Lucene search
+L

2535412 matches found

CVE
CVE
added 1 hour ago5 views

CVE-2026-50060

A vulnerability has been identified in Solid Edge SE2025 All versions V225.0 Update 15, Solid Edge SE2026 All versions V226.0 Update 7. The affected applications contain a use-after-free vulnerability that could be triggered while parsing specially crafted DFT files. This could allow an attacker ...

7.8CVSS5.5AI score
SaveExploits0References1
EUVD
EUVD
added 1 hour ago3 views

EUVD-2026-56112

A vulnerability has been identified in Solid Edge SE2025 All versions V225.0 Update 15, Solid Edge SE2026 All versions V226.0 Update 7. The affected applications contain a use-after-free vulnerability that could be triggered while parsing specially crafted DFT files. This could allow an attacker ...

7.8CVSS5.5AI score
SaveExploits0References1
Cvelist
Cvelist
added 1 hour ago5 views

CVE-2026-50060

A vulnerability has been identified in Solid Edge SE2025 All versions V225.0 Update 15, Solid Edge SE2026 All versions V226.0 Update 7. The affected applications contain a use-after-free vulnerability that could be triggered while parsing specially crafted DFT files. This could allow an attacker ...

7.8CVSS
SaveExploits0References1
CVE
CVE
added 1 hour ago5 views

CVE-2026-50059

A vulnerability has been identified in Solid Edge SE2025 All versions V225.0 Update 15, Solid Edge SE2026 All versions V226.0 Update 7. The affected applications contains an out of bounds write vulnerability while parsing specially crafted DFT files. This could allow an attacker to execute code i...

7.8CVSS5.4AI score
SaveExploits0References1
Cvelist
Cvelist
added 1 hour ago5 views

CVE-2026-50059

A vulnerability has been identified in Solid Edge SE2025 All versions V225.0 Update 15, Solid Edge SE2026 All versions V226.0 Update 7. The affected applications contains an out of bounds write vulnerability while parsing specially crafted DFT files. This could allow an attacker to execute code i...

7.8CVSS
SaveExploits0References1
EUVD
EUVD
added 1 hour ago5 views

EUVD-2026-56111

A vulnerability has been identified in Solid Edge SE2025 All versions V225.0 Update 15, Solid Edge SE2026 All versions V226.0 Update 7. The affected applications contains an out of bounds write vulnerability while parsing specially crafted DFT files. This could allow an attacker to execute code i...

7.8CVSS5.4AI score
SaveExploits0References1
Cvelist
Cvelist
added 1 hour ago5 views

CVE-2026-50058

A vulnerability has been identified in Solid Edge SE2025 All versions V225.0 Update 15, Solid Edge SE2026 All versions V226.0 Update 7. The affected applications contains an out of bounds read vulnerability while parsing specially crafted DFT files. This could allow an attacker to execute code in...

7.8CVSS
SaveExploits0References1
CVE
CVE
added 1 hour ago4 views

CVE-2026-50058

A vulnerability has been identified in Solid Edge SE2025 All versions V225.0 Update 15, Solid Edge SE2026 All versions V226.0 Update 7. The affected applications contains an out of bounds read vulnerability while parsing specially crafted DFT files. This could allow an attacker to execute code in...

7.8CVSS5.4AI score
SaveExploits0References1
EUVD
EUVD
added 1 hour ago2 views

EUVD-2026-56110

A vulnerability has been identified in Solid Edge SE2025 All versions V225.0 Update 15, Solid Edge SE2026 All versions V226.0 Update 7. The affected applications contains an out of bounds read vulnerability while parsing specially crafted DFT files. This could allow an attacker to execute code in...

7.8CVSS5.4AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 1 hour ago2 views

Malicious code in newtun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adc90e76cf26bdb3145704cfb477f3a5215670556d03ff2959dde595a8bb0598 The newtun CLI opens a plaintext WebSocket to the hardcoded server pull.7ii.win:7999 and hands the remote peer complete control of the installer's...

5.5AI score
SaveExploits0References22
NVD
NVD
added 1 hour ago2 views

CVE-2026-72609

An SQL injection vulnerability in Koha through 24.11.17, 25.05.12, 25.11.06, and 26.05.01 allows authenticated staff with the acquisition = orderreceive permission to read arbitrary database contents via the orderby request parameter in acqui/parcels.pl. The parameter is passed to...

7.1CVSS
SaveExploits0References2
NVD
NVD
added 1 hour ago2 views

CVE-2026-72602

A path traversal vulnerability in AsyncFuncAI deepwiki-open through commit 16f35a0 allows unauthenticated remote attackers to obtain directory listings for arbitrary filesystem paths via the local-repository structure endpoint. The endpoint accepts an absolute filesystem path parameter and return...

7.5CVSS
SaveExploits0References1
NVD
NVD
added 1 hour ago2 views

CVE-2026-72604

A path traversal vulnerability in Intelliants Subrion CMS through 4.2.1 allows authenticated administrators to delete arbitrary files on the server via the admin panel file deletion endpoint. The endpoint passes a user-supplied file path directly to unlink without sanitization or path...

6.5CVSS
SaveExploits0References1
NVD
NVD
added 1 hour ago2 views

CVE-2026-72605

A missing authentication vulnerability in Swing Music 3.0.0 allows unauthenticated remote attackers to create arbitrary user accounts via the POST /auth/profile/create endpoint. The endpoint is allowlisted from JWT verification, permitting unauthenticated account creation. An attacker can registe...

7.5CVSS
SaveExploits0References1
NVD
NVD
added 1 hour ago2 views

CVE-2026-72608

A stored SQL injection vulnerability in Koha through 24.11.17, 25.05.12, 25.11.06, and 26.05.01 allows authenticated staff with the tools = labelcreator permission to execute arbitrary SQL via the imagename field of a patron card layout. The imagename value is stored verbatim in the layout XML an...

6.5CVSS
SaveExploits0References2
NVD
NVD
added 1 hour ago2 views

CVE-2026-72606

A server-side request forgery vulnerability in Pinry through 2.1.13 allows unauthenticated remote attackers to make the server issue HTTP requests to arbitrary internal or external hosts via the pin-from-URL feature. The feature passes the user-supplied URL directly to requests.get without host o...

7.5CVSS
SaveExploits0References1
NVD
NVD
added 1 hour ago2 views

CVE-2026-72603

An OS command injection vulnerability in wg-easy 15.3.0 allows users with the clients.create permission to execute arbitrary commands as root by injecting newline-delimited WireGuard PostUp directives into the client name field. The client name is written to the WireGuard configuration file witho...

9.9CVSS
SaveExploits0References1
NVD
NVD
added 1 hour ago2 views

CVE-2026-72607

A stored SQL injection vulnerability in Koha through 24.11.17, 25.05.12, 25.11.06, and 26.05.01 allows authenticated staff with the tools = itemsbatchmod permission to read arbitrary database contents by storing a SQL payload in the agefield value of an automatic item modification rule. The...

7.1CVSS
SaveExploits0References2
NVD
NVD
added 1 hour ago2 views

CVE-2026-72599

An SQL injection vulnerability in e107 2.4.0 allows unauthenticated remote attackers to execute arbitrary SQL via the news item page ID parameter. The parameter is concatenated without escaping into a SQL WHERE clause. An unauthenticated attacker can read, modify, or delete all database contents...

9.8CVSS
SaveExploits0References1
NVD
NVD
added 1 hour ago2 views

CVE-2026-72562

An SQL injection vulnerability in Pimcore admin-ui-classic-bundle through version 2.3 allows authenticated backend users to execute arbitrary SQL via the DataObject grid id column filter. The filter value is concatenated directly into the SQL WHERE clause without parameterization. An attacker wit...

8.8CVSS
SaveExploits0References1
Rows per page
Query Builder