Lucene search
+L

2547012 matches found

EUVD
EUVD
added yesterday5 views

EUVD-2026-60372

Notepad++ is a free and open-source source code editor. Prior to 8.9.7, the expandNppEnvironmentStrs function in PowerEditor/src/WinControls/StaticDialog/RunDlg/RunDlg.cpp copies a Notepad++ variable name between $ and into the fixed-size wchart strMAXPATH stack buffer without bounding the m loop...

7.8CVSS5.8AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
added yesterday7 views

CVE-2026-54758 Notepad++: Stack Buffer Overflow in expandNppEnvironmentStrs

Notepad++ is a free and open-source source code editor. Prior to 8.9.7, the expandNppEnvironmentStrs function in PowerEditor/src/WinControls/StaticDialog/RunDlg/RunDlg.cpp copies a Notepad++ variable name between $ and into the fixed-size wchart strMAXPATH stack buffer without bounding the m loop...

7.8CVSS5.8AI score
SaveExploits0References3
CVE
CVE
added yesterday104 views

CVE-2026-54758

Notepad++ is a free and open-source source code editor. Prior to 8.9.7, the expandNppEnvironmentStrs function in PowerEditor/src/WinControls/StaticDialog/RunDlg/RunDlg.cpp copies a Notepad++ variable name between $ and into the fixed-size wchart strMAXPATH stack buffer without bounding the m loop...

7.8CVSS5.8AI score
SaveExploits0References3
Cvelist
Cvelist
added yesterday25 views

CVE-2026-54758 Notepad++: Stack Buffer Overflow in expandNppEnvironmentStrs

Notepad++ is a free and open-source source code editor. Prior to 8.9.7, the expandNppEnvironmentStrs function in PowerEditor/src/WinControls/StaticDialog/RunDlg/RunDlg.cpp copies a Notepad++ variable name between $ and into the fixed-size wchart strMAXPATH stack buffer without bounding the m loop...

7.8CVSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added yesterday4 views

CVE-2026-54758

Notepad++ is a free and open-source source code editor. Prior to 8.9.7, the expandNppEnvironmentStrs function in PowerEditor/src/WinControls/StaticDialog/RunDlg/RunDlg.cpp copies a Notepad++ variable name between $ and into the fixed-size wchart strMAXPATH stack buffer without bounding the m loop...

7.8CVSS5.8AI score
SaveExploits0References4Affected Software1
EUVD
EUVD
added yesterday7 views

EUVD-2026-60371

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.11.11, 19.0 before 19.0.8, 19.1 before 19.1.6, and 19.2 before 19.2.4 that under certain conditions could have allowed an unauthenticated user to execute mutations via GET requests due to improper request...

7.1CVSS6AI score
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added yesterday3 views

CVE-2026-19650

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.11.11, 19.0 before 19.0.8, 19.1 before 19.1.6, and 19.2 before 19.2.4 that under certain conditions could have allowed an unauthenticated user to execute mutations via GET requests due to improper request...

7.1CVSS5.5AI score
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added yesterday31 views

CVE-2026-19650 Cross-Site Request Forgery (CSRF) in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.11.11, 19.0 before 19.0.8, 19.1 before 19.1.6, and 19.2 before 19.2.4 that under certain conditions could have allowed an unauthenticated user to execute mutations via GET requests due to improper request...

7.1CVSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added yesterday7 views

CVE-2026-19650 Cross-Site Request Forgery (CSRF) in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.11.11, 19.0 before 19.0.8, 19.1 before 19.1.6, and 19.2 before 19.2.4 that under certain conditions could have allowed an unauthenticated user to execute mutations via GET requests due to improper request...

7.1CVSS5.9AI score
SaveExploits1References3
CVE
CVE
added yesterday41 views

CVE-2026-19650

In GitLab CE/EE, improper request validation in GraphQL multiplex query handling allowed an unauthenticated user to execute mutations via GET requests. Affected versions are 18.2 before 18.11.11, 19.0 before 19.0.8, 19.1 before 19.1.6, and 19.2 before 19.2.4. CVSS 3.1 scores 7.1 (HIGH), with high...

7.1CVSS5.6AI score
SaveExploits1References3
Vulnrichment
Vulnrichment
added yesterday3 views

CVE-2026-19478 Improper Control of Generation of Code ('Code Injection') in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.11.11, 19.0 before 19.0.8, 19.1 before 19.1.6, and 19.2 before 19.2.4 that under certain conditions could allow an unauthenticated user to remotely modify or delete public projects and user data via a GraphQ...

9.4CVSS5.8AI score
SaveExploits2References3
Cvelist
Cvelist
added yesterday46 views

CVE-2026-19478 Improper Control of Generation of Code ('Code Injection') in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.11.11, 19.0 before 19.0.8, 19.1 before 19.1.6, and 19.2 before 19.2.4 that under certain conditions could allow an unauthenticated user to remotely modify or delete public projects and user data via a GraphQ...

9.4CVSS
SaveExploits2References3
Vulnrichment
Vulnrichment
added yesterday5 views

CVE-2026-63667 ApostropheCMS: Arbitrary file read via import-export attachment-name path traversal

ApostropheCMS is an open-source Node.js content management system. Prior to 3.6.2, the import-export module in packages/import-export/lib/formats/gzip.js constructs an attachment source path from the attacker-controlled id, name, and extension fields in aposAttachments.json without ensuring that...

6.5CVSS5.3AI score
SaveExploits0References2
Cvelist
Cvelist
added yesterday25 views

CVE-2026-63667 ApostropheCMS: Arbitrary file read via import-export attachment-name path traversal

ApostropheCMS is an open-source Node.js content management system. Prior to 3.6.2, the import-export module in packages/import-export/lib/formats/gzip.js constructs an attachment source path from the attacker-controlled id, name, and extension fields in aposAttachments.json without ensuring that...

6.5CVSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
added yesterday8 views

Security Bulletin: IBM Financial Transaction Manager v4.0.6.0 is impacted by multiple vulnerabilities in RedHat Universal Base Image

Summary IBM Financial Transaction Manager v4.0.6.0 has addressed the following vulnerabilities. Vulnerability Details CVEID:CVE-2025-5914 DESCRIPTION: A vulnerability has been identified in the libarchive library, specifically within the archivereadformatrarseekdata function. This flaw involves a...

9.8CVSS8.3AI score0.74866EPSS
SaveExploits13Affected Software1
RedhatCVE
RedhatCVE
added yesterday5 views

CVE-2026-72070

A flaw was found in the Linux kernel's libertastf Wi-Fi driver. This vulnerability is a use-after-free, meaning the system attempts to access memory after it has been released. This occurs when the lbtffreeadapter function, responsible for freeing adapter resources, does not properly synchronize...

5.5CVSS5.6AI score0.00209EPSS
SaveExploits0References4
EUVD
EUVD
added yesterday7 views

EUVD-2026-60439

A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the file /admin/getbarcodedata.php. This manipulation of the argument barcode causes sql injection. The attack may be initiated remotely. The exploit has been published and may...

7.5CVSS5.4AI score
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added yesterday3 views

CVE-2026-75014

A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the file /admin/getbarcodedata.php. This manipulation of the argument barcode causes sql injection. The attack may be initiated remotely. The exploit has been published and may...

7.5CVSS7.2AI score
SaveExploits0References6Affected Software1
Vulnrichment
Vulnrichment
added yesterday6 views

CVE-2026-75014 SourceCodester Pet Grooming Management Software get_barcode_data.php sql injection

A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the file /admin/getbarcodedata.php. This manipulation of the argument barcode causes sql injection. The attack may be initiated remotely. The exploit has been published and may...

7.5CVSS5.4AI score
SaveExploits0References6
CVE
CVE
added yesterday14 views

CVE-2026-75014

SourceCodester Pet Grooming Management Software 1.0 has a SQL injection in /admin/get_barcode_data.php via the barcode parameter, exploitable remotely without authentication. CVSS 7.5 HIGH (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:P/I:P/A:P), proof-of-concept published; no patch version or vendor fix d...

7.5CVSS7.3AI score
SaveExploits0References6
Rows per page
Query Builder