Lucene search
+L

7881 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/20 12:00 a.m.•13 views

CVE-2026-6588: Missing Authentication for Critical Function

A weakness has been identified in serge-chat serge up to 1.4TB. The impacted element is the function downloadmodel/deletemodel of the file api/src/serge/routers/model.py of the component Model API Endpoint. Executing a manipulation can lead to missing authentication. The attack can be launched...

6.9CVSS6.1AI score0.00433EPSS
SaveExploits0References3
NVD
NVD
•added 2026/04/19 11:16 p.m.•35 views

CVE-2026-6582

A flaw has been found in TransformerOptimus SuperAGI up to 0.0.14. Affected by this issue is the function getvectordbdetails of the file superagi/controllers/vectordbs.py of the component Vector Database Management Endpoint. Executing a manipulation can lead to missing authentication. The attack...

7.5CVSS0.00391EPSS
SaveExploits0References4
Mend
Mend
•added 2026/04/19 10:45 p.m.•24 views

CVE-2026-6582

A flaw has been found in TransformerOptimus SuperAGI up to 0.0.14. Affected by this issue is the function getvectordbdetails of the file superagi/controllers/vectordbs.py of the component Vector Database Management Endpoint. Executing a manipulation can lead to missing authentication. The attack...

7.5CVSS6.6AI score0.00391EPSS
SaveExploits0References4
CVE
CVE
•added 2026/04/19 10:00 p.m.•68 views

CVE-2026-6579

Summary (CVE-2026-6579): A weakness identified in the DjangoBlog project by liangliangyy up to version 2.1.0.0 affects an unknown function in blog/views.py within the Clean Endpoint component. This manipulation results in missing authentication, enabling remote initiation of an attack. The exploi...

6.9CVSS6AI score0.00433EPSS
SaveExploits0References4
Mend
Mend
•added 2026/04/19 10:00 p.m.•11 views

CVE-2026-6579

A weakness has been identified in liangliangyy DjangoBlog up to 2.1.0.0. This impacts an unknown function of the file blog/views.py of the component Clean Endpoint. This manipulation causes missing authentication. The attack may be initiated remotely. The exploit has been made available to the...

6.9CVSS6AI score0.00433EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/04/19 10:00 p.m.•33 views

CVE-2026-6579

A weakness has been identified in liangliangyy DjangoBlog up to 2.1.0.0. This impacts an unknown function of the file blog/views.py of the component Clean Endpoint. This manipulation causes missing authentication. The attack may be initiated remotely. The exploit has been made available to the...

6.9CVSS6AI score0.00433EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
•added 2026/04/19 10:00 p.m.•17 views

CVE-2026-6579 liangliangyy DjangoBlog Clean Endpoint views.py missing authentication

A weakness has been identified in liangliangyy DjangoBlog up to 2.1.0.0. This impacts an unknown function of the file blog/views.py of the component Clean Endpoint. This manipulation causes missing authentication. The attack may be initiated remotely. The exploit has been made available to the...

6.9CVSS6AI score0.00433EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/04/19 9:31 p.m.•28 views

EUVD-2026-23708

A vulnerability was identified in liangliangyy DjangoBlog up to 2.1.0.0. The impacted element is an unknown function of the file owntracks/views.py of the component logtracks Endpoint. The manipulation leads to missing authentication. The attack can be initiated remotely. The exploit is publicly...

7.5CVSS6.7AI score0.00391EPSS
SaveExploits0References5
Mend
Mend
•added 2026/04/19 7:30 p.m.•11 views

CVE-2026-6577

A vulnerability was identified in liangliangyy DjangoBlog up to 2.1.0.0. The impacted element is an unknown function of the file owntracks/views.py of the component logtracks Endpoint. The manipulation leads to missing authentication. The attack can be initiated remotely. The exploit is publicly...

7.5CVSS6.7AI score0.00391EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/04/19 7:30 p.m.•18 views

CVE-2026-6577 liangliangyy DjangoBlog logtracks Endpoint views.py missing authentication

A vulnerability was identified in liangliangyy DjangoBlog up to 2.1.0.0. The impacted element is an unknown function of the file owntracks/views.py of the component logtracks Endpoint. The manipulation leads to missing authentication. The attack can be initiated remotely. The exploit is publicly...

7.5CVSS6.7AI score0.00391EPSS
SaveExploits0References4
CVE
CVE
•added 2026/04/19 7:30 p.m.•50 views

CVE-2026-6577

The CVE-2026-6577 entry identifies a vulnerability in liangliangyy DjangoBlog up to 2.1.0.0 affecting an unknown function in the file owntracks/views.py of the logtracks Endpoint. The manipulation results in missing authentication, with remote exploitation and a publicly available exploit. Docume...

7.5CVSS6.7AI score0.00391EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/04/19 7:30 p.m.•69 views

CVE-2026-6577 liangliangyy DjangoBlog logtracks Endpoint views.py missing authentication

A vulnerability was identified in liangliangyy DjangoBlog up to 2.1.0.0. The impacted element is an unknown function of the file owntracks/views.py of the component logtracks Endpoint. The manipulation leads to missing authentication. The attack can be initiated remotely. The exploit is publicly...

7.5CVSS0.00391EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/19 12:00 a.m.•9 views

CVE-2026-6579: Missing Authentication for Critical Function

A weakness has been identified in liangliangyy DjangoBlog up to 2.1.0.0. This impacts an unknown function of the file blog/views.py of the component Clean Endpoint. This manipulation causes missing authentication. The attack may be initiated remotely. The exploit has been made available to the...

6.9CVSS6AI score0.00433EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/19 12:00 a.m.•9 views

CVE-2026-6582: Missing Authentication for Critical Function

A flaw has been found in TransformerOptimus SuperAGI up to 0.0.14. Affected by this issue is the function getvectordbdetails of the file superagi/controllers/vectordbs.py of the component Vector Database Management Endpoint. Executing a manipulation can lead to missing authentication. The attack...

7.5CVSS6.6AI score0.00391EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/19 12:00 a.m.•8 views

CVE-2026-6577: Missing Authentication for Critical Function

A vulnerability was identified in liangliangyy DjangoBlog up to 2.1.0.0. The impacted element is an unknown function of the file owntracks/views.py of the component logtracks Endpoint. The manipulation leads to missing authentication. The attack can be initiated remotely. The exploit is publicly...

7.5CVSS6.7AI score0.00391EPSS
SaveExploits0References3
GithubExploit
GithubExploit
•added 2026/04/18 11:48 a.m.•220 views

Exploit for Missing Authentication for Critical Function in Nginxui Nginx_Ui

CVE-2026-33032 / MCPwn !CVEhttps://img.shields.io/badge/C...

9.8CVSS8.3AI score0.35273EPSS
SaveExploits21
Cvelist
Cvelist
•added 2026/04/17 7:36 p.m.•59 views

CVE-2026-40461 Anviz Products Missing Authentication for Critical Function

Anviz CX2 Lite and CX7 are vulnerable to unauthenticated POST requests that modify debug settings e.g., enabling SSH, allowing unauthorized state changes that can facilitate later compromise...

7.5CVSS0.00285EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/04/17 7:36 p.m.•24 views

CVE-2026-40461 Anviz Products Missing Authentication for Critical Function

Anviz CX2 Lite and CX7 are vulnerable to unauthenticated POST requests that modify debug settings e.g., enabling SSH, allowing unauthorized state changes that can facilitate later compromise...

7.5CVSS5.8AI score0.00285EPSS
SaveExploits0References3
CVE
CVE
•added 2026/04/17 7:36 p.m.•55 views

CVE-2026-40461

CVE-2026-40461 affects Anviz CX2 Lite and CX7. The flaw allows unauthenticated POST requests to modify debug settings (e.g., enabling SSH), causing unauthorized state changes that can facilitate later compromise. According to the provided documents, affected components are the devices’ debug/admi...

7.5CVSS5.8AI score0.00285EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/17 12:00 a.m.•7 views

CVE-2026-40461: Missing Authentication for Critical Function

Anviz CX2 Lite and CX7 are vulnerable to unauthenticated POST requests that modify debug settings e.g., enabling SSH, allowing unauthorized state changes that can facilitate later compromise...

7.5CVSS5.7AI score0.00285EPSS
SaveExploits0References2
Rows per page
Query Builder