Lucene search
K

61504 matches found

Circl
Circl
added 2026/04/02 1:39 a.m.5 views

CVE-2015-4335

creationtimestamp| type| source ---|---|--- 2026-04-02 01:39:34+00:00| seen| https://gist.github.com/1191448/946f0101cc66a8dc8eec649ea42cf1c9...

10CVSS6.5AI score0.09636EPSS
Exploits2References1
Positive Technologies
Positive Technologies
added 2026/04/02 12:0 a.m.1 views

PT-2026-29850

A stack-based buffer overflow vulnerability was identified in TP-Link Tapo C520WS v2.6 within a configuration handling component due to insufficient input validation. An attacker can exploit this vulnerability by supplying an excessively long value for a vulnerable configuration parameter,...

7.1CVSS6.2AI score0.00259EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2026/04/02 12:0 a.m.6 views

PT-2026-29846

Name of the Vulnerable Software and Affected Versions TP-Link Tapo C520WS version 2.6 Description A heap-based buffer overflow exists in the HTTP POST body parsing logic due to insufficient boundary validation and missing validation of remaining buffer capacity after dynamic allocation when...

7.1CVSS6.9AI score0.00259EPSS
Exploits0References10
Positive Technologies
Positive Technologies
added 2026/04/02 12:0 a.m.6 views

PT-2026-29847

A heap-based buffer overflow vulnerability was identified in TP-Link Tapo C520WS v2.6 within the HTTP parsing loop when appending segmented request bodies without continuous write‑boundary verification, due to insufficient boundary validation when handling externally supplied HTTP input. An...

7.1CVSS6.1AI score0.00228EPSS
Exploits0References9
Positive Technologies
Positive Technologies
added 2026/04/02 12:0 a.m.9 views

PT-2026-29785

phpMyFAQ is an open source FAQ web application. Prior to version 4.1.1, the regex-based SVG sanitizer in phpMyFAQ SvgSanitizer.php can be bypassed using HTML entity encoding in javascript: URLs within SVG attributes. Any user with edit faq permission can upload a malicious SVG that executes...

5.4CVSS5.8AI score0.00176EPSS
Exploits1References3
CNNVD
CNNVD
added 2026/04/02 12:0 a.m.4 views

Suricata 安全漏洞

Suricata is a network IDS, IPS, and NSM engine developed by the Open Information Security Foundation. Versions of Suricata prior to 8.0.0 and 8.0.4 contained security vulnerabilities. These vulnerabilities stemmed from a quadratic complexity issue during the search for URLs in MIME-encoded SMTP...

7.5CVSS5.8AI score0.00272EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/04/02 12:0 a.m.6 views

PT-2026-29737

A vulnerability exists in Progress Flowmon versions prior to 12.5.8 and 13.0.6, whereby an administrator who clicks a malicious link provided by an attacker may inadvertently trigger unintended actions within their authenticated web session...

8.5CVSS5.9AI score0.00196EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/04/02 12:0 a.m.4 views

Progress Flowmon 跨站脚本漏洞

Progress Flowmon is a real-time network traffic monitoring tool developed by Progress Corporation. Versions of Progress Flowmon prior to 12.5.8 and 13.0.6 contained a cross-site scripting vulnerability. This vulnerability could lead to unexpected operations when administrators clicked on maliciou...

8.5CVSS5.7AI score0.00196EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/04/02 12:0 a.m.5 views

Acronis True Image 代码问题漏洞

Acronis True Image is a renowned data backup and restoration software developed by the Swiss company Acronis. This software can be used to create drive and disk images, and to restore those images when a clean system is required. Previous versions of Acronis True Image, such as version 42902, had...

6.7CVSS6.7AI score0.00096EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/02 12:0 a.m.8 views

PT-2026-29849

A critical HTTP authentication bypass CVE-2026-34121 has been identified in TP-Link devices, potentially allowing unauthorized access. Technical Breakdown Vulnerability Type: Authentication Bypass Impact: Allows an attacker to circumvent HTTP authentication mechanisms on affected TP-Link devices,...

8.8CVSS5.7AI score0.00447EPSS
Exploits0References9
Circl
Circl
added 2026/04/01 11:26 p.m.3 views

CVE-2026-4828

creationtimestamp| type| source ---|---|--- 2026-04-01 23:26:58+00:00| seen| Telegram/lZIbbZM6hBayBvqPlVKcR-m9kDIyKTvGCXDWINXAPChKhQ 2026-04-02 07:16:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3miinwhnlje2w 2026-04-03 20:40:08+00:00| seen|...

8.2CVSS5.8AI score0.0026EPSS
Exploits0References2
Circl
Circl
added 2026/04/01 11:26 p.m.2 views

CVE-2026-4924

creationtimestamp| type| source ---|---|--- 2026-04-01 23:26:58+00:00| seen| Telegram/lZIbbZM6hBayBvqPlVKcR-m9kDIyKTvGCXDWINXAPChKhQ 2026-04-02 07:16:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3miinwrvufm2w 2026-04-05 11:40:10+00:00| seen|...

8.2CVSS5.8AI score0.00326EPSS
Exploits0References3
NVD
NVD
added 2026/04/01 11:17 p.m.2 views

CVE-2026-32926

V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read vulnerability in VS6ComFile!loadlinkinf. Opening a crafted V7 file may lead to information disclosure from the affected product...

8.4CVSS0.00189EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/04/01 11:1 p.m.7 views

CVE-2026-5215

A vulnerability was identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. The impacted element is the function...

5.3CVSS5.6AI score0.00843EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/04/01 11:0 p.m.6 views

CVE-2026-5214

A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Impacted is the function...

9CVSS7.5AI score0.00715EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/04/01 11:0 p.m.5 views

CVE-2026-5212

A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. This issue affects the function...

9CVSS7.7AI score0.00737EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/04/01 11:0 p.m.7 views

CVE-2026-5213

A vulnerability was determined in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. The affected element is the function...

9CVSS7.6AI score0.00715EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/04/01 11:0 p.m.6 views

CVE-2026-5211

A flaw has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. This vulnerability affects the function...

9CVSS7.8AI score0.007EPSS
Exploits1References1
CVE
CVE
added 2026/04/01 10:58 p.m.6 views

CVE-2026-32926

CVE-2026-32926 affects Fuji Electric V-SFT. Affected versions: 6.2.10.0 and earlier. Root cause: an out-of-bounds read in VS6ComFile!load_link_inf when processing a crafted V7 file. Impact: information disclosure (permitted by the vulnerable component). Remediation: update the software to the lat...

8.4CVSS5.9AI score0.00189EPSS
Exploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/01 10:58 p.m.5 views

CVE-2026-32926

V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read vulnerability in VS6ComFile!loadlinkinf. Opening a crafted V7 file may lead to information disclosure from the affected product...

8.4CVSS5.9AI score0.00189EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder