Lucene search
+L

113568 matches found

EUVD
EUVD
•added 2026/10/07 9:12 a.m.•10 views

EUVD-2026-94251

Missing Authorization vulnerability in WPMU DEV Hustle wordpress-popup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hustle: from n/a through 7.8.14.2...

4.3CVSS6AI score0.00259EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/07 5:48 a.m.•10 views

CVE-2019-8451

This repository does not have a README...

6.5CVSS7AI score0.94453EPSS
SaveExploits2
RedhatCVE
RedhatCVE
•added 2026/10/07 3:06 a.m.•13 views

CVE-2026-106355

A missing authorization flaw was found in the Media component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/559777100...

5.3CVSS5.7AI score0.00254EPSS
SaveExploits0References5
OSV
OSV
•added 2026/10/07 12:36 a.m.•10 views

CLEANSTART-2026-JM28284 Information disclosure via SetWatches reconnect replay in Apache ZooKeeper due to missing ACL check

Security vulnerability affects the spark package. Information disclosure via SetWatches reconnect replay in Apache ZooKeeper due to missing ACL check...

7.5CVSS5.8AI score0.00553EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/07 12:00 a.m.•7 views

CVE-2026-105876: Missing Authorization

Missing Authorization vulnerability in WP Chill Modula Image Gallery modula-best-grid-gallery allows Retrieve Embedded Sensitive Data.This issue affects Modula Image Gallery: from n/a through 3.0.11...

5.3CVSS5.8AI score0.00246EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/07 12:00 a.m.•12 views

PT-2026-107462

Missing Authorization vulnerability in WP Chill Modula Image Gallery modula-best-grid-gallery allows Retrieve Embedded Sensitive Data.This issue affects Modula Image Gallery: from n/a through 3.0.11...

5.3CVSS5.8AI score0.00246EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/10/07 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2026-106271

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Workers in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site...

8.1CVSS5.7AI score0.00231EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/10/07 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2026-106224

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain...

3.1CVSS5.9AI score0.00209EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/10/07 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2026-106198

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass web...

8.2CVSS5.8AI score0.00261EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/10/07 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2026-106406

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements v...

5.4CVSS5.7AI score0.00191EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/07 12:00 a.m.•11 views

PT-2026-107564

LMCache through 0.5.5 contains a missing authentication vulnerability in the multiprocess mode HTTP server that allows remote unauthenticated attackers to access management endpoints listening on all interfaces by default. Attackers can read environment credentials via GET /env and configuration...

9.4CVSS5.9AI score0.00584EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/07 12:00 a.m.•7 views

CVE-2026-76268: Missing Authentication for Critical Function

In Splunk Enterprise versions below 10.4.3 and 10.2.7, an unauthenticated user with network access to the Patroni Representational State Transfer REST Application Programming Interface API on a search head cluster member could execute attacker-controlled operating-system commands. The vulnerabili...

9.8CVSS6AI score0.004EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/07 12:00 a.m.•9 views

CVE-2026-107352: Missing Authorization

Missing authorization checks in Amazon Athena engine version 3 request handling could have allowed an authenticated user to read limited query metadata AWS account identifiers and SQL statement text from other AWS accounts. Query results, credentials, and Amazon S3 data were not affected. AWS...

7.7CVSS5.8AI score0.00201EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/07 12:00 a.m.•5 views

CVE-2026-82211: Missing Authorization

The Nexi XPay Build WordPress plugin through 7.6.2 does not verify the payment result supplied to several of its unauthenticated routes, allowing attackers to mark arbitrary orders as paid or failed, to cancel them, and to obtain order keys which expose guest buyers' details...

8.2CVSS6AI score0.00187EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/07 12:00 a.m.•8 views

CVE-2026-107206: Missing Authentication for Critical Function

LMCache through 0.5.5 contains a missing authentication vulnerability in the multiprocess mode HTTP server that allows remote unauthenticated attackers to access management endpoints listening on all interfaces by default. Attackers can read environment credentials via GET /env and configuration...

9.4CVSS5.9AI score0.00584EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/10/07 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2026-106384

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site...

6.5CVSS5.6AI score0.00237EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/10/07 12:00 a.m.•6 views

Linux Distros Unpatched Vulnerability : CVE-2026-106387

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive...

8.8CVSS5.7AI score0.00333EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/10/07 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2026-106225

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive informatio...

8.8CVSS5.8AI score0.00305EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/10/07 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2026-106425

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in BrowserTag in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged...

4.2CVSS5.7AI score0.00162EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/10/07 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2026-106312

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in SignIn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information...

6.5CVSS5.7AI score0.0022EPSS
SaveExploits0References2
Rows per page
Query Builder