The software contains an authentication bypass in the embedded SwiFTP FTP server component. This allows network attackers to log in without valid credentials by sending arbitrary...

9.8CVSS5.9AI score0.00481EPSS
SaveExploits0References11
Vulnrichment
Vulnrichment
added 2026/03/11 12:00 a.m.7 views

CVE-2025-68623

In Microsoft DirectX End-User Runtime Web Installer 9.29.1974.0, a low-privilege user can replace an executable file during the installation process, which may result in unintended elevation of privileges. During installation, the installer runs with HIGH integrity and downloads executables and...

5.8AI score0.00129EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/03/11 12:00 a.m.7 views

CVE-2025-68623

In Microsoft DirectX End-User Runtime Web Installer 9.29.1974.0, a low-privilege user can replace an executable file during the installation process, which may result in unintended elevation of privileges. During installation, the installer runs with HIGH integrity and downloads executables and...

5.8AI score0.00129EPSS
SaveExploits0References3
CVE
CVE
added 2026/03/11 12:00 a.m.21 views

CVE-2025-68623

CVE-2025-68623 affects Microsoft DirectX End-User Runtime Web Installer 9.29.1974.0. Cisco Talos TALOS-2025-2293 documents a local privilege escalation: during installation, the dxwebsetup.exe installer creates a writable TEMP path, writes dxwsetup.exe, then executes it with high integrity. An at...

8.8CVSS5.8AI score0.00129EPSS
SaveExploits0References3
Microsoft KB
Microsoft KB
added 2026/03/10 2:00 p.m.23 views

March 10, 2026—KB5078752 (OS Build 17763.8511)

None None...

8.8CVSS6.8AI score0.04671EPSS
SaveExploits12
Microsoft KB
Microsoft KB
added 2026/03/10 2:00 p.m.21 views

KB5078738: Cumulative security update for Internet Explorer: March 10, 2026

None None...

7.5CVSS7AI score0.01191EPSS
SaveExploits0
Microsoft KB
Microsoft KB
added 2026/03/10 2:00 p.m.132 views

March 10, 2026—KB5078938 (OS Build 14393.8957)

None None...

8.8CVSS6.8AI score0.04671EPSS
SaveExploits12
Microsoft KB
Microsoft KB
added 2026/03/10 2:00 p.m.28 views

March 10, 2026—KB5078775 (Monthly Rollup)

None None...

8.8CVSS6.8AI score0.04671EPSS
SaveExploits12
Microsoft KB
Microsoft KB
added 2026/03/10 2:00 p.m.22 views

March 10, 2026—KB5078774 (Monthly Rollup)

None None...

8.8CVSS6.8AI score0.04671EPSS
SaveExploits12
SUSE CVE
SUSE CVE
added 2026/03/10 12:30 a.m.10 views

SUSE CVE-2026-2219

It was discovered that dpkg-deb a component of dpkg, the Debian package management system does not properly validate the end of the data stream when uncompressing a zstd-compressed .deb archive, which may result in denial of service infinite loop spinning the CPU...

6.5CVSS5.8AI score0.00418EPSS
SaveExploits0References7
Microsoft KB
Microsoft KB
added 2026/03/10 12:00 a.m.21 views

KB5079234: Servicing stack update for Windows Server 2012: March 10, 2026

None None...

6.1AI score
SaveExploits0
EUVD
EUVD
added 2026/03/07 9:30 a.m.18 views

EUVD-2026-10138

It was discovered that dpkg-deb a component of dpkg, the Debian package management system does not properly validate the end of the data stream when uncompressing a zstd-compressed .deb archive, which may result in denial of service infinite loop spinning the CPU...

5.8AI score0.00418EPSS
SaveExploits0References2
NVD
NVD
added 2026/03/07 9:16 a.m.18 views

CVE-2026-2219

It was discovered that dpkg-deb a component of dpkg, the Debian package management system does not properly validate the end of the data stream when uncompressing a zstd-compressed .deb archive, which may result in denial of service infinite loop spinning the CPU...

7.5CVSS0.00418EPSS
SaveExploits0References2
OSV
OSV
added 2026/03/07 9:16 a.m.16 views

ALPINE-CVE-2026-2219

It was discovered that dpkg-deb a component of dpkg, the Debian package management system does not properly validate the end of the data stream when uncompressing a zstd-compressed .deb archive, which may result in denial of service infinite loop spinning the CPU...

7.5CVSS5.4AI score0.00418EPSS
SaveExploits0References1
OSV
OSV
added 2026/03/07 9:16 a.m.8 views

DEBIAN-CVE-2026-2219

It was discovered that dpkg-deb a component of dpkg, the Debian package management system does not properly validate the end of the data stream when uncompressing a zstd-compressed .deb archive, which may result in denial of service infinite loop spinning the CPU...

7.5CVSS5.2AI score0.00418EPSS
SaveExploits0References1
OSV
OSV
added 2026/03/07 9:16 a.m.28 views

UBUNTU-CVE-2026-2219

It was discovered that dpkg-deb a component of dpkg, the Debian package management system does not properly validate the end of the data stream when uncompressing a zstd-compressed .deb archive, which may result in denial of service infinite loop spinning the CPU...

7.5CVSS5.8AI score0.00418EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/03/07 8:10 a.m.13 views

CVE-2026-2219

It was discovered that dpkg-deb a component of dpkg, the Debian package management system does not properly validate the end of the data stream when uncompressing a zstd-compressed .deb archive, which may result in denial of service infinite loop spinning the CPU...

5.8AI score0.00418EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder