Lucene search
+L

13567 matches found

OSV
OSV
added 2026/05/19 4:12 p.m.7 views

MINI-V638-52V2-599H

Bulletin has no description...

7.2CVSS5.7AI score0.00104EPSS
SaveExploits0
OSV
OSV
added 2026/05/19 3:59 p.m.10 views

MINI-WVPF-RH8F-G3RR

Bulletin has no description...

7.5CVSS5.7AI score0.00161EPSS
SaveExploits1
OSV
OSV
added 2026/05/19 3:59 p.m.9 views

MINI-FPCW-FP24-283F

Bulletin has no description...

6.1CVSS5.7AI score0.00108EPSS
SaveExploits0
OSV
OSV
added 2026/05/19 3:59 p.m.11 views

MINI-4M24-PP3X-RXPH

Bulletin has no description...

5.3CVSS5.7AI score0.00204EPSS
SaveExploits0
OSV
OSV
added 2026/05/19 3:59 p.m.7 views

MINI-P49V-X2VW-FXPH

Bulletin has no description...

7.2CVSS5.7AI score0.00104EPSS
SaveExploits0
NVD
NVD
added 2026/05/19 2:16 p.m.22 views

CVE-2026-8969

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 151 and Thunderbird 151...

8.1CVSS0.0029EPSS
SaveExploits0References3
NVD
NVD
added 2026/05/19 2:16 p.m.27 views

CVE-2026-8965

Information disclosure in the DOM: Security component. This vulnerability was fixed in Firefox 151 and Thunderbird 151...

7.5CVSS0.00324EPSS
SaveExploits0References3
NVD
NVD
added 2026/05/19 2:16 p.m.20 views

CVE-2026-8948

Same-origin policy bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 151 and Thunderbird 151...

9.1CVSS0.0042EPSS
SaveExploits0References6
NVD
NVD
added 2026/05/19 2:16 p.m.18 views

CVE-2026-42097

Sparx Pro Cloud Server requires authentication based on requested URL. An attacker can omit the "model" query parameter and send the model name only in the binary blob in POST request allowing SQL query execution without authentication. The vendor was notified early about this vulnerability, but...

9.3CVSS0.00941EPSS
SaveExploits3References4
OSV
OSV
added 2026/05/19 2:16 p.m.15 views

UBUNTU-CVE-2026-8969

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 151 and Thunderbird 151...

8.1CVSS5.8AI score0.0029EPSS
SaveExploits0References6
OSV
OSV
added 2026/05/19 2:16 p.m.13 views

UBUNTU-CVE-2026-8965

Information disclosure in the DOM: Security component. This vulnerability was fixed in Firefox 151 and Thunderbird 151...

7.5CVSS5.8AI score0.00324EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2026/05/19 2:16 p.m.11 views

CVE-2026-8965

Information disclosure in the DOM: Security component. This vulnerability was fixed in Firefox 151 and Thunderbird 151...

7.5CVSS5.8AI score0.00324EPSS
SaveExploits0References5
OSV
OSV
added 2026/05/19 2:16 p.m.17 views

UBUNTU-CVE-2026-8962

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11...

8.1CVSS5.8AI score0.00372EPSS
SaveExploits0References10
RedhatCVE
RedhatCVE
added 2026/05/19 1:56 p.m.21 views

CVE-2026-44721

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, a stored cross-site scripting XSS vulnerability that allows any authenticated user with model creation permission workspace.models to execute arbitrary JavaScript in the browser of a...

7.3CVSS7.4AI score0.00308EPSS
SaveExploits1References1
RedHat Linux
RedHat Linux
added 2026/05/19 1:23 p.m.18 views

firefox: thunderbird: Use-after-free in the DOM: Core & HTML component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Core & HTML component...

7.5CVSS5.7AI score0.00586EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/05/19 1:23 p.m.16 views

firefox: thunderbird: Incorrect boundary conditions in the DOM: Device Interfaces component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the DOM: Device Interfaces component...

6.5CVSS5.7AI score0.00231EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/05/19 12:59 p.m.53 views

CVE-2026-42097 Authentication Bypass in Sparx Pro Cloud Server

Sparx Pro Cloud Server requires authentication based on requested URL. An attacker can omit the "model" query parameter and send the model name only in the binary blob in POST request allowing SQL query execution without authentication. The vendor was notified early about this vulnerability, but...

9.3CVSS0.00941EPSS
SaveExploits3References4
Vulnrichment
Vulnrichment
added 2026/05/19 12:59 p.m.12 views

CVE-2026-42097 Authentication Bypass in Sparx Pro Cloud Server

Sparx Pro Cloud Server requires authentication based on requested URL. An attacker can omit the "model" query parameter and send the model name only in the binary blob in POST request allowing SQL query execution without authentication. The vendor was notified early about this vulnerability, but...

9.3CVSS6AI score0.00941EPSS
SaveExploits3References4
EUVD
EUVD
added 2026/05/19 12:59 p.m.19 views

EUVD-2026-30931

Sparx Pro Cloud Server requires authentication based on requested URL. An attacker can omit the "model" query parameter and send the model name only in the binary blob in POST request allowing SQL query execution without authentication. The vendor was notified early about this vulnerability, but...

9.3CVSS6AI score0.00941EPSS
SaveExploits3References4
ATTACKERKB
ATTACKERKB
added 2026/05/19 12:59 p.m.10 views

CVE-2026-42097

Sparx Pro Cloud Server requires authentication based on requested URL. An attacker can omit the "model" query parameter and send the model name only in the binary blob in POST request allowing SQL query execution without authentication. The vendor was notified early about this vulnerability, but...

9.3CVSS6AI score0.00941EPSS
SaveExploits3References5
Rows per page
Query Builder