Lucene search
+L

609677 matches found

Cvelist
Cvelist
added 2 days ago29 views

CVE-2026-13048 Data::MuForm::Localizer versions through 0.05 for Perl execute Perl from a message catalog header, reached at an arbitrary path because load_lexicon interpolates the language attribute into the catalog filename

Data::MuForm::Localizer versions through 0.05 for Perl execute Perl from a message catalog header, reached at an arbitrary path because loadlexicon interpolates the language attribute into the catalog filename. loadlexicon builds the catalog path by appending Messages/$lang.po to the directory...

0.00243EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2 days ago3 views

CVE-2026-13048

Data::MuForm::Localizer versions through 0.05 for Perl execute Perl from a message catalog header, reached at an arbitrary path because loadlexicon interpolates the language attribute into the catalog filename. loadlexicon builds the catalog path by appending Messages/$lang.po to the directory...

6.1AI score0.00243EPSS
SaveExploits0References4
EUVD
EUVD
added 2 days ago7 views

EUVD-2026-58117

Data::MuForm::Localizer versions through 0.05 for Perl execute Perl from a message catalog header, reached at an arbitrary path because loadlexicon interpolates the language attribute into the catalog filename. loadlexicon builds the catalog path by appending Messages/$lang.po to the directory...

6.1AI score0.00243EPSS
SaveExploits0References3
EUVD
EUVD
added 2 days ago6 views

EUVD-2022-56018

HTML::FormHandler versions through 0.40068 for Perl allow attacker selected method dispatch and resource exhaustion because applyactions and adderror use error message text built from request data as a Locale::Maketext bracket notation template. adderror hands its first argument to the language...

5.6AI score0.00365EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2 days ago4 views

CVE-2022-4993 HTML::FormHandler versions through 0.40068 for Perl allow attacker selected method dispatch and resource exhaustion because _apply_actions and add_error use error message text built from request data as a Locale::Maketext bracket notation template

HTML::FormHandler versions through 0.40068 for Perl allow attacker selected method dispatch and resource exhaustion because applyactions and adderror use error message text built from request data as a Locale::Maketext bracket notation template. adderror hands its first argument to the language...

5.6AI score0.00365EPSS
SaveExploits0References6
OSV
OSV
added 2 days ago4 views

MAL-2026-14012 Malicious code in single-flight-lock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbe4ec28aff41ab4793722dc5975c5639762d2dc2ed23827d71d410283993ca4 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

5.6AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2 days ago7 views

Malicious code in try-lock-runner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 941a65c056bbb40a20dd7b1f4107bf804df157df12ea0b89067fc6770afe3b6b The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

5.6AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2 days ago8 views

Malicious code in single-flight-lock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbe4ec28aff41ab4793722dc5975c5639762d2dc2ed23827d71d410283993ca4 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

5.6AI score
SaveExploits0References2
OSV
OSV
added 2 days ago4 views

MAL-2026-14014 Malicious code in try-lock-runner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 941a65c056bbb40a20dd7b1f4107bf804df157df12ea0b89067fc6770afe3b6b The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

5.6AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2 days ago8 views

Malicious code in resource-lease-pool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 731d4ed32c1947117f9e7243c0179f5076213414505bf38176e660653df025f1 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

5.6AI score
SaveExploits0References2
OSV
OSV
added 2 days ago7 views

MAL-2026-14003 Malicious code in keyed-mutex-map (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd45a0cb60ef881a4f011fed410aacced4d83f39457bea6c4f21fa7d09076801 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

5.6AI score
SaveExploits0References2
NVD
NVD
added 2 days ago4 views

CVE-2026-73572

In Zimbra Collaboration ZCS before 10.1.17, a stored cross-site scripting XSS vulnerability exists in the Zimbra Classic Web Client due to insufficient sanitization of specific attachment content during inline preview. An attacker can send a crafted email containing a malicious attachment that,...

6.1CVSS0.00155EPSS
SaveExploits0References2
NVD
NVD
added 2 days ago6 views

CVE-2026-73570

A remote code execution vulnerability exists in Zimbra Collaboration ZCS before 10.1.20 when the optional zimbra-snmp package is installed and SNMP notifications are enabled. Due to improper sanitization of untrusted input during SNMP notification processing, an unauthenticated attacker can send...

8.9CVSS0.00539EPSS
SaveExploits0References2
OSV
OSV
added 2 days ago4 views

CVE-2026-19744 Stored Cross-site Scripting in Pentestify Markdown renderer via unescaped quotes

Cross-site Scripting in the Markdown renderer in maalfer Pentestify before 2.3.2 allows authenticated users to execute arbitrary JavaScript in the application origin via a Markdown link whose URL contains a double quote, which closes the anchor's href attribute because the renderer's sanitization...

5.1CVSS5.6AI score
SaveExploits0References6
EUVD
EUVD
added 2 days ago7 views

EUVD-2026-58071

In Zimbra Collaboration ZCS before 10.1.17, a stored cross-site scripting XSS vulnerability exists in the Zimbra Classic Web Client due to insufficient sanitization of specific attachment content during inline preview. An attacker can send a crafted email containing a malicious attachment that,...

6.1CVSS5.1AI score0.00155EPSS
SaveExploits0References2
NVD
NVD
added 2 days ago6 views

CVE-2026-66256

UNSUPPORTED WHEN ASSIGNED Deserialization of Untrusted Data vulnerability in Apache Shindig. This issue affects Apache Shindig: all versions. Users with access to the Shindig REST API can send specially-crafted requests to trigger arbitrary code execution on the server. As this project is retired...

7.2CVSS0.00522EPSS
SaveExploits0References2
NVD
NVD
added 2 days ago6 views

CVE-2026-63423

During an internal security assessment, a potential vulnerability was discovered in Lenovo Accessories and Display Manager for Enterprise for Windows that could allow a local authenticated user to execute arbitrary code with elevated privileges...

8.5CVSS0.0015EPSS
SaveExploits0References2
NVD
NVD
added 2 days ago6 views

CVE-2026-63425

During an internal security assessment, a potential improper permissions vulnerability was discovered in Lenovo Dock Manager that could allow a local authenticated user to execute arbitrary code with elevated privileges...

8.5CVSS0.00109EPSS
SaveExploits0References2
NVD
NVD
added 2 days ago5 views

CVE-2026-53790

rsync before 3.5.0 contains multiple command and argument injection vulnerabilities that allow attackers to execute arbitrary commands by supplying malicious input through several code paths, including the RSYNCCONNECTPROG environment variable, daemon hooks, the rsync-ssl wrapper, and remote-shel...

9.2CVSS0.00515EPSS
SaveExploits0References3
CVE
CVE
added 2 days ago51 views

CVE-2026-73570

In Zimbra Collaboration (ZCS) before 10.1.20, with the optional zimbra-snmp package installed and SNMP notifications enabled, improper sanitization of untrusted input during SNMP notification processing allows an unauthenticated attacker to send crafted SMTP requests that execute arbitrary OS com...

8.9CVSS6.3AI score0.00539EPSS
SaveExploits0References2
Rows per page
Query Builder