Lucene search
+L

609623 matches found

NVD
NVD
added 2 days ago6 views

CVE-2026-73570

A remote code execution vulnerability exists in Zimbra Collaboration ZCS before 10.1.20 when the optional zimbra-snmp package is installed and SNMP notifications are enabled. Due to improper sanitization of untrusted input during SNMP notification processing, an unauthenticated attacker can send...

8.9CVSS0.00539EPSS
SaveExploits0References2
OSV
OSV
added 2 days ago2 views

CVE-2026-19744 Stored Cross-site Scripting in Pentestify Markdown renderer via unescaped quotes

Cross-site Scripting in the Markdown renderer in maalfer Pentestify before 2.3.2 allows authenticated users to execute arbitrary JavaScript in the application origin via a Markdown link whose URL contains a double quote, which closes the anchor's href attribute because the renderer's sanitization...

5.1CVSS5.6AI score
SaveExploits0References6
EUVD
EUVD
added 2 days ago7 views

EUVD-2026-58071

In Zimbra Collaboration ZCS before 10.1.17, a stored cross-site scripting XSS vulnerability exists in the Zimbra Classic Web Client due to insufficient sanitization of specific attachment content during inline preview. An attacker can send a crafted email containing a malicious attachment that,...

6.1CVSS5.1AI score0.00155EPSS
SaveExploits0References2
NVD
NVD
added 2 days ago6 views

CVE-2026-66256

UNSUPPORTED WHEN ASSIGNED Deserialization of Untrusted Data vulnerability in Apache Shindig. This issue affects Apache Shindig: all versions. Users with access to the Shindig REST API can send specially-crafted requests to trigger arbitrary code execution on the server. As this project is retired...

7.2CVSS0.00522EPSS
SaveExploits0References2
NVD
NVD
added 2 days ago6 views

CVE-2026-63423

During an internal security assessment, a potential vulnerability was discovered in Lenovo Accessories and Display Manager for Enterprise for Windows that could allow a local authenticated user to execute arbitrary code with elevated privileges...

8.5CVSS0.0015EPSS
SaveExploits0References2
NVD
NVD
added 2 days ago6 views

CVE-2026-63425

During an internal security assessment, a potential improper permissions vulnerability was discovered in Lenovo Dock Manager that could allow a local authenticated user to execute arbitrary code with elevated privileges...

8.5CVSS0.00109EPSS
SaveExploits0References2
NVD
NVD
added 2 days ago5 views

CVE-2026-53790

rsync before 3.5.0 contains multiple command and argument injection vulnerabilities that allow attackers to execute arbitrary commands by supplying malicious input through several code paths, including the RSYNCCONNECTPROG environment variable, daemon hooks, the rsync-ssl wrapper, and remote-shel...

9.2CVSS0.00515EPSS
SaveExploits0References3
CVE
CVE
added 2 days ago48 views

CVE-2026-73570

In Zimbra Collaboration (ZCS) before 10.1.20, with the optional zimbra-snmp package installed and SNMP notifications enabled, improper sanitization of untrusted input during SNMP notification processing allows an unauthenticated attacker to send crafted SMTP requests that execute arbitrary OS com...

8.9CVSS6.3AI score0.00539EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2 days ago3 views

CVE-2026-73570

A remote code execution vulnerability exists in Zimbra Collaboration ZCS before 10.1.20 when the optional zimbra-snmp package is installed and SNMP notifications are enabled. Due to improper sanitization of untrusted input during SNMP notification processing, an unauthenticated attacker can send...

8.9CVSS6.3AI score0.00539EPSS
SaveExploits0References2
EUVD
EUVD
added 2 days ago5 views

EUVD-2026-58069

A remote code execution vulnerability exists in Zimbra Collaboration ZCS before 10.1.20 when the optional zimbra-snmp package is installed and SNMP notifications are enabled. Due to improper sanitization of untrusted input during SNMP notification processing, an unauthenticated attacker can send...

8.9CVSS6.3AI score0.00539EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2 days ago2 views

CVE-2026-73570

A remote code execution vulnerability exists in Zimbra Collaboration ZCS before 10.1.20 when the optional zimbra-snmp package is installed and SNMP notifications are enabled. Due to improper sanitization of untrusted input during SNMP notification processing, an unauthenticated attacker can send...

8.9CVSS6.3AI score0.00539EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2 days ago28 views

CVE-2026-73570

A remote code execution vulnerability exists in Zimbra Collaboration ZCS before 10.1.20 when the optional zimbra-snmp package is installed and SNMP notifications are enabled. Due to improper sanitization of untrusted input during SNMP notification processing, an unauthenticated attacker can send...

8.9CVSS0.00539EPSS
SaveExploits0References2
OSV
OSV
added 2 days ago3 views

DEBIAN-CVE-2026-53784

rsync before 3.5.0 contains a path traversal vulnerability that allows remote clients to access files outside the intended module root when use chroot is disabled and the module root path or a component of it is a symlink. The daemon calls chdir to the module root at session initialization withou...

8.4CVSS5.5AI score0.00175EPSS
SaveExploits0References1
NVD
NVD
added 2 days ago8 views

CVE-2026-15994

During an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to execute code with elevated privileges...

7.3CVSS0.00156EPSS
SaveExploits0References1
EUVD
EUVD
added 2 days ago7 views

EUVD-2026-58061

During an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to execute code with elevated privileges...

7.3CVSS5.4AI score0.00156EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2 days ago34 views

CVE-2026-15994

During an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to execute code with elevated privileges...

7.3CVSS0.00156EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2 days ago4 views

CVE-2026-63423

During an internal security assessment, a potential vulnerability was discovered in Lenovo Accessories and Display Manager for Enterprise for Windows that could allow a local authenticated user to execute arbitrary code with elevated privileges...

8.5CVSS5.7AI score0.0015EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2 days ago28 views

CVE-2026-63423

During an internal security assessment, a potential vulnerability was discovered in Lenovo Accessories and Display Manager for Enterprise for Windows that could allow a local authenticated user to execute arbitrary code with elevated privileges...

8.5CVSS0.0015EPSS
SaveExploits0References2
CVE
CVE
added 2 days ago22 views

CVE-2026-63423

Technical details about CVE-2026-63423 are not publicly available in the provided documents. Monitor for updates from Lenovo and NVD; no affected products, vectors, or mitigations can be confirmed from the supplied sources.

8.5CVSS5.7AI score0.0015EPSS
SaveExploits0References2
EUVD
EUVD
added 2 days ago6 views

EUVD-2026-58060

During an internal security assessment, a potential vulnerability was discovered in Lenovo Accessories and Display Manager for Enterprise for Windows that could allow a local authenticated user to execute arbitrary code with elevated privileges...

8.5CVSS5.7AI score0.0015EPSS
SaveExploits0References2
Rows per page
Query Builder