CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

108 matches found

NVD•added 2026/07/08 1:16 a.m.•11 views

CVE-2026-56843

Incorrect authorization in the XML-RPC API of WebPros Plesk before 18.0.78.4 allows a low-privileged authenticated customer to look up domains they do not own, because ownership is enforced only for certain lookup filters and schema validation is bypassed for legacy protocol versions. This result...

9.9CVSS0.00364EPSS

Exploits0References1

Cvelist•added 2026/07/08 12:15 a.m.•41 views

CVE-2026-56843

9.9CVSS0.00364EPSS

Exploits0References1

Positive Technologies•added 2026/07/08 12:0 a.m.•9 views

PT-2026-56285

Name of the Vulnerable Software and Affected Versions WebPros Plesk versions prior to 18.0.78.4 Description Incorrect authorization in the XML-RPC API allows a low-privileged authenticated customer to look up domains they do not own. This occurs because ownership is enforced only for specific...

9.9CVSS6AI score0.00364EPSS

Exploits0References10

RedhatCVE•added 2026/01/09 8:34 a.m.•14 views

CVE-2024-41691

This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to storing of FTP credentials in plaintext within the SquashFS-root filesystem associated with the router's firmware. An attacker with physical access could exploit this by extracting the firmware and reverse engineer the binary...

7CVSS6.9AI score0.00152EPSS

Exploits0References1

CVE•added 2025/10/21 11:36 a.m.•21 views

CVE-2025-10639

CVE-2025-10639 affects WorkExaminer Professional Server. The FTP service on port 12304 uses weak hardcoded credentials, allowing an attacker with network access to login, modify/read data, and achieve remote code execution as NT AUTHORITY\SYSTEM by exchanging accessible binaries in the WorkExamin...

8.8CVSS7.8AI score0.00899EPSS

Exploits0References2