Lucene search
+L

110672 matches found

CNNVD
CNNVD
added 2026/04/20 12:00 a.m.19 views

NEMU 安全漏洞

NEMU is an open-source teaching system simulator developed by XiangShan. Versions of NEMU prior to v2025.12.r2 contained security vulnerabilities. These vulnerabilities were caused by improper instruction validation in the RISC-V Vector decoder, which could lead to incorrect trap behavior,...

7.5CVSS5.8AI score0.00543EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/04/20 12:00 a.m.13 views

EcclesiaCRM 安全漏洞

EcclesiaCRM is a customer relationship management software for church management, developed by the French individual phili67. Versions of EcclesiaCRM 8.0.0 and earlier contained security vulnerabilities. These vulnerabilities were caused by improper handling of the custom parameter in the...

6.5CVSS6.7AI score0.00196EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/20 12:00 a.m.16 views

DjangoBlog 安全漏洞

DjangoBlog is a blog system developed by liangliangyy using Django. Versions of DjangoBlog 2.1.0.0 and earlier have security vulnerabilities. These vulnerabilities stem from incorrect handling of the oauthid parameter in the oauth/views.py file, which may lead to improper authorization...

6.5CVSS6.6AI score0.00206EPSS
SaveExploits0References1
CISA KEV Catalog
CISA KEV Catalog
added 2026/04/20 12:00 a.m.27 views

PaperCut NG/MF Improper Authentication Vulnerability

PaperCut NG/MF contains an improper authentication vulnerability that could allow remote attackers to bypass authentication on affected installations via the SecurityRequestFilter class...

8.2CVSS7.5AI score0.77388EPSS
SaveIn wildExploits2
CISA KEV Catalog
CISA KEV Catalog
added 2026/04/20 12:00 a.m.12 views

Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability

Quest KACE Systems Management Appliance SMA contains an improper authentication vulnerability that could allow attackers to impersonate legitimate users without valid credentials...

10CVSS6AI score0.02417EPSS
SaveIn wildExploits0
CNNVD
CNNVD
added 2026/04/20 12:00 a.m.14 views

dify 安全漏洞

dify is an open-source LLM application development platform developed by LangGenius. Versions of dify prior to 0.6.9 contained security vulnerabilities. These vulnerabilities were caused by improper handling of the parameter url in the getapitoolproviderremoteschema function of the...

6.5CVSS6.6AI score0.00201EPSS
SaveExploits0References1
Redos
Redos
added 2026/04/20 12:00 a.m.11 views

ROS-20260420-73-0014

A vulnerability in the PKCS7digestfromattributes function of the OpenSSL library is related to insufficient checking for unusual or exceptional states. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

5.3CVSS7.1AI score0.00502EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2026/04/20 12:00 a.m.30 views

PT-2026-33782

A weakness has been identified in Pagekit CMS up to 1.0.18. This issue affects the function evaluate of the file app/modules/view/src/PhpEngine.php of the component StringStorage Template Handler. This manipulation causes improper neutralization of directives in dynamically evaluated code. Remote...

5.8CVSS5.3AI score0.00244EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/04/20 12:00 a.m.30 views

PT-2026-33808

Name of the Vulnerable Software and Affected Versions Dell PowerProtect Data Domain appliances versions 7.7.1.0 through 8.7.0.0 Dell PowerProtect Data Domain appliances versions 8.3.1.0 through 8.3.1.20 Dell PowerProtect Data Domain appliances versions 7.13.1.0 through 7.13.1.60 Description An...

6.7CVSS5.8AI score0.00087EPSS
SaveExploits0References4
AlmaLinux
AlmaLinux
added 2026/04/20 12:00 a.m.22 views

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: scsi: qla2xxx: Fix improper freeing of purex item CVE-2025-68741 kernel: ALSA: aloop: Fix racy access at PCM trigger CVE-2026-23191 For more details about the security issues, including t...

9.8CVSS6AI score0.0042EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2026/04/20 12:00 a.m.16 views

Memos 安全漏洞

Memos is an open-source memo center with knowledge management and social features, hosted on a server. Memos versions 0.22.1 and earlier have a security vulnerability. This vulnerability stems from improper handling of the parameters additionalStyle/additionalScript in the UpdateInstanceSetting...

6.5CVSS6.6AI score0.00252EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/04/20 12:00 a.m.20 views

PT-2026-33794

Dell PowerProtect Data Domain, versions 8.5 through 8.6 contain an improper input validation vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges...

7.2CVSS6.1AI score0.00417EPSS
SaveExploits0References4
CNVD
CNVD
added 2026/04/20 12:00 a.m.17 views

Dell PowerProtect Data Domain OS Command Injection Vulnerability

Dell PowerProtect Data Domain is a data protection and deduplication storage appliance. An operating system command injection vulnerability exists in Dell PowerProtect Data Domain. The vulnerability stems from a failure to properly neutralize a specific element used for OS command injection, whic...

6.7CVSS5.9AI score0.00571EPSS
SaveExploits0
GithubExploit
GithubExploit
added 2026/04/19 7:34 p.m.325 views

Exploit for Improper Resource Shutdown or Release in Apache Http_Server

No d...

5.9CVSS6.8AI score0.03024EPSS
SaveExploits1
NVD
NVD
added 2026/04/19 1:16 p.m.18 views

CVE-2026-6572

A security vulnerability has been detected in Collabora KodExplorer up to 4.52. Affected by this issue is some unknown functionality of the file /app/controller/share.class.php of the component fileUpload Endpoint. The manipulation of the argument fileUpload leads to improper authorization. Remot...

6.3CVSS0.00323EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/04/19 12:31 p.m.16 views

EUVD-2026-23692

A vulnerability was found in EMQ EMQX Enterprise up to 6.1.0. The impacted element is an unknown function of the component Session Handling. The manipulation results in improper authorization. It is possible to launch the attack remotely. The exploit has been made public and could be used. The...

5.3CVSS5.3AI score0.00334EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/04/19 12:15 p.m.41 views

CVE-2026-6572 Collabora KodExplorer fileUpload Endpoint share.class.php improper authorization

A security vulnerability has been detected in Collabora KodExplorer up to 4.52. Affected by this issue is some unknown functionality of the file /app/controller/share.class.php of the component fileUpload Endpoint. The manipulation of the argument fileUpload leads to improper authorization. Remot...

6.3CVSS0.00323EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/04/19 12:15 p.m.6 views

CVE-2026-6572 Collabora KodExplorer fileUpload Endpoint share.class.php improper authorization

A security vulnerability has been detected in Collabora KodExplorer up to 4.52. Affected by this issue is some unknown functionality of the file /app/controller/share.class.php of the component fileUpload Endpoint. The manipulation of the argument fileUpload leads to improper authorization. Remot...

6.3CVSS4.8AI score0.00323EPSS
SaveExploits0References4
CVE
CVE
added 2026/04/19 12:15 p.m.20 views

CVE-2026-6572

Collabora KodExplorer up to 4.52 is affected by a vulnerability in the fileUpload Endpoint, specifically in /app/controller/share.class.php where manipulation of the fileUpload argument leads to improper authorization. Remote exploitation is possible with high attack complexity, and exploitation ...

6.3CVSS5.2AI score0.00323EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/04/19 10:15 a.m.45 views

CVE-2026-6569 kodcloud KodExplorer fileGet Endpoint share.class.php improper authentication

A vulnerability was identified in kodcloud KodExplorer up to 4.52. This impacts the function fileGet of the file /app/controller/share.class.php of the component fileGet Endpoint. Such manipulation of the argument fileUrl leads to improper authentication. The attack can be launched remotely. The...

7.5CVSS0.00414EPSS
SaveExploits0References4
Rows per page
Query Builder