Lucene search
K

2891 matches found

GithubExploit
GithubExploit
added 2026/03/27 3:57 p.m.126 views

Exploit for Missing Authentication for Critical Function in Mcpjam Inspector

No d...

9.8CVSS5.8AI score0.28064EPSS
Exploits28
UbuntuCve
UbuntuCve
added 2026/03/27 3:16 p.m.2 views

CVE-2026-33206

calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books. Prior to version 9.6.0, a path traversal vulnerability exists in Calibre' handling of images in Markdown and other similar text-based files allowing an attacker to include arbitrary files from the...

8.2CVSS5.9AI score0.0002EPSS
Exploits1References2
GithubExploit
GithubExploit
added 2026/03/27 2:14 p.m.131 views

Exploit for Missing Authentication for Critical Function in Mcpjam Inspector

CVE-2026-23744 python script for exploiting CVE-2026-23744...

9.8CVSS6AI score0.28064EPSS
Exploits28
EUVD
EUVD
added 2026/03/27 1:53 p.m.2 views

EUVD-2026-16612

calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books. Prior to version 9.6.0, a path traversal vulnerability exists in Calibre' handling of images in Markdown and other similar text-based files allowing an attacker to include arbitrary files from the...

8.2CVSS5.9AI score0.0002EPSS
Exploits1References1
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2026/03/27 8:18 a.m.20 views

Multiple vulnerabilities in BUFFALO Wi-Fi routers

Overview Wi-Fi router products provided by BUFFALO INC. contain multiple vulnerabilities listed below. Dependency on vulnerable third-party component CWE-1395 - This issue is caused by a vulnerability in minihttpd CVE-2015-1548. OS command injection CWE-78 - CVE-2026-27650 Code injection CWE-94 -...

9.8CVSS7.3AI score0.00318EPSS
Exploits1References10
NVD
NVD
added 2026/03/27 6:16 a.m.2 views

CVE-2026-33366

Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allow an attacker to forcibly reboot the product without authentication...

6.9CVSS0.00155EPSS
Exploits0References2
CVE
CVE
added 2026/03/27 5:25 a.m.9 views

CVE-2026-33366

CVE-2026-33366 concerns BUFFALO Wi-Fi router products with a vulnerability in a critical function that is missing authentication, potentially allowing an attacker to forcibly reboot the device over the network without valid credentials. The issue is described with two CVSS vectors: CVSS3.0 base s...

6.9CVSS5.8AI score0.00155EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2026/03/27 5:25 a.m.31 views

CVE-2026-33366

Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allow an attacker to forcibly reboot the product without authentication...

6.9CVSS0.00155EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/03/27 5:25 a.m.0 views

CVE-2026-33366

Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allow an attacker to forcibly reboot the product without authentication...

6.9CVSS6.1AI score0.00155EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/03/27 12:0 a.m.3 views

PT-2026-28477

Name of the Vulnerable Software and Affected Versions BUFFALO Wi-Fi router products affected versions not specified Description A missing authentication check for a critical function allows an attacker to forcibly reboot the product without authentication. There is no information about the number...

6.9CVSS5.9AI score0.00155EPSS
Exploits0References4
EUVD
EUVD
added 2026/03/26 9:31 p.m.3 views

EUVD-2026-16379

Missing Authentication for Critical Function vulnerability in Drupal AJAX Dashboard allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AJAX Dashboard: from 0.0.0 before 3.1.0...

5.8AI score0.00015EPSS
Exploits0References2
NVD
NVD
added 2026/03/26 9:17 p.m.0 views

CVE-2026-3527

Missing Authentication for Critical Function vulnerability in Drupal AJAX Dashboard allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AJAX Dashboard: from 0.0.0 before 3.1.0...

6.5CVSS0.00015EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/26 8:3 p.m.4 views

CVE-2026-3527

Missing Authentication for Critical Function vulnerability in Drupal AJAX Dashboard allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AJAX Dashboard: from 0.0.0 before 3.1.0...

5.8AI score0.00015EPSS
Exploits0References2
CVE
CVE
added 2026/03/26 8:3 p.m.9 views

CVE-2026-3527

CVE-2026-3527 affects Drupal AJAX Dashboard prior to 3.1.0. The Red Hat and EU/ENISA reports corroborate a missing authentication for a critical function in the AJAX Dashboard module, enabling exploitation due to incorrectly configured access control. The vulnerability stems from inadequate acces...

6.5CVSS5.8AI score0.00015EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2026/03/26 8:3 p.m.17 views

CVE-2026-3527 AJAX Dashboard - Critical - Access bypass - SA-CONTRIB-2026-022

Missing Authentication for Critical Function vulnerability in Drupal AJAX Dashboard allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AJAX Dashboard: from 0.0.0 before 3.1.0...

0.00015EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/03/26 8:3 p.m.1 views

CVE-2026-3527 AJAX Dashboard - Critical - Access bypass - SA-CONTRIB-2026-022

Missing Authentication for Critical Function vulnerability in Drupal AJAX Dashboard allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AJAX Dashboard: from 0.0.0 before 3.1.0...

5.9AI score0.00015EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/03/26 3:16 p.m.0 views

CVE-2026-2756

A security vulnerability has been detected in OmniPEMF NeoRhythm up to 20260308. This affects an unknown function of the component BLE Interface. Such manipulation leads to missing authentication. The attack can only be initiated within the local network. This attack is characterized by high...

5CVSS5.3AI score0.0003EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/03/26 3:16 p.m.2 views

CVE-2026-4476

A vulnerability was found in Yi Technology YI Home Camera 2 2.1.120171024151200. The impacted element is an unknown function of the file home/web/ipc of the component CGI Endpoint. Performing a manipulation results in missing authentication. Access to the local network is required for this attack...

6.3CVSS6AI score0.0001EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/03/26 3:15 p.m.4 views

CVE-2026-4582

A security vulnerability has been detected in Shenzhen HCC Technology MPOS M6 PLUS 1V.31-N. Affected by this vulnerability is an unknown functionality of the component Bluetooth. Such manipulation leads to missing authentication. The attack must be carried out from within the local network. Attac...

5CVSS5.3AI score0.0001EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/03/26 3:12 p.m.2 views

CVE-2026-3651

The Build App Online plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 1.0.23. This is due to the plugin registering the 'build-app-online-update-vendor-product' AJAX action via wpajaxnopriv without proper authentication checks, capability verificatio...

5.3CVSS5.9AI score0.00179EPSS
Exploits0References1
Rows per page
Query Builder