Lucene search
+L

111609 matches found

BDU FSTEC
BDU FSTEC
added 2026/03/24 12:00 a.m.8 views

The vulnerability of the seg6_hmac_init() function in the net/ipv6/seg6_hmac.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the seg6hmacinit function in the net/ipv6/seg6hmac.c module of the Linux kernel is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS7AI score0.00277EPSS
SaveExploits0References21Affected Software3
CNVD
CNVD
added 2026/03/24 12:00 a.m.14 views

Google Chrome has an unknown vulnerability (CNVD-2026-29293)

Google Chrome is a web browser developed by Google Inc. of the United States. Google Chrome has a security vulnerability, which stems from improper implementation of the V8 engine. Attackers can exploit this vulnerability to execute arbitrary code within the sandbox...

8.8CVSS7.6AI score0.00354EPSS
SaveExploits1
CNNVD
CNNVD
added 2026/03/24 12:00 a.m.14 views

Apache Artemis 安全漏洞

Apache Artemis is a messaging broker software developed by the Apache Foundation. Versions of Apache Artemis such as 2.52.0 and earlier, as well as Apache ActiveMQ Artemis versions like 2.44.0 and earlier, have security vulnerabilities. These vulnerabilities stem from improper authorization, whic...

4.3CVSS5.8AI score0.00422EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/03/24 12:00 a.m.19 views

PT-2026-27333

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in linkingvision rapidvms.This issue affects rapidvms: before PR96...

7.8CVSS5.8AI score0.00111EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/03/24 12:00 a.m.15 views

PT-2026-27348

CWE-20 vulnerability in MolotovCherry Android-ImageMagick7.This issue affects Android-ImageMagick7: before 7.1.2-11...

9.8CVSS5.8AI score0.00284EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/03/24 12:00 a.m.11 views

PT-2026-27337

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in joncampbell123 doslib.This issue affects doslib: before doslib-20250729...

7.8CVSS5.8AI score0.00116EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2026/03/24 12:00 a.m.8 views

The vulnerability in the function mdio_bus_init() of the drivers/net/phy/mdio_bus.c file, a driver for supporting Physical Layer (PHY) devices in Linux operating systems, allows a hacker to cause a service failure.

The vulnerability of the mdiobusinit function in the drivers/net/phy/mdiobus.c module of the Linux physical-layer network support driver is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause a system failure...

5.5CVSS7AI score0.00284EPSS
SaveExploits0References21Affected Software3
NVD
NVD
added 2026/03/23 10:16 p.m.12 views

CVE-2026-32300

Connect-CMS is a content management system. In versions on the 1.x series up to and including 1.41.0 and versions on the 2.x series up to and including 2.41.0, an improper authorization issue in the My Page profile update feature may allow modification of arbitrary user information. Versions 1.41...

8.1CVSS0.00305EPSS
SaveExploits0References4
OSV
OSV
added 2026/03/23 9:40 p.m.9 views

CVE-2026-32300 Connect CMS: Improper Authorization in the My Page Profile Update Feature Allows Modification of Arbitrary User Information

Connect-CMS is a content management system. In versions on the 1.x series up to and including 1.41.0 and versions on the 2.x series up to and including 2.41.0, an improper authorization issue in the My Page profile update feature may allow modification of arbitrary user information. Versions 1.41...

8.1CVSS6AI score
SaveExploits0References6
CVE
CVE
added 2026/03/23 9:40 p.m.27 views

CVE-2026-32300

This CVE entry relates to Connect CMS (My Page Profile Update) with an improper authorization flaw that can allow an authenticated attacker to modify arbitrary user information (including passwords). Affected versions are 1.x up to 1.41.0 and 2.x up to 2.41.0. The vulnerability enables takeover o...

8.1CVSS5.9AI score0.00305EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2026/03/23 9:37 p.m.20 views

CVE-2026-32299 Connect CMS: Information Disclosure Due to Improper Authorization through the Page Content Retrieval Feature

Connect-CMS is a content management system. In versions on the 1.x series up to and including 1.41.0 and versions on the 2.x series up to and including 2.41.0, an improper authorization issue in the page content retrieval feature may allow retrieval of non-public information. Versions 1.41.1 and...

7.5CVSS5.8AI score
SaveExploits0References5
Cvelist
Cvelist
added 2026/03/23 9:37 p.m.46 views

CVE-2026-32299 Connect CMS: Information Disclosure Due to Improper Authorization through the Page Content Retrieval Feature

Connect-CMS is a content management system. In versions on the 1.x series up to and including 1.41.0 and versions on the 2.x series up to and including 2.41.0, an improper authorization issue in the page content retrieval feature may allow retrieval of non-public information. Versions 1.41.1 and...

7.5CVSS0.00268EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/03/23 9:37 p.m.5 views

CVE-2026-32299 Connect CMS: Information Disclosure Due to Improper Authorization through the Page Content Retrieval Feature

Connect-CMS is a content management system. In versions on the 1.x series up to and including 1.41.0 and versions on the 2.x series up to and including 2.41.0, an improper authorization issue in the page content retrieval feature may allow retrieval of non-public information. Versions 1.41.1 and...

7.5CVSS5.8AI score0.00268EPSS
SaveExploits0References3
CVE
CVE
added 2026/03/23 9:36 p.m.39 views

CVE-2026-32913

OpenClaw prior to version 2026.3.7 has an improper header validation in fetchWithSsrFGuard that forwards custom authorization headers across cross-origin redirects. This allows an attacker to trigger redirects to different origins and intercept headers such as X-Api-Key and Private-Token intended...

9.3CVSS5.8AI score0.00316EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2026/03/23 8:39 p.m.17 views

GHSA-QR6X-WVXR-8HM9 Connect CMS: Improper Authorization in the My Page Profile Update Feature Allows Modification of Arbitrary User Information

Security Advisory — My Page Profile Update Improper Authorization Summary An improper authorization issue in the My Page profile update feature may allow modification of arbitrary user information. Affected Versions - 1.x series: = 1.41.0 - 2.x series: = 2.41.0 Patched Versions - 1.41.1 - 2.41.1...

8.1CVSS5.9AI score0.00305EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2026/03/23 8:39 p.m.14 views

Connect CMS: Improper Authorization in the My Page Profile Update Feature Allows Modification of Arbitrary User Information

Security Advisory — My Page Profile Update Improper Authorization Summary An improper authorization issue in the My Page profile update feature may allow modification of arbitrary user information. Affected Versions - 1.x series: = 1.41.0 - 2.x series: = 2.41.0 Patched Versions - 1.41.1 - 2.41.1...

8.1CVSS5.9AI score0.00305EPSS
SaveExploits0References6Affected Software1
EUVD
EUVD
added 2026/03/23 8:39 p.m.19 views

EUVD-2026-14576

Connect CMS: Improper Authorization in the My Page Profile Update Feature Allows Modification of Arbitrary User Information...

8.1CVSS5.8AI score0.00305EPSS
SaveExploits0References4
OSV
OSV
added 2026/03/23 8:38 p.m.5 views

GHSA-62CH-J6X7-722J Connect CMS: Information Disclosure Due to Improper Authorization through the Page Content Retrieval Feature

Security Advisory — Page Content Retrieval Improper Authorization Summary An improper authorization issue in the page content retrieval feature may allow retrieval of non-public information. Affected Versions - 1.x series: = 1.41.0 - 2.x series: = 2.41.0 Patched Versions - 1.41.1 - 2.41.1...

7.5CVSS5.7AI score0.00268EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/03/23 8:38 p.m.20 views

EUVD-2026-14574

Connect CMS: Information Disclosure Due to Improper Authorization through the Page Content Retrieval Feature...

7.5CVSS5.8AI score0.00268EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2026/03/23 8:38 p.m.28 views

Connect CMS: Information Disclosure Due to Improper Authorization through the Page Content Retrieval Feature

Security Advisory — Page Content Retrieval Improper Authorization Summary An improper authorization issue in the page content retrieval feature may allow retrieval of non-public information. Affected Versions - 1.x series: = 1.41.0 - 2.x series: = 2.41.0 Patched Versions - 1.41.1 - 2.41.1...

7.5CVSS5.7AI score0.00268EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder