Lucene search
K

61538 matches found

CNNVD
CNNVD
added 2026/03/25 12:0 a.m.4 views

WordPress plugin WP Telegram Widget and Join Link 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

7.1CVSS5.6AI score0.00175EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/03/25 12:0 a.m.5 views

Apple多款产品 安全漏洞

Apple iOS, among others, are products of the American company Apple. Apple iOS is an operating system developed for mobile devices. Apple macOS is a specialized operating system designed for Mac computers. Apple iPadOS is an operating system for iPad tablets. Several of Apple’s products have...

5.5CVSS5.8AI score0.00197EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2026/03/25 12:0 a.m.9 views

PT-2026-27793

Name of the Vulnerable Software and Affected Versions Cisco Catalyst SD-WAN Manager affected versions not specified Description A flaw exists in the web-based management interface that may allow a remote attacker with valid credentials to perform a cross-site scripting XSS attack against a user...

5.4CVSS6.2AI score0.00159EPSS
Exploits0References4
GitLab Advisory Database
GitLab Advisory Database
added 2026/03/25 12:0 a.m.4 views

Vikjuna: Link Share Hash Disclosure via ReadAll Endpoint Enables Permission Escalation

The LinkSharing.ReadAll method allows link share authenticated users to list all link shares for a project, including their secret hashes. While LinkSharing.CanRead correctly blocks link share users from reading individual shares via ReadOne, the ReadAllWeb handler bypasses this check by never...

7.5CVSS5.8AI score0.00398EPSS
Exploits1References7Affected Software1
Positive Technologies
Positive Technologies
added 2026/03/25 12:0 a.m.6 views

PT-2026-27641

Name of the Vulnerable Software and Affected Versions OM Workspace versions 2.4 and earlier Description The installer for OM Workspace Windows Edition insecurely loads Dynamic Link Libraries DLLs. This could allow an attacker to execute arbitrary code with the privileges of the user running the...

8.4CVSS7.5AI score0.00144EPSS
Exploits0References6
CNNVD
CNNVD
added 2026/03/25 12:0 a.m.9 views

Apple多款产品 安全漏洞

Apple iOS, among others, are products of the American company Apple. Apple iOS is an operating system developed for mobile devices. Apple macOS is a specialized operating system designed for Mac computers. Apple iPadOS is an operating system for iPad tablets. Several of Apple’s products have...

6.2CVSS5.8AI score0.00232EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/03/25 12:0 a.m.8 views

PT-2026-27810

Name of the Vulnerable Software and Affected Versions Mattermost versions 11.4.0 and earlier Mattermost versions 11.3.1 and earlier Mattermost versions 11.2.3 and earlier Mattermost versions 10.11.11 and earlier Description The software does not properly prevent the rendering of external Scalable...

7.5CVSS5.9AI score0.00351EPSS
Exploits0References8
CNNVD
CNNVD
added 2026/03/25 12:0 a.m.7 views

Apple macOS 安全漏洞

Apple macOS is a proprietary operating system developed by the American company Apple for Mac computers. Vulnerabilities exist in versions of Apple macOS such as Sequoia 15.7.5, Sonoma 14.8.5, and Tahoe 26.4. These vulnerabilities stem from improper handling of symbolic links, which may allow...

5.5CVSS5.8AI score0.0021EPSS
Exploits0References3
Circl
Circl
added 2026/03/24 11:2 p.m.1 views

CVE-2026-27651

creationtimestamp| type| source ---|---|--- 2026-03-24 23:02:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtoniqce52x 2026-03-25 03:00:09+00:00| seen| https://my.f5.com/manage/s/article/K000160366 2026-03-25 14:35:13+00:00| seen|...

8.7CVSS5.3AI score0.00532EPSS
Exploits0References6
Circl
Circl
added 2026/03/24 10:53 p.m.3 views

CVE-2026-4775

creationtimestamp| type| source ---|---|--- 2026-03-24 22:53:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhto45lnmg2m 2026-03-25 03:00:12+00:00| seen| https://access.redhat.com/security/cve/CVE-2026-4775 2026-04-22 22:14:15+00:00| seen|...

7.8CVSS4.9AI score0.00553EPSS
Exploits0References6
Circl
Circl
added 2026/03/24 10:24 p.m.2 views

CVE-2026-4433

creationtimestamp| type| source ---|---|--- 2026-03-24 22:24:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhtmjja5tt2i 2026-03-25 14:35:20+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mhvcqq6ubg2b...

4.8CVSS5.8AI score0.00247EPSS
Exploits0References2
Circl
Circl
added 2026/03/24 10:17 p.m.1 views

CVE-2025-33242

creationtimestamp| type| source ---|---|--- 2026-03-24 22:17:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhtm4tasah27...

5.9CVSS5.8AI score0.00311EPSS
Exploits0References1
Circl
Circl
added 2026/03/24 10:14 p.m.3 views

CVE-2026-33215

creationtimestamp| type| source ---|---|--- 2026-03-24 22:14:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhtlxhblnx2o...

6.5CVSS5.8AI score0.0024EPSS
Exploits0References1
Circl
Circl
added 2026/03/24 10:0 p.m.5 views

CVE-2026-24150

creationtimestamp| type| source ---|---|--- 2026-03-24 22:00:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhtl5zpwak2m 2026-03-24 22:39:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhtnd3pcxn2n 2026-03-25 23:40:08+00:00| seen|...

7.8CVSS5.8AI score0.00208EPSS
Exploits0References3
EUVD
EUVD
added 2026/03/24 9:31 p.m.5 views

EUVD-2026-14988

An Improper Input Validation vulnerability in UniFi Network Server may allow unauthorized access to an account if the account owner is socially engineered into clicking a malicious link. Affected Products: UniFi Network Server Version 10.1.85 and earlier Mitigation: Update UniFi Network Server to...

8.8CVSS5.8AI score0.00358EPSS
Exploits0References2
NVD
NVD
added 2026/03/24 8:16 p.m.6 views

CVE-2026-22559

An Improper Input Validation vulnerability in UniFi Network Server may allow unauthorized access to an account if the account owner is socially engineered into clicking a malicious link. Affected Products: UniFi Network Server Version 10.1.85 and earlier Mitigation: Update UniFi Network Server to...

8.8CVSS0.00358EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/03/24 7:5 p.m.24 views

CVE-2026-22559

An Improper Input Validation vulnerability in UniFi Network Server may allow unauthorized access to an account if the account owner is socially engineered into clicking a malicious link. Affected Products: UniFi Network Server Version 10.1.85 and earlier Mitigation: Update UniFi Network Server to...

8.8CVSS0.00358EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/03/24 7:5 p.m.4 views

CVE-2026-22559

An Improper Input Validation vulnerability in UniFi Network Server may allow unauthorized access to an account if the account owner is socially engineered into clicking a malicious link. Affected Products: UniFi Network Server Version 10.1.85 and earlier Mitigation: Update UniFi Network Server to...

8.8CVSS5.8AI score0.00358EPSS
Exploits0References1
CVE
CVE
added 2026/03/24 7:5 p.m.39 views

CVE-2026-22559

CVE-2026-22559 concerns an improper input validation in UniFi Network Server (affected: 10.1.85 and earlier) that may allow unauthorized account access if the account owner is socially engineered into clicking a malicious link. Impact is high (C, I, A: High) with network access, user interaction ...

8.8CVSS5.8AI score0.00358EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/24 6:52 p.m.9 views

EUVD-2026-14182

pyLoad is a free and open-source download manager written in Python. Prior to version 0.5.0b3.dev97, a Host Header Spoofing vulnerability in the @localcheck decorator allows unauthenticated external attackers to bypass local-only restrictions. This grants access to the Click'N'Load API endpoints,...

8.8CVSS5.8AI score0.00428EPSS
Exploits5References18
Rows per page
Query Builder