Lucene search
+L

256 matches found

OSV
OSV
added 2026/01/29 12:43 a.m.2 views

CGA-57CH-26MR-6HVV

Bulletin has no description...

6.5CVSS6.8AI score0.02055EPSS
SaveExploits0
OSV
OSV
added 2026/01/29 12:42 a.m.4 views

CGA-33GW-Q7HR-G2JC

Bulletin has no description...

5.3CVSS5.8AI score0.00935EPSS
SaveExploits1
OSV
OSV
added 2026/01/29 12:39 a.m.3 views

CGA-2G49-3HVG-8P4X

Bulletin has no description...

3.7CVSS7.3AI score0.01012EPSS
SaveExploits0
OSV
OSV
added 2026/01/29 12:37 a.m.1 views

CGA-2GHH-5J5C-F45Q

Bulletin has no description...

6.5CVSS5.8AI score0.00876EPSS
SaveExploits0
OSV
OSV
added 2026/01/25 1:48 a.m.3 views

MINI-VMM6-8GH8-63QW

Bulletin has no description...

7.5CVSS5AI score0.00438EPSS
SaveExploits0
EUVD
EUVD
added 2026/01/24 8:26 a.m.10 views

EUVD-2026-4550

The All-in-One Video Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajaxcallbackstoreusermeta function in versions 4.1.0 to 4.6.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, ...

4.3CVSS5.7AI score0.00161EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/01/23 2:28 p.m.9 views

EUVD-2026-4376

Missing Authorization vulnerability in Ashan Perera LifePress lifepress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LifePress: from n/a through = 2.1.3...

5.4AI score0.00192EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/01/23 12:23 p.m.8 views

EUVD-2026-4413

Improper Restriction of Excessive Authentication Attempts, Weak Password Recovery Mechanism for Forgotten Password vulnerability in Birebirsoft Software and Technology Solutions Sufirmam allows Brute Force, Password Recovery Exploitation.This issue affects Sufirmam: through 23012026. NOTE: The...

9.4CVSS5.4AI score0.00376EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/01/23 12:00 a.m.12 views

EUVD-2026-4247

Null pointer dereference in free5gc pcf 1.4.0 in file internal/sbi/processor/ampolicy.go in function HandleDeletePoliciesPolAssoId...

7.5CVSS5.3AI score0.00435EPSS
SaveExploits1References3
EUVD
EUVD
added 2026/01/22 4:52 p.m.7 views

EUVD-2026-3977

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in jegtheme JNews - Pay Writer jnews-pay-writer allows PHP Local File Inclusion.This issue affects JNews - Pay Writer: from n/a through = 11.0.0...

5.5AI score0.00413EPSS
SaveExploits0References2
OSV
OSV
added 2026/01/22 12:30 p.m.7 views

CGA-4PJ5-R99W-8MR3

Bulletin has no description...

6.1CVSS5AI score0.00271EPSS
SaveExploits1
EUVD
EUVD
added 2026/01/20 5:30 a.m.8 views

EUVD-2026-3467

The WP Hello Bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'digitone' and 'digittwo' parameters in all versions up to, and including, 1.02 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

4.4CVSS5.7AI score0.00211EPSS
SaveExploits0References8
EUVD
EUVD
added 2026/01/20 4:14 a.m.4 views

EUVD-2026-3451

Inappropriate implementation in Blink in Google Chrome on Android prior to 144.0.7559.59 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: High...

5.4CVSS5.4AI score0.0019EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/01/16 7:09 p.m.6 views

EUVD-2026-2887

BOOTP Turbo 2.0.0.1253 contains an unquoted service path vulnerability in its Windows service configuration. Attackers can exploit the unquoted path to execute arbitrary code with elevated LocalSystem privileges during system startup or reboot...

8.5CVSS7.3AI score0.0014EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/01/16 7:09 p.m.16 views

EUVD-2026-2907

Ubee EVW327 contains a cross-site request forgery vulnerability that allows attackers to enable remote access without user interaction. Attackers can craft a malicious webpage that automatically submits a form to change router remote access settings to port 8080 without the user's consent...

5.3CVSS6.4AI score0.00194EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/01/16 12:30 a.m.19 views

EUVD-2026-3019

EUVD-2026-3019...

7.5CVSS6.4AI score0.00376EPSS
SaveExploits1References4
EUVD
EUVD
added 2026/01/14 5:28 a.m.7 views

EUVD-2026-2560

The Testimonials Creator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in version 1.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject...

4.4CVSS4.8AI score0.00216EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/01/14 12:31 a.m.10 views

EUVD-2026-2587

EUVD-2026-2587...

8.5CVSS6.4AI score0.00162EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/01/14 12:31 a.m.9 views

EUVD-2026-2596

EUVD-2026-2596...

8.8CVSS6.4AI score0.00816EPSS
SaveExploits1References6
OSV
OSV
added 2026/01/14 12:04 a.m.7 views

ECHO-8C4E-D922-13F7

Bulletin has no description...

6.9AI score0.00174EPSS
SaveExploits0References1
Rows per page
Query Builder