Lucene search
+L

58458 matches found

Vulnrichment
Vulnrichment
added 2026/03/31 4:03 p.m.6 views

CVE-2026-5087 PAGI::Middleware::Session::Store::Cookie versions through 0.001003 for Perl generates random bytes insecurely

PAGI::Middleware::Session::Store::Cookie versions through 0.001003 for Perl generates random bytes insecurely. PAGI::Middleware::Session::Store::Cookie attempts to read bytes from the /dev/urandom device directly. If that fails for example, on systems without the device, such as Windows, then it...

5.9AI score0.00316EPSS
SaveExploits0References2
OSV
OSV
added 2026/03/31 4:03 p.m.12 views

CVE-2026-5087 PAGI::Middleware::Session::Store::Cookie versions through 0.001003 for Perl generates random bytes insecurely

PAGI::Middleware::Session::Store::Cookie versions through 0.001003 for Perl generates random bytes insecurely. PAGI::Middleware::Session::Store::Cookie attempts to read bytes from the /dev/urandom device directly. If that fails for example, on systems without the device, such as Windows, then it...

7.5CVSS6AI score
SaveExploits0References7
Cvelist
Cvelist
added 2026/03/31 3:45 p.m.40 views

CVE-2026-5203 CMS Made Simple UserGuide Module XML Import class.UserGuideImporterExporter.php _copyFilesToFolder path traversal

A vulnerability was found in CMS Made Simple up to 2.2.22. This impacts the function copyFilesToFolder in the library modules/UserGuide/lib/class.UserGuideImporterExporter.php of the component UserGuide Module XML Import. The manipulation results in path traversal. It is possible to launch the...

5.8CVSS0.00317EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2026/03/31 3:45 p.m.17 views

CVE-2026-5203 CMS Made Simple UserGuide Module XML Import class.UserGuideImporterExporter.php _copyFilesToFolder path traversal

A vulnerability was found in CMS Made Simple up to 2.2.22. This impacts the function copyFilesToFolder in the library modules/UserGuide/lib/class.UserGuideImporterExporter.php of the component UserGuide Module XML Import. The manipulation results in path traversal. It is possible to launch the...

5.8CVSS5.5AI score0.00317EPSS
SaveExploits1References4
CVE
CVE
added 2026/03/31 3:45 p.m.26 views

CVE-2026-5203

CMS Made Simple

5.8CVSS5.5AI score0.00317EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2026/03/31 3:45 p.m.9 views

CVE-2026-5203

A vulnerability was found in CMS Made Simple up to 2.2.22. This impacts the function copyFilesToFolder in the library modules/UserGuide/lib/class.UserGuideImporterExporter.php of the component UserGuide Module XML Import. The manipulation results in path traversal. It is possible to launch the...

5.8CVSS5.5AI score0.00317EPSS
SaveExploits1References4
IBM Security Bulletins
IBM Security Bulletins
added 2026/03/31 3:11 p.m.7 views

Security Bulletin: IBM App Connect Enterprise Certified Container is vulnerable to path traversal (CVE-2026-29045) loss of integrity (CVE-2026-29085) and loss of confidentiality (CVE-2026-29086)

Summary Node.js module hono is used by IBM App Connect Enterprise Certified Container. IBM App Connect Enterprise Certified Container operands are vulnerable to path traversal CVE-2026-29045 loss of integrity CVE-2026-29085 and loss of confidentiality CVE-2026-29086. This bulletin provides patch...

9.8CVSS5.7AI score0.00501EPSS
SaveExploits0Affected Software1
EUVD
EUVD
added 2026/03/31 12:31 p.m.8 views

EUVD-2024-55512

Sereal::Encoder versions from 4.000 through 4.009002 for Perl is vulnerable to a buffer overwrite flaw in the Zstandard library. Sereal::Encoder embeds a version of the Zstandard zstd library that is vulnerable to CVE-2019-11922. This is a race condition in the one-pass compression functions of...

8.1CVSS6AI score0.0143EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/03/31 10:04 a.m.6 views

CVE-2025-15618 Business::OnlinePayment::StoredTransaction versions through 0.01 for Perl uses an insecure secret key

Business::OnlinePayment::StoredTransaction versions through 0.01 for Perl uses an insecure secret key. Business::OnlinePayment::StoredTransaction generates a secret key by using a MD5 hash of a single call to the built-in rand function, which is unsuitable for cryptographic use. This key is...

5.9AI score0.00328EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/03/31 9:11 a.m.24 views

cpython: POP3 command injection in user-controlled commands

A flaw was found in the poplib module in the Python standard library. The poplib module does not reject control characters, such as newlines, in user-controlled input passed to POP3 commands. This issue allows an attacker to inject additional commands to be executed in the POP3 server...

5.9CVSS5.8AI score0.00334EPSS
SaveExploits0References7
OSV
OSV
added 2026/03/31 8:28 a.m.7 views

SUSE-SU-2026:1152-1 Security update for perl-XML-Parser

This update for perl-XML-Parser fixes the following issues: - CVE-2006-10002: heap buffer overflow in parsestream when processing UTF-8 input streams bsc1259901. - CVE-2006-10003: off-by-one heap buffer overflow in stserialstack bsc1259902...

9.8CVSS6AI score0.00604EPSS
SaveExploits0References5
Fedora
Fedora
added 2026/03/31 12:54 a.m.18 views

[SECURITY] Fedora 43 Update: perl-YAML-Syck-1.39-1.fc43

This module provides a Perl interface to the libsyck data serialization library. It exports the Dump and Load functions for converting Perl data structures to YAML strings, and the other way around...

9.1CVSS5.9AI score0.00429EPSS
SaveExploits0
EUVD
EUVD
added 2026/03/31 12:31 a.m.9 views

EUVD-2026-17253

A vulnerability was identified in code-projects Online Food Ordering System 1.0. Affected is an unknown function of the file /form/order.php of the component Order Module. Such manipulation of the argument custid leads to cross site scripting. The attack may be performed from remote. The exploit ...

5.3CVSS4.3AI score0.00337EPSS
SaveExploits0References6
NVD
NVD
added 2026/03/31 12:16 a.m.11 views

CVE-2026-5157

A vulnerability was identified in code-projects Online Food Ordering System 1.0. Affected is an unknown function of the file /form/order.php of the component Order Module. Such manipulation of the argument custid leads to cross site scripting. The attack may be performed from remote. The exploit ...

5.3CVSS0.00337EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/03/31 12:00 a.m.18 views

InvoiceShelf 代码问题漏洞

InvoiceShelf is an open-source invoice and expense management application developed by InvoiceShelf. Versions of InvoiceShelf prior to 2.2.0 had code vulnerabilities. These vulnerabilities stemmed from uncleaned HTML provided by users in the invoice PDF generation module, which could lead to...

8.7CVSS5.9AI score0.00261EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2026/03/31 12:00 a.m.28 views

Admidio 跨站请求伪造漏洞

Admidio is a set of open-source member management systems developed by the Admidio team. This system supports features such as member lists, event management, message boards, photo albums, and downloads. Prior to Admidio 5.0.8, there was a vulnerability related to cross-site request forgery. This...

7.3CVSS5.7AI score0.00169EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2026/03/31 12:00 a.m.12 views

The vulnerability of the fuse_read_args_fill() function in the fs/fuse/file.c module, which supports the Linux file system, allows a hacker to cause a service failure.

The vulnerability of the fusereadargsfill function in the fs/fuse/file.c module of the Linux kernel’s file system support mechanism is related to incorrect input data validation. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00221EPSS
SaveExploits0References19Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/03/31 12:00 a.m.9 views

The vulnerability of the dpll_device_get_by_id() function in the drivers/dpll/dpll_core.c module of the DPLL kernel driver of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the dplldevicegetbyid function in the drivers/dpll/dpllcore.c module of the DPLL kernel driver of the Linux operating system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00183EPSS
SaveExploits0References14Affected Software3
CNNVD
CNNVD
added 2026/03/31 12:00 a.m.16 views

baserCMS 操作系统命令注入漏洞

BaserCMS is a corporate-level content management system CMS developed by the BaserCMS team. Versions of BaserCMS prior to 5.2.3 had a vulnerability related to operating system command injection. This vulnerability originated from the core module of the installation process. Attackers could...

9.8CVSS7.5AI score0.02033EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/03/31 12:00 a.m.18 views

Admidio 跨站请求伪造漏洞

Admidio is a set of open-source member management systems developed by the Admidio team. This system supports features such as member lists, event management, message boards, photo albums, and downloads. Prior to Admidio 5.0.8, there was a cross-site request forgeing vulnerability. This...

4.3CVSS5.7AI score0.00133EPSS
SaveExploits1References3
Rows per page
Query Builder