Lucene search
+L

29572 matches found

EUVD
EUVD
added 2026/08/25 9:30 a.m.4 views

EUVD-2026-65318

FA-50 all versions miss authentication for some configuration. An attacker with access to the vessel's internal network can manipulate the product's settings screen to alter some configuration parameters...

8.7CVSS
SaveExploits0References4
CVE
CVE
added 2026/08/25 7:42 a.m.6 views

CVE-2026-67578

The Furuno FA-50 (all versions) has a missing authentication flaw affecting certain configuration parameters. An attacker with access to the vessel's internal network can manipulate the product's settings screen to alter configuration without authentication. The CVSS 3.1 score is 7.5 (HIGH) with ...

8.7CVSS5.4AI score
SaveExploits0References3
EUVD
EUVD
added 2026/08/25 4:45 a.m.5 views

EUVD-2026-65293

A vulnerability was detected in Fdawgs node-poppler up to 9.1.2/10.0.1. The impacted element is the function pdfInfo/pdfToText/pdfToCairo/pdfToPpm/pdfImages/pdfToHtml/pdfToPs/pdfFonts/pdfDetach/pdfAttach/pdfSeparate/pdfUnite of the file src/index.js of the component Argument Injection Handler...

7.5CVSS7.2AI score
SaveExploits0References8
EUVD
EUVD
added 2026/08/24 8:32 p.m.7 views

EUVD-2026-65122

A vulnerability was identified in HashiCorp Vault and Vault Enterprise “Vault” such that an authenticated attacker may manipulate an identity value referenced by a templated policy path to gain unintended access to Vault paths. An attacker who can control the referenced identity value may include...

6.8CVSS5.3AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/08/24 5:50 p.m.2 views

CVE-2026-44517

A flaw was found in Buildah. Insecure handling of temporary directories and symlinks during the image build process, specifically within TempDirForURL, downloadToDirectory, and stdinToDirectory functions, allows a malicious server supplying a Git repository or tar archive to cause files outside t...

6.3CVSS5AI score0.0018EPSS
SaveExploits0References8
NVD
NVD
added 2026/08/24 4:17 p.m.5 views

CVE-2026-67204

BookStack before 26.05.4 contains a broken access control vulnerability that allows authenticated API users with image-update or image-delete permissions to manipulate other users' avatars by exploiting missing content-type restrictions in the Image Gallery API endpoints. Attackers can supply a...

5.4CVSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/24 3:33 p.m.6 views

EUVD-2026-64919

BookStack before 26.05.4 contains a broken access control vulnerability that allows authenticated API users with image-update or image-delete permissions to manipulate other users' avatars by exploiting missing content-type restrictions in the Image Gallery API endpoints. Attackers can supply a...

5.3CVSS5.5AI score
SaveExploits0References4
CVE
CVE
added 2026/08/24 3:33 p.m.10 views

CVE-2026-67204

BookStack before 26.05.4 contains a broken access control vulnerability in the Image Gallery API endpoints . The API controller loads any image type without the content-type restrictions enforced by the web controller's gallery and drawio checks. An authenticated user with image-update or image-d...

5.4CVSS5.3AI score
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/24 3:33 p.m.18 views

CVE-2026-67204 BookStack < 26.05.4 Broken Access Control via Image Gallery API

BookStack before 26.05.4 contains a broken access control vulnerability that allows authenticated API users with image-update or image-delete permissions to manipulate other users' avatars by exploiting missing content-type restrictions in the Image Gallery API endpoints. Attackers can supply a...

5.4CVSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/24 2:36 p.m.5 views

CVE-2026-74618

A flaw was found in the Linux kernel's binfmtmisc component. An unprivileged local user can exploit this vulnerability by manipulating user and mount namespaces to repeatedly trigger a warning condition during the mounting of binfmtmisc. This repeated triggering can lead to kernel log flooding,...

5.5CVSS5.4AI score0.00168EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/08/24 2:36 p.m.6 views

CVE-2026-74619

A flaw was found in the Linux kernel's overlay filesystem overlayfs. An unprivileged local user can repeatedly trigger a warning condition by manipulating user and mount namespaces and file system context operations. This can lead to kernel log flooding, kernel tainting, and potentially a system...

5.5CVSS5.3AI score0.00168EPSS
SaveExploits0References4
NVD
NVD
added 2026/08/24 2:17 p.m.5 views

CVE-2026-77995

Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client 3.2.0 - The manipulation of a cookie value allows actors to login as arbitrary accounts, including admins...

10CVSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/24 1:05 p.m.5 views

EUVD-2026-64844

Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client 3.2.0 - The manipulation of a cookie value allows actors to login as arbitrary accounts, including admins...

10CVSS5.6AI score
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/24 1:05 p.m.23 views

CVE-2026-77995 Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client < 3.2.0

Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client 3.2.0 - The manipulation of a cookie value allows actors to login as arbitrary accounts, including admins...

10CVSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/08/24 1:05 p.m.7 views

CVE-2026-77995 Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client < 3.2.0

Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client 3.2.0 - The manipulation of a cookie value allows actors to login as arbitrary accounts, including admins...

10CVSS5.5AI score
SaveExploits0References1
CVE
CVE
added 2026/08/24 1:05 p.m.23 views

CVE-2026-77995

CVE-2026-77995 is an arbitrary account takeover vulnerability in the miniOrange OAuth Client Joomla extension, affecting versions prior to 3.2.0 . The flaw is caused by the manipulation of a cookie value , allowing an unauthenticated attacker to log in as any account on the site, including admini...

10CVSS5.5AI score
SaveExploits0References1
Nuclei
Nuclei
added 2026/08/24 5:53 a.m.66 views

Online Fire Reporting System v1.0 - SQL injection

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/classes/Master.php?f=deleteteam. id: CVE-2022-31977 info: name: Online Fire Reporting System v1.0 - SQL injection author: theamanrawat severity: critical description: | Online Fire Reporting System v1.0 is vulnerable to SQ...

9.8CVSS9.2AI score0.07224EPSS
SaveExploits1References3
Nuclei
Nuclei
added 2026/08/24 5:53 a.m.113 views

Atom CMS v2.0 - SQL Injection

AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php. id: CVE-2022-24223 info: name: Atom CMS v2.0 - SQL Injection author: theamanrawat severity: critical description: | AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php...

9.8CVSS9.1AI score0.61965EPSS
SaveExploits4References5
Nuclei
Nuclei
added 2026/08/24 5:53 a.m.78 views

Agentejo Cockpit < 0.11.2 - NoSQL Injection

Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php check function. The $eq operator matches documents where the value of a field equals the specified value. id: CVE-2020-35846 info: name: Agentejo Cockpit 0.11.2 - NoSQL Injection author: dwisiswant0 severity: critic...

9.8CVSS8.7AI score0.93292EPSS
SaveExploits11References5
Nuclei
Nuclei
added 2026/08/24 5:53 a.m.52 views

Online Fire Reporting System v1.0 - SQL injection

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=user/manageuser&id=. id: CVE-2022-31975 info: name: Online Fire Reporting System v1.0 - SQL injection author: theamanrawat severity: high description: | Online Fire Reporting System v1.0 is vulnerable to SQL...

7.2CVSS7.6AI score0.04906EPSS
SaveExploits1References3
Rows per page
Query Builder