1695 matches found
CVE-2026-67558
creationtimestamp| type| source ---|---|--- 2026-08-11 20:15:10+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-223-01 2026-08-11 22:24:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/66wymlkohacrk...
CVE-2026-66098
creationtimestamp| type| source ---|---|--- 2026-08-11 20:15:08+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-223-01...
CVE-2026-66875
creationtimestamp| type| source ---|---|--- 2026-08-11 20:15:05+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-223-01 2026-08-11 22:35:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4au4rs5yxajip 2026-08-12 00:01:42+00:00| seen|...
CVE-2026-66832
creationtimestamp| type| source ---|---|--- 2026-08-11 20:15:03+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-223-01...
CVE-2026-18844
creationtimestamp| type| source ---|---|--- 2026-08-11 20:14:43+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mstgjkadjw26 2026-08-11 20:15:22+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-223-02...
EUVD-2026-54309
ICS-Park Smart Park Management System v2.0 contains an unrestricted file upload vulnerability in the file upload module. This allows a remote attacker to execute arbitrary code...
EUVD-2026-54307
Insecure Permissions vulnerability in ics-park v.2.0 allows a remote attacker to escalate privileges via the /system/role/save endpoint in RoleController.java and system/user/update endpoint in UserController.java...
CVE-2026-67687
Insecure Permissions vulnerability in ics-park v.2.0 allows a remote attacker to escalate privileges via the /system/role/save endpoint in RoleController.java and system/user/update endpoint in UserController.java...
CVE-2026-67687
The CVE-2026-67687 case concerns ICS-Park Smart Park Management System v2.0 (based on RuoYi). A vertical privilege escalation exists via missing authorization checks in two endpoints: /system/role/save (RoleController.java) and /system/user/update (UserController.java). An authenticated low-privi...
CVE-2026-67687
Insecure Permissions vulnerability in ics-park v.2.0 allows a remote attacker to escalate privileges via the /system/role/save endpoint in RoleController.java and system/user/update endpoint in UserController.java...
CVE-2026-67688
ICS-Park Smart Park Management System v2.0 is affected by an unrestricted file upload vulnerability in the file upload module, enabling a remote attacker to upload arbitrary files and potentially achieve remote code execution. The CVE entry rates this as CRITICAL (CVSS 3.1: 9.8) with network acce...
CVE-2026-67688
ICS-Park Smart Park Management System v2.0 contains an unrestricted file upload vulnerability in the file upload module. This allows a remote attacker to execute arbitrary code...
CVE-2026-16581
creationtimestamp| type| source ---|---|--- 2026-07-28 16:51:38+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-06 2026-07-28 17:04:20+00:00| seen| https://bsky.app/profile/cerberusit.bsky.social/post/3mrpve6p6qi23 2026-07-28 17:04:22+00:00| seen|...
CVE-2025-39721
creationtimestamp| type| source ---|---|--- 2026-07-28 16:19:37+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04...
CVE-2025-37972
creationtimestamp| type| source ---|---|--- 2026-07-28 16:18:51+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04...
CVE-2025-37917
creationtimestamp| type| source ---|---|--- 2026-07-28 16:18:42+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04...
VulnCheck KEV: CVE-2026-8496
A cross-site scripting XSS vulnerability exists in Alinto SOGo, version 5.12.7. A maliciously crafted ICS calendar invitation files allows arbitrary JavaScript execution within the authenticated SOGo webmail session. The issue occurs because SVG content embedded in the description field of an ICS...
CVE-2026-8312
creationtimestamp| type| source ---|---|--- 2026-07-16 16:15:32+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-01 2026-07-21 08:50:12+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr5gi7fnva2p 2026-07-25 10:51:50+00:00| seen|...