Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

256477 matches found

Cvelist
Cvelist•added 2026/09/16 6:33 a.m.•41 views

CVE-2026-16794 Missing Authorization in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 18.11 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an authenticated user with the Security Manager role to execute arbitrary CI/CD jobs and access protected...

4.3CVSS0.00312EPSS
SaveExploits0References3
CVE
CVE•added 2026/09/16 6:33 a.m.•44 views

CVE-2026-16794

GitLab EE is affected by a missing authorization flaw in compliance framework management . Under certain conditions, an authenticated user holding the Security Manager role could execute arbitrary CI/CD jobs and access protected variables within group projects. The root cause is improper authoriz...

4.3CVSS6.4AI score0.00312EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD•added 2026/09/16 6:00 a.m.•19 views

EUVD-2026-80215

The FluentBoards WordPress plugin before 2.0.15 does not properly verify that a user holds board-manager privileges before performing several board-management operations, checking only board membership. This allows any member of a board to carry out manager-only actions on it, including adding or...

5.7AI score0.00255EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2026/09/16 6:00 a.m.•43 views

CVE-2026-89328 FluentBoards < 2.0.15 - Board Member+ Board Membership and Public Access Modification

The FluentBoards WordPress plugin before 2.0.15 does not properly verify that a user holds board-manager privileges before performing several board-management operations, checking only board membership. This allows any member of a board to carry out manager-only actions on it, including adding or...

0.00255EPSS
SaveExploits0References1
The Hacker News
The Hacker News•added 2026/09/16 5:18 a.m.•24 views

Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens

A critical security flaw in WSO2 API Manager has come under active exploitation in the wild, according to findings from watchTowr. The vulnerability, tracked as CVE-2026-5430 CVSS score: 9.8/10.0, is a case of improper verification of a cryptographic signature that could result in account takeove...

10CVSS8.2AI score0.00588EPSS
SaveExploits3
NVD
NVD•added 2026/09/16 3:17 a.m.•26 views

CVE-2026-92247

A security vulnerability has been detected in synaptikcms synaptik-cms up to 1.3.4.4. This affects the function rename of the file admin/file-manager.php of the component Admin File Manager. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been...

5.8CVSS0.00396EPSS
SaveExploits0References6
EUVD
EUVD•added 2026/09/16 2:45 a.m.•25 views

EUVD-2026-80091

A security vulnerability has been detected in synaptikcms synaptik-cms up to 1.3.4.4. This affects the function rename of the file admin/file-manager.php of the component Admin File Manager. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been...

5.8CVSS4.8AI score0.00396EPSS
SaveExploits0References6
CVE
CVE•added 2026/09/16 2:45 a.m.•27 views

CVE-2026-92247

CVE-2026-92247 affects synaptik-cms up to version 1.3.4.4 . The vulnerability resides in the rename function of admin/file-manager.php within the Admin File Manager component, where manipulation of this function leads to unrestricted upload of files. The attack can be initiated remotely but requi...

5.8CVSS5AI score0.00396EPSS
SaveExploits0References6
OSV
OSV•added 2026/09/16 2:45 a.m.•16 views

CVE-2026-92247 synaptikcms synaptik-cms Admin File Manager file-manager.php rename unrestricted upload

A security vulnerability has been detected in synaptikcms synaptik-cms up to 1.3.4.4. This affects the function rename of the file admin/file-manager.php of the component Admin File Manager. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been...

5.1CVSS5.1AI score
SaveExploits0References8
Cvelist
Cvelist•added 2026/09/16 2:45 a.m.•41 views

CVE-2026-92247 synaptikcms synaptik-cms Admin File Manager file-manager.php rename unrestricted upload

A security vulnerability has been detected in synaptikcms synaptik-cms up to 1.3.4.4. This affects the function rename of the file admin/file-manager.php of the component Admin File Manager. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been...

5.8CVSS0.00396EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment•added 2026/09/16 2:45 a.m.•23 views

CVE-2026-92247 synaptikcms synaptik-cms Admin File Manager file-manager.php rename unrestricted upload

A security vulnerability has been detected in synaptikcms synaptik-cms up to 1.3.4.4. This affects the function rename of the file admin/file-manager.php of the component Admin File Manager. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been...

5.8CVSS5AI score0.00396EPSS
SaveExploits0References6
OSV
OSV•added 2026/09/16 1:06 a.m.•17 views

CLEANSTART-2026-TO35695 Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection

Multiple security vulnerabilities affect the cert-manager package. Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. See references for individual vulnerability details...

9.8CVSS6.2AI score0.01625EPSS
SaveExploits3References113
OSV
OSV•added 2026/09/16 12:50 a.m.•12 views

CLEANSTART-2026-QB45720 Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection

Multiple security vulnerabilities affect the trust-manager package. Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. See references for individual vulnerability details...

9.8CVSS6.2AI score0.00834EPSS
SaveExploits2References53
EUVD
EUVD•added 2026/09/16 12:31 a.m.•26 views

EUVD-2026-80015

The myPRO Manager notification gateway exposes an unauthenticated HTTP endpoint used to send SMS messages through a connected GSM modem. The endpoint is accessible over the network and does not require authentication before accepting a phone number and message from a request and sending the...

6.3CVSS5.9AI score0.00339EPSS
SaveExploits0References4
EUVD
EUVD•added 2026/09/16 12:31 a.m.•23 views

EUVD-2026-80014

The mySCADA myPRO Manager command API does not properly enforce authentication for privileged functions. An unauthenticated attacker with network access to the affected API could exploit this vulnerability to access privileged management functions...

9.8CVSS5.8AI score0.00778EPSS
SaveExploits0References4
Fedora
Fedora•added 2026/09/16 12:17 a.m.•16 views

[SECURITY] Fedora 45 Update: rubygems-4.0.20-1.fc45

RubyGems is the Ruby standard for publishing and managing third party libraries...

7.5CVSS5.9AI score0.00401EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/09/16 12:00 a.m.•5 views

CVE-2026-11984: Missing Authorization

The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.8.16 due to a missing capability check on the ai-debug-code URL-parameter. This makes it possible for unauthenticated attackers to view...

5.3CVSS5.7AI score0.00286EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/09/16 12:00 a.m.•8 views

CVE-2026-92247: Unrestricted Upload of File with Dangerous Type

A security vulnerability has been detected in synaptikcms synaptik-cms up to 1.3.4.4. This affects the function rename of the file admin/file-manager.php of the component Admin File Manager. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been...

5.8CVSS4.8AI score0.00396EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/09/16 12:00 a.m.•7 views

CVE-2026-16794: Missing Authorization

GitLab has remediated an issue in GitLab EE affecting all versions from 18.11 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an authenticated user with the Security Manager role to execute arbitrary CI/CD jobs and access protected...

4.3CVSS6.4AI score0.00312EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/09/16 12:00 a.m.•10 views

CVE-2026-89328: Improper Access Control

The FluentBoards WordPress plugin before 2.0.15 does not properly verify that a user holds board-manager privileges before performing several board-management operations, checking only board membership. This allows any member of a board to carry out manager-only actions on it, including adding or...

3.8CVSS5.8AI score0.00255EPSS
SaveExploits0References2
Rows per page
Query Builder